$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ffb5f399-7910-3515-819d-e4fcf15480cf.roa File: ffb5f399-7910-3515-819d-e4fcf15480cf.roa (raw, json) Hash identifier: GEpcK8rIusq+kd3oGpRGX3RcthkGaLFdrqhEtNZc0N4= Subject key identifier: D0:B9:41:77:10:82:D3:91:EF:17:36:25:07:A2:6E:88:AA:20:F0:C3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849DF5A7A2F3FB0C8A5ED9B9880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ffb5f399-7910-3515-819d-e4fcf15480cf.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 8069 IP address blocks: 20.33.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:7a:2f:3f:b0:c8:a5:ed:9b:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=0babce21-6882-4d59-bf0a-0eb50b53aa17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:31:c3:ac:c1:43:59:ae:80:b4:b0:10:91:33: 56:07:76:cb:ce:99:87:63:14:aa:f2:90:6e:d7:34: 2d:85:37:7b:8e:6d:37:bc:49:bd:6e:a5:98:5a:5f: 9a:86:da:85:47:97:2f:70:ec:ba:09:f6:af:8d:6d: e0:57:dd:24:c5:91:24:8d:27:2c:f7:8c:86:f4:d3: d1:6f:0a:b6:21:73:a4:a4:c5:21:58:e5:ee:9a:8a: 43:2e:32:39:96:97:97:97:0f:63:79:a8:4b:b8:9f: 7c:4c:0d:38:b1:0a:e7:22:72:a8:56:2d:8b:c0:f1: 99:2c:c4:56:b0:90:d0:ce:9e:2c:72:cb:6f:24:ef: ad:18:3e:66:86:b6:34:79:57:0b:d6:e7:da:bd:02: f0:a8:49:0b:12:02:bd:b1:80:42:0c:0a:34:d7:fa: a8:18:fc:a7:79:7e:47:da:4a:94:47:46:a8:a5:2b: d5:26:3c:c8:42:56:60:07:db:41:ce:7b:1c:ec:1d: 1c:e7:0c:92:22:28:94:68:81:e9:a9:4a:5a:8e:9e: d9:a3:83:3f:70:57:63:ee:99:01:e4:50:5d:65:1c: 5e:f6:3f:64:af:48:bb:c0:e3:ce:94:2a:db:37:e1: 01:dd:d1:cb:76:99:dc:87:de:87:f6:f3:d4:33:a7: de:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B9:41:77:10:82:D3:91:EF:17:36:25:07:A2:6E:88:AA:20:F0:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ffb5f399-7910-3515-819d-e4fcf15480cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:40:06:bb:c7:07:95:43:17:09:0a:79:0f:d9:40:5b:bb:61: 94:b5:15:6e:22:e5:ef:e9:07:2d:94:c5:a1:ec:80:eb:12:61: 56:66:73:9c:e5:a0:2c:7c:c9:34:4d:e0:19:f1:3e:37:f3:7a: 8f:82:d0:79:fe:ba:0a:69:c1:dd:39:7f:8d:8a:5f:6b:00:68: 77:32:d7:fc:de:e7:36:4e:03:37:d3:2c:0d:9a:cb:31:21:65: 1d:80:91:fe:3d:21:d5:ba:6a:5e:76:15:f0:51:a8:6e:aa:17: 68:8e:5b:b3:c2:f9:d6:a2:b8:fb:b3:b7:23:cc:78:25:f3:78: a3:07:43:04:4e:61:65:8a:d8:a8:89:2e:59:6f:38:75:21:98: a0:78:b4:5d:0d:65:01:85:e1:43:1c:18:3a:82:a1:14:1a:85: cf:43:0b:6f:50:14:86:85:fe:82:6e:97:9f:97:2e:e6:8d:fb: f5:4e:a3:f3:64:66:20:fd:76:42:70:c0:a5:e5:af:ba:eb:8d: b0:ac:d5:6f:b0:0c:86:4f:c2:ba:05:bd:97:ed:6d:ca:9a:66: 8f:16:80:28:22:d9:a2:b4:12:bd:b7:fe:18:1d:ca:13:87:9e: fe:8e:40:c7:4f:da:67:7b:ec:d0:da:3e:98:f7:9e:7e:ba:f9: 05:04:4f:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWnovP7DIpe2bmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk MGJhYmNlMjEtNjg4Mi00ZDU5LWJmMGEtMGViNTBiNTNhYTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszHDrMFDWa6AtLAQkTNWB3bLzpmHYxSq8pBu 1zQthTd7jm03vEm9bqWYWl+ahtqFR5cvcOy6CfavjW3gV90kxZEkjScs94yG9NPR bwq2IXOkpMUhWOXumopDLjI5lpeXlw9jeahLuJ98TA04sQrnInKoVi2LwPGZLMRW sJDQzp4scstvJO+tGD5mhrY0eVcL1ufavQLwqEkLEgK9sYBCDAo01/qoGPyneX5H 2kqUR0aopSvVJjzIQlZgB9tBznsc7B0c5wySIiiUaIHpqUpajp7Zo4M/cFdj7pkB 5FBdZRxe9j9kr0i7wOPOlCrbN+EB3dHLdpnch96H9vPUM6feNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNC5QXcQgtOR7xc2JQeiboiqIPDDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZmZiNWYzOTktNzkxMC0z NTE1LTgxOWQtZTRmY2YxNTQ4MGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtABrvHB5VDFwkKeQ/ZQFu7YZS1FW4i5e/pBy2UxaHsgOsSYVZmc5zl oCx8yTRN4BnxPjfzeo+C0Hn+ugppwd05f42KX2sAaHcy1/ze5zZOAzfTLA2ayzEh ZR2Akf49IdW6al52FfBRqG6qF2iOW7PC+daiuPuztyPMeCXzeKMHQwROYWWK2KiJ LllvOHUhmKB4tF0NZQGF4UMcGDqCoRQahc9DC29QFIaF/oJul5+XLuaN+/VOo/Nk ZiD9dkJwwKXlr7rrjbCs1W+wDIZPwroFvZftbcqaZo8WgCgi2aK0Er23/hgdyhOH nv6OQMdP2md77NDaPpj3nn66+QUETz0= -----END CERTIFICATE-----Generated at Sun Jun 15 17:59:15 2025 by rpki-client