$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d760a4d0-1f4e-3320-be56-0e534bf615df.roa File: d760a4d0-1f4e-3320-be56-0e534bf615df.roa (raw, json) Hash identifier: WP2j0BS4ZsXyfrhU0UiXy/IPeafPNOB9GMV+Mf0NiY0= Subject key identifier: 77:F5:EB:1B:0F:2E:B5:D3:73:FD:0E:2B:7F:77:B6:67:5C:96:E2:74 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849C4D4CF9B5891A80385535C80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d760a4d0-1f4e-3320-be56-0e534bf615df.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 8069 IP address blocks: 20.33.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:cf:9b:58:91:a8:03:85:53:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=16baf933-7479-46a7-926a-c292ad2fe06d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:92:ec:82:4f:2a:ad:2b:06:b3:db:05:5e:9a: 84:af:f9:94:91:8b:c3:d6:11:41:37:22:85:68:0f: 22:c9:e3:c5:bf:96:89:26:55:a9:7b:1e:8d:60:b5: 84:a6:d2:09:30:af:cb:de:8b:17:c7:92:ab:4b:31: cc:68:f5:73:f2:8b:3b:34:c8:6f:d6:f3:14:ca:32: a1:ab:5b:6a:9b:18:4a:a8:b4:b3:47:6a:7f:6d:4d: 6b:1d:5b:40:74:68:f4:0d:4f:b5:1c:bd:da:1d:2e: b5:ff:f4:b0:77:e2:46:97:25:c0:ea:60:01:79:0b: 02:6a:89:62:db:c0:45:a4:4e:a1:15:8d:15:8e:99: ea:75:b3:5f:25:d5:86:3f:ac:56:49:f6:85:bf:0f: fb:4d:92:e6:79:3d:d7:db:52:7a:55:05:ce:39:1c: e8:ff:54:25:24:d9:30:1f:26:f2:6e:3d:84:72:9c: 04:e3:ae:6f:f7:57:a9:15:1d:7f:c7:cc:dc:16:ab: 91:5a:75:8f:87:e3:c8:a0:7a:81:b4:ec:8c:e4:05: 2f:c8:5f:2d:e6:af:39:dc:61:f9:c1:b5:bb:88:ad: 6e:af:92:31:71:32:8b:a4:74:6e:db:8d:05:49:93: cd:6c:2c:2e:ed:25:13:d3:a1:3a:ad:13:66:60:c6: e0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F5:EB:1B:0F:2E:B5:D3:73:FD:0E:2B:7F:77:B6:67:5C:96:E2:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d760a4d0-1f4e-3320-be56-0e534bf615df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:52:b9:fd:a9:4f:b7:55:4d:fd:24:a5:05:4a:55:b4:3e:34: c4:d4:eb:ad:9b:67:7b:ed:74:d4:bb:d7:12:0b:3b:f8:da:65: e8:d4:54:56:00:43:27:08:40:b7:d8:17:70:f1:da:37:aa:ae: 05:83:fa:e6:4e:fb:94:10:cb:7f:a0:6a:36:7d:27:8a:f1:f3: 91:c6:31:0f:64:6e:d8:31:13:43:2c:4d:7b:44:fa:3e:af:01: 95:f8:90:0e:43:f1:89:67:d2:46:f3:b7:23:fe:06:e3:3d:1d: fd:b5:a0:c5:66:dd:c0:77:8c:48:d3:65:d8:5a:40:d4:2d:3c: cc:75:08:92:c4:bd:37:a8:21:7c:dc:58:35:0a:6a:59:4e:41: 57:a5:61:fd:a7:42:fd:39:09:28:32:19:a9:e8:aa:b3:b3:7a: 8b:4b:17:e2:b5:08:ef:f6:1a:1c:19:a9:c4:75:c3:2b:2c:20: fa:46:02:66:eb:11:4b:47:ac:e9:12:42:73:58:6d:94:61:b6: dd:6f:e8:69:e0:ad:46:2d:bf:8a:34:58:35:4b:ad:e0:5e:0b: 0e:7f:b1:f4:68:f1:9a:44:6a:88:e5:45:99:43:0f:30:9b:bf: 86:dc:94:0f:c8:d4:a5:b2:af:d3:d2:4d:3b:34:cc:d1:8d:ac: 8e:24:76:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1M+bWJGoA4VTXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk MTZiYWY5MzMtNzQ3OS00NmE3LTkyNmEtYzI5MmFkMmZlMDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJLsgk8qrSsGs9sFXpqEr/mUkYvD1hFBNyKF aA8iyePFv5aJJlWpex6NYLWEptIJMK/L3osXx5KrSzHMaPVz8os7NMhv1vMUyjKh q1tqmxhKqLSzR2p/bU1rHVtAdGj0DU+1HL3aHS61//Swd+JGlyXA6mABeQsCaoli 28BFpE6hFY0VjpnqdbNfJdWGP6xWSfaFvw/7TZLmeT3X21J6VQXOORzo/1QlJNkw Hybybj2EcpwE465v91epFR1/x8zcFquRWnWPh+PIoHqBtOyM5AUvyF8t5q853GH5 wbW7iK1ur5IxcTKLpHRu240FSZPNbCwu7SUT06E6rRNmYMbgjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHf16xsPLrXTc/0OK393tmdcluJ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDc2MGE0ZDAtMWY0ZS0z MzIwLWJlNTYtMGU1MzRiZjYxNWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpSuf2pT7dVTf0kpQVKVbQ+NMTU662bZ3vtdNS71xILO/jaZejUVFYA QycIQLfYF3Dx2jeqrgWD+uZO+5QQy3+gajZ9J4rx85HGMQ9kbtgxE0MsTXtE+j6v AZX4kA5D8Yln0kbztyP+BuM9Hf21oMVm3cB3jEjTZdhaQNQtPMx1CJLEvTeoIXzc WDUKallOQVelYf2nQv05CSgyGanoqrOzeotLF+K1CO/2GhwZqcR1wyssIPpGAmbr EUtHrOkSQnNYbZRhtt1v6GngrUYtv4o0WDVLreBeCw5/sfRo8ZpEaojlRZlDDzCb v4bclA/I1KWyr9PSTTs0zNGNrI4kduw= -----END CERTIFICATE-----Generated at Sun Jun 15 15:34:18 2025 by rpki-client