$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/250542c4-d296-36c5-89dd-5586e9f13223.roa File: 250542c4-d296-36c5-89dd-5586e9f13223.roa (raw, json) Hash identifier: 7iHUhcTZGt2H1ZJAeKGhkjWAe4Lw8dBxuXuIaqgrUgM= Subject key identifier: 63:11:66:3F:A5:B3:9E:15:BB:AF:4C:B0:E2:66:3D:DF:00:CA:32:E0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584988CF34903AA18661B1672700 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/250542c4-d296-36c5-89dd-5586e9f13223.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 8069 IP address blocks: 20.33.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:34:90:3a:a1:86:61:b1:67:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=51d44ea9-9ade-4338-a36b-60bb0d089d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:af:24:21:6f:09:ef:db:9d:73:7c:4d:63:3c: 53:72:f7:29:b2:40:7b:7c:04:4a:db:58:2f:4b:5e: b3:2b:71:c3:8a:5e:f0:38:b9:53:91:28:68:d8:cd: 9c:d1:23:09:4e:c3:69:24:2d:5e:df:38:5d:da:80: fa:48:55:2a:3b:d3:be:0b:c5:fb:94:26:a8:6b:d0: 55:3f:5e:82:c5:a7:1f:24:a1:8f:13:52:6c:45:49: cd:d6:46:f0:e6:e6:2c:b9:0c:19:33:e4:82:8e:e3: 88:21:df:3e:58:bb:a7:51:20:e9:4f:7a:c6:c9:7b: f1:4d:fb:6e:21:84:a7:90:d2:47:dc:25:b4:b6:87: 04:66:16:1e:8e:e8:da:ae:af:e7:d9:2e:aa:c6:38: 9e:b4:cd:d6:01:08:11:ab:6c:a4:73:c8:f5:60:a3: 2f:fb:5c:5f:4a:36:6f:63:d2:92:e9:fc:dc:a7:62: d3:b3:74:2b:55:4d:34:9e:3c:98:56:67:35:ff:47: a3:e0:6d:3a:2b:e4:71:10:b1:03:0b:9a:89:46:c7: a6:b9:19:5f:cc:29:58:99:95:26:c7:d0:5d:cf:ea: 43:27:c2:56:a8:d8:98:c1:41:98:ac:f4:88:d7:99: c4:5f:66:64:f2:cc:d0:b7:e6:c3:05:22:b3:d8:06: 69:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:11:66:3F:A5:B3:9E:15:BB:AF:4C:B0:E2:66:3D:DF:00:CA:32:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/250542c4-d296-36c5-89dd-5586e9f13223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:0e:5d:81:ac:19:53:b3:f5:a3:df:d8:2b:36:2a:33:2d:8c: a6:5c:b1:0e:39:69:fd:15:a2:33:df:b3:28:43:98:1b:21:fe: 80:ec:93:0f:3e:02:5d:2d:5a:ba:3a:34:ba:fd:df:12:e6:cc: d1:21:69:fc:39:59:d0:2a:1e:e8:e4:74:d4:89:5c:1b:9b:82: 2f:fd:a7:ac:9f:03:5c:2c:df:b3:24:dc:2e:9a:64:d2:97:b1: 46:f6:88:42:41:ee:37:7c:1e:de:a6:d1:e0:22:33:d2:74:35: 37:ff:cc:dd:6c:38:ec:1e:e9:d3:b7:a5:21:cb:cf:a3:cf:3f: 0f:b8:ac:3e:c7:f3:b9:30:b4:03:79:8f:76:55:10:c3:0b:b6: 1a:99:95:35:b1:32:47:b8:0b:f7:3c:fa:fe:75:31:f5:42:2b: 59:27:55:e0:89:a7:8c:ca:d1:dc:29:65:a8:19:24:49:69:97: 66:e4:6e:96:c4:88:0f:c9:e0:08:a7:05:54:db:f8:5e:05:f0: 38:b9:94:59:9f:c5:9b:a7:3b:da:49:62:64:2c:c3:7a:b5:94: 33:03:95:68:05:82:57:13:16:34:8a:79:43:b2:58:b6:67:55: 86:c0:4e:dc:ea:3a:a7:f1:34:89:8a:2c:d0:7c:31:64:0a:2d: 5c:4b:ef:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzzSQOqGGYbFnJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk NTFkNDRlYTktOWFkZS00MzM4LWEzNmItNjBiYjBkMDg5ZDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq8kIW8J79udc3xNYzxTcvcpskB7fARK21gv S16zK3HDil7wOLlTkSho2M2c0SMJTsNpJC1e3zhd2oD6SFUqO9O+C8X7lCaoa9BV P16CxacfJKGPE1JsRUnN1kbw5uYsuQwZM+SCjuOIId8+WLunUSDpT3rGyXvxTftu IYSnkNJH3CW0tocEZhYejujarq/n2S6qxjietM3WAQgRq2ykc8j1YKMv+1xfSjZv Y9KS6fzcp2LTs3QrVU00njyYVmc1/0ej4G06K+RxELEDC5qJRsemuRlfzClYmZUm x9Bdz+pDJ8JWqNiYwUGYrPSI15nEX2Zk8szQt+bDBSKz2AZp4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMRZj+ls54Vu69MsOJmPd8AyjLgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjUwNTQyYzQtZDI5Ni0z NmM1LTg5ZGQtNTU4NmU5ZjEzMjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwOXYGsGVOz9aPf2Cs2KjMtjKZcsQ45af0VojPfsyhDmBsh/oDskw8+ Al0tWro6NLr93xLmzNEhafw5WdAqHujkdNSJXBubgi/9p6yfA1ws37Mk3C6aZNKX sUb2iEJB7jd8Ht6m0eAiM9J0NTf/zN1sOOwe6dO3pSHLz6PPPw+4rD7H87kwtAN5 j3ZVEMMLthqZlTWxMke4C/c8+v51MfVCK1knVeCJp4zK0dwpZagZJElpl2bkbpbE iA/J4AinBVTb+F4F8Di5lFmfxZunO9pJYmQsw3q1lDMDlWgFglcTFjSKeUOyWLZn VYbATtzqOqfxNImKLNB8MWQKLVxL7wE= -----END CERTIFICATE-----Generated at Mon Jun 30 08:59:26 2025 by rpki-client