$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ede11131-09a5-3938-9e03-0196812fb57b.roa File: ede11131-09a5-3938-9e03-0196812fb57b.roa (raw, json) Hash identifier: DWW70cTWvrf2qM/QLvHl1jBLCgcv03kJLoDPgDA5+MM= Subject key identifier: 26:8B:A2:D7:31:7A:75:E7:FF:3A:E3:6D:AE:F0:9A:A3:3A:CC:8B:20 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858497C3EF385E669293F71483240 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ede11131-09a5-3938-9e03-0196812fb57b.roa Signing time: Fri 11 Apr 2025 01:00:48 +0000 ROA not before: Fri 11 Apr 2025 01:00:48 +0000 ROA not after: Thu 10 Jul 2025 01:00:48 +0000 asID: 8069 IP address blocks: 20.33.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:3e:f3:85:e6:69:29:3f:71:48:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 11 01:00:48 2025 GMT Not After : Jul 10 01:00:48 2025 GMT Subject: CN=4c7d35b3-154f-4422-866a-7bcbeb94d063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:b4:7f:d8:f2:de:3a:6f:fb:df:80:cc:0e:5b: 5b:26:af:8e:fc:dc:e1:9a:e8:ef:f5:2d:02:66:a7: 21:17:0d:4a:4a:bd:7d:c1:b7:46:34:12:d5:54:4c: 45:b0:8e:c2:99:53:3e:bf:9b:10:18:e5:93:53:8d: a0:c5:e4:06:23:6f:aa:e1:26:57:99:03:36:26:8d: 21:7b:a2:80:73:41:f1:a6:e2:5b:49:3e:a1:fe:f7: c9:7f:99:91:dd:9a:61:9d:d5:96:eb:be:51:c5:c2: 61:bf:25:98:9f:12:19:b5:34:70:2e:f5:cf:75:fb: 04:16:e9:91:44:4e:8e:63:c9:1f:12:96:32:42:4c: 84:51:dd:07:a5:cb:9d:85:10:d0:09:f5:be:ac:3c: 2f:6d:64:24:21:a2:95:34:ea:33:a9:9c:1a:4a:ea: 6b:86:ec:d3:fa:52:9a:96:7d:7d:6c:44:b3:db:04: e5:20:1e:59:1c:57:86:f6:35:48:a6:60:01:e7:9a: 5a:11:bc:d0:1c:92:53:87:13:9f:76:57:73:69:28: c6:ca:c2:06:94:1e:b6:98:98:14:54:a8:23:26:b9: 64:26:48:79:6d:71:55:c7:a5:95:36:8c:05:22:31: 18:c4:c8:5d:80:98:a0:d3:fe:e7:c5:f4:5f:2c:3f: 6d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8B:A2:D7:31:7A:75:E7:FF:3A:E3:6D:AE:F0:9A:A3:3A:CC:8B:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ede11131-09a5-3938-9e03-0196812fb57b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:09:a4:72:48:a6:63:ea:71:14:70:bb:bd:7b:89:d1:2a:85: 80:5c:98:89:a5:58:2f:1b:be:f6:02:6f:a9:16:31:a1:d2:d2: ae:60:ca:4d:2e:46:ef:25:53:57:dd:ba:03:b7:56:11:9c:55: 55:c6:fc:3e:ed:96:c7:4a:81:2c:5d:35:10:c6:31:6b:58:b1: 92:1e:38:be:06:82:c9:3e:ec:a3:ac:c6:20:f0:bf:dc:94:89: 1d:40:d8:6c:c3:60:9e:60:1b:cc:f8:c1:ca:99:c8:df:30:b9: e7:5e:ef:8e:82:b3:80:31:0b:8f:63:ba:b2:e2:00:6f:cf:a6: 4e:c1:66:85:b6:7e:40:04:69:5b:d7:19:8e:9e:c4:05:8e:20: a7:66:35:91:2c:be:32:8f:08:48:0c:a1:d4:9d:20:28:ff:f8: 81:d6:d6:da:77:e1:3f:19:8d:5c:22:8d:90:1a:c4:b0:42:aa: 2f:de:aa:a8:9e:7c:bc:8f:7f:20:dc:6f:49:66:5e:e7:fe:a2: b9:04:18:c5:45:70:7b:57:70:2e:84:43:f7:f5:70:56:9e:64: e6:a9:95:97:d8:52:62:e7:6f:b2:b2:4e:88:f5:68:9a:c1:1a: d6:68:05:3f:a7:79:10:ee:ff:cf:d9:78:62:54:b5:04:5c:4e: 51:cb:99:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8PvOF5mkpP3FIMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk NGM3ZDM1YjMtMTU0Zi00NDIyLTg2NmEtN2JjYmViOTRkMDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+bR/2PLeOm/734DMDltbJq+O/Nzhmujv9S0C ZqchFw1KSr19wbdGNBLVVExFsI7CmVM+v5sQGOWTU42gxeQGI2+q4SZXmQM2Jo0h e6KAc0HxpuJbST6h/vfJf5mR3ZphndWW675RxcJhvyWYnxIZtTRwLvXPdfsEFumR RE6OY8kfEpYyQkyEUd0HpcudhRDQCfW+rDwvbWQkIaKVNOozqZwaSuprhuzT+lKa ln19bESz2wTlIB5ZHFeG9jVIpmAB55paEbzQHJJThxOfdldzaSjGysIGlB62mJgU VKgjJrlkJkh5bXFVx6WVNowFIjEYxMhdgJig0/7nxfRfLD9tXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCaLotcxenXn/zrjba7wmqM6zIsgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWRlMTExMzEtMDlhNS0z OTM4LTllMDMtMDE5NjgxMmZiNTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMJpHJIpmPqcRRwu717idEqhYBcmImlWC8bvvYCb6kWMaHS0q5gyk0u Ru8lU1fdugO3VhGcVVXG/D7tlsdKgSxdNRDGMWtYsZIeOL4Ggsk+7KOsxiDwv9yU iR1A2GzDYJ5gG8z4wcqZyN8wuede746Cs4AxC49jurLiAG/Ppk7BZoW2fkAEaVvX GY6exAWOIKdmNZEsvjKPCEgModSdICj/+IHW1tp34T8ZjVwijZAaxLBCqi/eqqie fLyPfyDcb0lmXuf+orkEGMVFcHtXcC6EQ/f1cFaeZOaplZfYUmLnb7KyToj1aJrB GtZoBT+neRDu/8/ZeGJUtQRcTlHLmZE= -----END CERTIFICATE-----Generated at Sun Jun 15 17:45:07 2025 by rpki-client