$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eed63971-c454-3755-9b04-dc093f311036.roa File: eed63971-c454-3755-9b04-dc093f311036.roa (raw, json) Hash identifier: DpZVnz3CJ8EXHI6+dcSo3ceektn30oGztsUVh9fKig4= Subject key identifier: 1B:52:90:AE:8E:F1:12:9C:30:74:27:73:93:89:D4:0F:14:00:54:D9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A119AC64064AEB29DF9BA5AC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eed63971-c454-3755-9b04-dc093f311036.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 8069 IP address blocks: 20.33.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:c6:40:64:ae:b2:9d:f9:ba:5a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=d973f6d9-4393-41d3-aff7-b612e1773506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:63:af:7d:c6:e6:09:f5:06:1c:9b:55:4c:a4: e7:f6:2c:ab:bc:30:97:ef:31:de:03:ed:93:44:25: 31:ec:02:df:64:c3:f9:2c:1e:8f:4d:15:53:e1:dc: db:22:b9:2f:14:46:e8:be:fd:3b:11:cf:ad:41:c0: 9f:ac:9d:36:70:08:37:df:a9:84:17:7e:7a:f3:96: df:c6:96:a9:93:74:76:ce:65:3c:0e:93:8c:9c:fd: a6:ee:57:ad:24:1f:fe:c8:da:fd:e0:1f:fe:54:98: 3a:08:f2:9f:a2:f0:4c:66:9c:a2:71:66:b7:5c:5c: 31:87:6f:7c:72:dc:41:63:da:1a:30:78:df:03:07: e2:16:f2:b9:90:62:02:a8:69:5a:c8:a9:e9:c2:ef: a0:d9:87:7f:7e:0e:b5:8c:6b:7a:46:8b:49:fd:3f: 91:87:62:19:fd:88:ba:63:3e:72:3d:d2:47:c3:a2: 75:4d:fe:35:03:38:69:37:fc:fa:17:34:f7:4f:d3: a5:9c:d2:11:24:99:e2:7a:da:22:9b:a9:96:73:a4: 6c:b9:84:83:dd:6d:79:fd:a0:5b:99:9c:7c:7a:b5: 20:8d:01:87:23:86:e9:7d:33:30:a1:f1:cd:67:b8: de:d0:9e:27:43:a9:5e:74:b3:78:54:7d:3d:73:01: aa:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:52:90:AE:8E:F1:12:9C:30:74:27:73:93:89:D4:0F:14:00:54:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eed63971-c454-3755-9b04-dc093f311036.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:ab:3d:6b:ce:0d:15:e1:5d:38:49:8f:8a:8d:ee:df:56:60: 96:c5:3a:db:31:54:7b:dd:ec:6d:e6:6a:c6:40:56:32:fe:3f: 8c:43:d6:46:74:f3:fd:cd:c3:dc:fd:22:23:ae:95:da:c3:a8: 5f:ab:3f:ba:69:db:4e:82:1a:d4:1b:0c:52:a2:e3:5c:81:3d: 06:75:f2:b8:df:8c:1f:91:62:d9:c1:47:d1:a3:a2:7e:3d:a9: 68:32:c9:0f:8b:b5:19:03:e3:6a:57:4f:d3:40:a6:bc:44:ab: 17:66:f7:80:6c:b9:97:b3:59:32:b7:c8:d4:cf:3a:0e:05:78: 70:75:2f:3e:96:b2:eb:70:34:f8:19:6e:f9:42:39:72:d3:d4: b6:fc:3d:9e:bd:0b:0f:63:16:66:c5:b6:2d:4f:89:85:1d:c4: e7:e0:59:15:78:f7:0f:0c:9a:ad:30:97:11:32:98:7b:e0:47: 0c:cd:56:84:7a:50:62:00:f8:fa:c5:68:b1:3a:50:51:2b:da: dd:86:38:fd:ad:4f:54:d8:a3:cc:9a:49:a3:a2:b2:53:92:2f: d1:e2:a1:af:d7:b7:e2:80:a7:1a:27:31:29:33:ae:63:36:7f: 97:88:12:20:d8:32:e1:f1:9e:44:b0:d8:d3:15:8c:8b:a6:9b: 7d:08:46:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmsZAZK6ynfm6WsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk ZDk3M2Y2ZDktNDM5My00MWQzLWFmZjctYjYxMmUxNzczNTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2OvfcbmCfUGHJtVTKTn9iyrvDCX7zHeA+2T RCUx7ALfZMP5LB6PTRVT4dzbIrkvFEbovv07Ec+tQcCfrJ02cAg336mEF35685bf xpapk3R2zmU8DpOMnP2m7letJB/+yNr94B/+VJg6CPKfovBMZpyicWa3XFwxh298 ctxBY9oaMHjfAwfiFvK5kGICqGlayKnpwu+g2Yd/fg61jGt6RotJ/T+Rh2IZ/Yi6 Yz5yPdJHw6J1Tf41AzhpN/z6FzT3T9OlnNIRJJnietoim6mWc6RsuYSD3W15/aBb mZx8erUgjQGHI4bpfTMwofHNZ7je0J4nQ6ledLN4VH09cwGqeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtSkK6O8RKcMHQnc5OJ1A8UAFTZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWVkNjM5NzEtYzQ1NC0z NzU1LTliMDQtZGMwOTNmMzExMDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCErMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+rPWvODRXhXThJj4qN7t9WYJbFOtsxVHvd7G3masZAVjL+P4xD1kZ0 8/3Nw9z9IiOuldrDqF+rP7pp206CGtQbDFKi41yBPQZ18rjfjB+RYtnBR9Gjon49 qWgyyQ+LtRkD42pXT9NAprxEqxdm94BsuZezWTK3yNTPOg4FeHB1Lz6WsutwNPgZ bvlCOXLT1Lb8PZ69Cw9jFmbFti1PiYUdxOfgWRV49w8Mmq0wlxEymHvgRwzNVoR6 UGIA+PrFaLE6UFEr2t2GOP2tT1TYo8yaSaOislOSL9Hioa/Xt+KApxonMSkzrmM2 f5eIEiDYMuHxnkSw2NMVjIumm30IRqA= -----END CERTIFICATE-----Generated at Sun Jun 15 15:29:34 2025 by rpki-client