$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f9b17776-29ce-332b-bfef-70c3a6e26fae.roa File: f9b17776-29ce-332b-bfef-70c3a6e26fae.roa (raw, json) Hash identifier: d7oyqhrQ4MBx7Q9xGb3ot59kiOFuQ/nGyJFV/Cnlg4A= Subject key identifier: F2:85:04:05:FC:5B:48:18:9D:F2:DA:1A:7C:68:81:35:9E:BE:81:FC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849DF5A7A234CBAA18D45EF7740 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f9b17776-29ce-332b-bfef-70c3a6e26fae.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 8069 IP address blocks: 20.33.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:7a:23:4c:ba:a1:8d:45:ef:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=cf2bcb4c-5e51-47a6-a1c4-94a6e842afff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f4:57:e4:fe:f5:20:80:e3:58:1a:4a:d9:ea: 24:65:96:37:7a:20:ce:8c:39:18:00:87:33:44:16: 04:06:9d:b8:7d:68:83:ed:92:55:e5:c4:eb:7d:e7: ab:8b:67:99:db:51:fd:ad:c4:96:9a:3c:27:d9:a2: 62:26:54:f5:32:9c:29:c6:2d:71:a9:1a:cf:14:67: 7d:86:6c:1b:ef:48:cc:a3:ee:f2:df:58:c3:86:40: 82:89:82:c2:d3:41:2c:71:3b:b3:cd:d1:70:dc:67: 34:28:12:1b:58:c0:4e:d6:17:f0:1e:70:8e:14:60: 65:0f:9f:aa:41:13:41:a0:f8:d5:a6:40:80:99:10: 9a:f8:f0:2e:ae:45:be:b0:5b:13:60:91:37:0c:cb: 9d:27:c9:09:29:a4:6d:45:f0:5f:f2:48:af:18:2d: 55:79:5c:40:9e:e6:8b:e6:fd:bf:fe:6a:69:50:c1: 7b:16:2d:67:fa:cf:ed:98:8e:77:7f:6c:73:ba:da: 99:79:f2:3d:43:2f:30:7f:52:7c:15:5e:47:53:d0: 05:d3:20:83:bc:47:d6:64:48:aa:94:56:db:d9:2c: 65:4b:7b:04:f2:4d:a0:37:a6:78:48:58:f0:68:9b: be:f7:7b:42:95:e9:68:b2:f5:5a:0a:99:57:e8:6f: 93:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:85:04:05:FC:5B:48:18:9D:F2:DA:1A:7C:68:81:35:9E:BE:81:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f9b17776-29ce-332b-bfef-70c3a6e26fae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:2e:df:9b:e4:b7:74:00:06:22:51:6d:66:3a:fc:e4:da:80: b8:7f:a1:8d:b7:ac:51:af:ec:d9:3b:bd:b4:05:75:b4:dc:ba: a6:ef:93:33:37:7d:19:29:13:df:53:dc:2c:24:96:85:09:00: 47:12:56:ef:bb:87:98:fe:39:17:e0:88:29:45:63:67:fb:5b: e2:cc:53:f9:10:72:b1:fd:41:f2:61:72:2d:b2:04:1b:0b:cf: 6a:2c:81:f5:46:35:5a:fa:59:9a:55:43:3c:1a:f7:d7:b3:bc: d2:84:a1:34:4e:08:3a:7a:80:0e:4a:9e:91:85:96:15:a2:43: 37:83:c0:d4:cb:ba:40:39:64:d2:3d:bc:ec:db:4f:d5:e3:ab: fe:2e:41:df:9b:75:07:0f:65:8c:38:95:d2:8d:ab:70:ad:41: fd:da:eb:32:e0:58:29:d2:95:b7:bc:69:23:be:f3:95:b0:ae: 23:5b:c4:0e:50:d6:81:38:a9:58:4d:6c:63:9b:30:18:a3:be: 98:5c:dc:0c:6d:a6:d6:3f:75:76:e5:7f:7a:ff:8a:91:4a:02: ec:d4:11:61:93:68:38:45:a1:e9:16:de:db:68:87:1b:ad:f8: 23:1b:8d:64:f8:a3:4c:b8:a6:85:45:25:71:2c:e0:a5:b3:9b: ce:cd:45:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWnojTLqhjUXvd0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk Y2YyYmNiNGMtNWU1MS00N2E2LWExYzQtOTRhNmU4NDJhZmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfRX5P71IIDjWBpK2eokZZY3eiDOjDkYAIcz RBYEBp24fWiD7ZJV5cTrfeeri2eZ21H9rcSWmjwn2aJiJlT1Mpwpxi1xqRrPFGd9 hmwb70jMo+7y31jDhkCCiYLC00EscTuzzdFw3Gc0KBIbWMBO1hfwHnCOFGBlD5+q QRNBoPjVpkCAmRCa+PAurkW+sFsTYJE3DMudJ8kJKaRtRfBf8kivGC1VeVxAnuaL 5v2//mppUMF7Fi1n+s/tmI53f2xzutqZefI9Qy8wf1J8FV5HU9AF0yCDvEfWZEiq lFbb2SxlS3sE8k2gN6Z4SFjwaJu+93tClelosvVaCplX6G+T0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKFBAX8W0gYnfLaGnxogTWevoH8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjliMTc3NzYtMjljZS0z MzJiLWJmZWYtNzBjM2E2ZTI2ZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4u35vkt3QABiJRbWY6/OTagLh/oY23rFGv7Nk7vbQFdbTcuqbvkzM3 fRkpE99T3CwkloUJAEcSVu+7h5j+ORfgiClFY2f7W+LMU/kQcrH9QfJhci2yBBsL z2osgfVGNVr6WZpVQzwa99ezvNKEoTROCDp6gA5KnpGFlhWiQzeDwNTLukA5ZNI9 vOzbT9Xjq/4uQd+bdQcPZYw4ldKNq3CtQf3a6zLgWCnSlbe8aSO+85WwriNbxA5Q 1oE4qVhNbGObMBijvphc3AxtptY/dXblf3r/ipFKAuzUEWGTaDhFoekW3ttohxut +CMbjWT4o0y4poVFJXEs4KWzm87NRbk= -----END CERTIFICATE-----Generated at Sun Jun 15 15:36:11 2025 by rpki-client