$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f45acc02-de81-35fc-8583-59e61118770c.roa File: f45acc02-de81-35fc-8583-59e61118770c.roa (raw, json) Hash identifier: +waliGZWPdTeEWuVpetTQPQCLMcElp3rgKIFNM1agVU= Subject key identifier: 11:16:D9:6C:26:3E:6C:5C:1E:04:FF:A1:D0:68:37:CE:F5:11:43:23 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A2C2028475DC63AA1E013BB00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f45acc02-de81-35fc-8583-59e61118770c.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 8069 IP address blocks: 20.33.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:28:47:5d:c6:3a:a1:e0:13:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=4b01400c-c47c-4e97-aff8-c1c2ab4fdbaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:6a:09:ab:c7:5c:10:a1:a3:4b:10:3d:2d:33: 08:86:3a:bc:46:59:02:d9:2a:bb:0a:40:2a:27:ed: ba:dd:96:ef:0d:97:ae:8c:91:d0:ea:0a:03:45:30: da:ca:98:d3:9a:c1:c7:5e:15:c4:bd:ec:e2:05:0a: 97:b4:4b:90:11:bb:97:6e:c8:4a:33:57:59:d6:82: 84:76:5b:a3:4a:ed:44:36:98:84:8e:84:d7:e7:c3: c4:b4:dd:cf:55:0c:cc:67:51:06:f3:d1:e3:53:6f: eb:e0:00:9f:91:cd:c0:45:fe:ef:0d:ae:18:a2:73: 85:d8:7e:06:23:eb:a6:83:79:93:0b:b9:50:ed:43: bf:9e:4f:e3:b8:41:70:fc:02:f6:ba:4a:04:7e:96: 50:83:ba:49:e0:53:c6:aa:59:55:ac:42:73:be:52: bc:bb:4e:25:52:89:2b:e9:ff:42:11:72:f8:07:ec: 63:78:cf:76:2e:e9:46:5a:ae:8b:19:4f:d5:9b:05: f0:db:cb:cb:0c:d8:49:73:ba:e2:04:94:dd:f0:93: fc:38:96:bb:12:ab:37:9e:6e:68:80:66:bc:ca:2e: df:27:61:29:b8:40:95:bb:ef:57:99:d0:25:db:80: ae:f3:37:39:e3:17:15:16:aa:0b:f1:a2:2e:c5:ea: db:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:16:D9:6C:26:3E:6C:5C:1E:04:FF:A1:D0:68:37:CE:F5:11:43:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f45acc02-de81-35fc-8583-59e61118770c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:65:be:38:95:49:e2:ef:66:29:32:d6:3e:50:17:86:88:ab: 83:97:90:c4:27:d7:8a:ee:83:a9:90:5d:07:62:8c:09:77:4f: b3:32:c8:f9:f0:2b:f4:73:42:5f:dd:85:60:78:e9:05:74:a4: f3:36:ab:8d:e0:a6:67:2a:68:d2:c6:65:c9:49:c5:a3:cb:f1: 67:cb:6e:8e:5a:e7:09:32:76:a7:c9:47:87:46:5d:f7:5a:a7: a0:c0:99:fb:1c:54:fe:19:d3:43:fe:14:34:2f:a5:18:c3:dc: 95:bf:68:34:25:de:f6:b7:81:79:b3:54:fc:8c:c3:4e:db:a2: 85:6d:54:72:fe:ac:0c:8e:c7:3e:47:74:46:aa:37:a3:ac:77: 55:36:09:ea:db:aa:bb:d9:81:d4:73:8a:4b:d0:4c:0f:e5:03: 95:26:04:27:3b:38:54:22:e9:ef:0f:82:71:ad:62:cb:d4:ca: 93:83:9f:fd:68:b2:82:7c:19:66:c1:0b:b3:b6:70:16:5d:de: b8:5b:85:bc:e8:03:3d:12:0b:cd:62:3e:66:41:1a:69:d6:9b: ca:bd:f2:78:3d:22:0b:2b:d0:ad:c0:90:9b:42:a6:f5:e4:f9: 7b:04:7a:2a:86:a0:8c:d6:72:42:b5:43:68:4f:9c:0e:cf:0c: b4:91:1f:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosIChHXcY6oeATuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk NGIwMTQwMGMtYzQ3Yy00ZTk3LWFmZjgtYzFjMmFiNGZkYmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WoJq8dcEKGjSxA9LTMIhjq8RlkC2Sq7CkAq J+263ZbvDZeujJHQ6goDRTDaypjTmsHHXhXEveziBQqXtEuQEbuXbshKM1dZ1oKE dlujSu1ENpiEjoTX58PEtN3PVQzMZ1EG89HjU2/r4ACfkc3ARf7vDa4YonOF2H4G I+umg3mTC7lQ7UO/nk/juEFw/AL2ukoEfpZQg7pJ4FPGqllVrEJzvlK8u04lUokr 6f9CEXL4B+xjeM92LulGWq6LGU/VmwXw28vLDNhJc7riBJTd8JP8OJa7Eqs3nm5o gGa8yi7fJ2EpuECVu+9XmdAl24Cu8zc54xcVFqoL8aIuxerb0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBEW2WwmPmxcHgT/odBoN871EUMjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjQ1YWNjMDItZGU4MS0z NWZjLTg1ODMtNTllNjExMTg3NzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhlvjiVSeLvZiky1j5QF4aIq4OXkMQn14rug6mQXQdijAl3T7MyyPnw K/RzQl/dhWB46QV0pPM2q43gpmcqaNLGZclJxaPL8WfLbo5a5wkydqfJR4dGXfda p6DAmfscVP4Z00P+FDQvpRjD3JW/aDQl3va3gXmzVPyMw07booVtVHL+rAyOxz5H dEaqN6Osd1U2CerbqrvZgdRzikvQTA/lA5UmBCc7OFQi6e8PgnGtYsvUypODn/1o soJ8GWbBC7O2cBZd3rhbhbzoAz0SC81iPmZBGmnWm8q98ng9Igsr0K3AkJtCpvXk +XsEeiqGoIzWckK1Q2hPnA7PDLSRHzU= -----END CERTIFICATE-----Generated at Sun Jun 15 15:49:22 2025 by rpki-client