$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/2f62a62b-7687-3ea5-a88c-3d8398914ec7.roa File: 2f62a62b-7687-3ea5-a88c-3d8398914ec7.roa (raw, json) Hash identifier: +pzMmTcavfL/+jPOgHsK1NjyHyInvKZOZWnaS6d6ECM= Subject key identifier: 23:7E:6C:E7:C3:2A:A0:22:AF:5B:98:5A:54:0B:02:AB:54:28:BC:C6 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584A41104CB0192875651F31A780 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/2f62a62b-7687-3ea5-a88c-3d8398914ec7.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 29968 IP address blocks: 208.20.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:4c:b0:19:28:75:65:1f:31:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=27aedd04-08ca-4ae0-a5e9-b3a547d4ba33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:18:0b:19:c0:ff:fd:b6:34:9d:cb:80:0f:5b: b9:60:38:ff:f3:08:bf:bf:95:e7:d1:6b:89:d6:fb: c8:c3:87:b1:68:9d:5f:a5:56:37:09:07:46:e6:56: 02:36:49:d3:d3:d4:2f:1b:e0:84:dd:a4:ef:d3:cb: 0f:44:d6:9e:33:5d:ef:fc:a1:54:22:6d:0b:15:e8: 3a:0f:47:14:b5:31:60:b7:ab:8f:bb:ff:15:42:75: 7a:72:9e:89:df:56:67:46:a0:15:9f:6f:73:fb:4b: 17:e7:80:9e:45:e6:81:e4:8d:d4:24:cc:27:02:27: 48:ed:2b:27:74:af:07:5e:ab:54:2a:53:d5:87:17: f3:ac:be:36:d2:47:dc:b4:30:2f:2f:fe:64:97:9c: d6:85:ad:61:17:63:14:6d:09:8f:65:33:ba:57:0d: 7b:68:dc:cb:5b:3a:1b:41:53:88:b4:cf:18:52:a2: a1:0b:17:89:94:e7:a8:cf:a9:26:f9:2b:98:9b:4f: 6d:4f:81:19:f7:0f:c8:35:3e:ab:3a:b6:b0:1a:dc: 4d:d0:bf:c7:41:71:06:b8:46:c9:01:a0:d4:0a:a4: 95:74:8e:71:e8:1d:50:71:66:7a:73:16:16:5c:5e: 09:96:76:b5:66:ae:3b:39:c3:11:ea:c3:63:d6:35: 55:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7E:6C:E7:C3:2A:A0:22:AF:5B:98:5A:54:0B:02:AB:54:28:BC:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/2f62a62b-7687-3ea5-a88c-3d8398914ec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 208.20.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:43:68:54:20:f3:c8:1b:f3:2a:30:e9:5e:92:2c:b7:e6:01: 26:6a:f6:1d:49:6b:46:84:ac:2c:97:e8:b0:07:d5:77:9e:66: 4f:9f:a3:60:5b:70:2e:c6:36:af:15:00:1c:49:f1:87:54:88: 12:86:e8:26:c3:22:29:04:64:13:0e:ee:e3:1d:aa:6d:57:4c: ba:c0:fb:c1:cf:c5:d4:e3:00:ab:f3:f2:0b:69:14:fb:27:dc: 6e:6d:72:f8:8d:66:88:38:22:51:37:2e:6f:19:63:99:b1:bc: 71:1f:5b:54:ae:ae:54:f1:a6:54:02:fc:4d:30:f9:17:ce:d4: ba:2a:01:0e:69:3c:38:66:f0:55:46:c9:2d:d0:8b:e5:bd:32: b9:6b:0a:54:60:5b:6d:e9:4c:66:b2:45:7c:48:12:8d:c3:3c: 16:a8:fe:8e:9c:3c:92:be:e2:35:8c:4b:af:91:41:d9:3c:49: 0b:4e:d5:3b:76:6d:b8:ef:ec:fe:d4:65:0f:50:3e:1f:9d:33: fa:b7:c8:06:cc:06:94:b8:14:32:63:6c:91:05:b5:46:d6:aa: d5:7d:70:b5:90:a3:3f:b6:49:23:5b:09:c3:e5:2d:b6:a0:63: 79:9d:fa:4f:fb:4f:9c:ed:3b:4b:d0:9c:ef:91:b6:4b:f2:8c: 57:7b:a7:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEEywGSh1ZR8xp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk MjdhZWRkMDQtMDhjYS00YWUwLWE1ZTktYjNhNTQ3ZDRiYTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxgLGcD//bY0ncuAD1u5YDj/8wi/v5Xn0WuJ 1vvIw4exaJ1fpVY3CQdG5lYCNknT09QvG+CE3aTv08sPRNaeM13v/KFUIm0LFeg6 D0cUtTFgt6uPu/8VQnV6cp6J31ZnRqAVn29z+0sX54CeReaB5I3UJMwnAidI7Ssn dK8HXqtUKlPVhxfzrL420kfctDAvL/5kl5zWha1hF2MUbQmPZTO6Vw17aNzLWzob QVOItM8YUqKhCxeJlOeoz6km+SuYm09tT4EZ9w/INT6rOrawGtxN0L/HQXEGuEbJ AaDUCqSVdI5x6B1QcWZ6cxYWXF4Jlna1Zq47OcMR6sNj1jVV0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCN+bOfDKqAir1uYWlQLAqtUKLzGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvMmY2MmE2MmItNzY4Ny0z ZWE1LWE4OGMtM2Q4Mzk4OTE0ZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0BQhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxDaFQg88gb8yow6V6SLLfmASZq9h1Ja0aErCyX6LAH1XeeZk+fo2Bb cC7GNq8VABxJ8YdUiBKG6CbDIikEZBMO7uMdqm1XTLrA+8HPxdTjAKvz8gtpFPsn 3G5tcviNZog4IlE3Lm8ZY5mxvHEfW1SurlTxplQC/E0w+RfO1LoqAQ5pPDhm8FVG yS3Qi+W9MrlrClRgW23pTGayRXxIEo3DPBao/o6cPJK+4jWMS6+RQdk8SQtO1Tt2 bbjv7P7UZQ9QPh+dM/q3yAbMBpS4FDJjbJEFtUbWqtV9cLWQoz+2SSNbCcPlLbag Y3md+k/7T5ztO0vQnO+RtkvyjFd7p/4= -----END CERTIFICATE-----Generated at Sun Jun 29 09:44:58 2025 by rpki-client