$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43645d55-9561-369b-9813-11df0c8526be.roa File: 43645d55-9561-369b-9813-11df0c8526be.roa (raw, json) Hash identifier: ad0YrciiaTdQYCzG7FPhDIKVSskcsBv7MDylW5HAJRk= Subject key identifier: D5:58:B2:4A:86:68:93:2D:36:BF:24:23:ED:35:78:29:02:8E:45:4E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A119AC651C2A314652060E500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43645d55-9561-369b-9813-11df0c8526be.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 8069 IP address blocks: 20.33.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:c6:51:c2:a3:14:65:20:60:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=3a99f736-bb19-4640-8250-a7f8e5008bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1f:a2:e9:11:67:e4:0d:ba:90:ec:40:dc:86: 45:8c:37:0a:6c:77:3a:41:f1:fe:1a:88:a0:9a:96: 3e:e3:cc:42:e3:3d:40:7d:9f:bd:42:14:64:8c:33: 7a:71:bd:ae:79:37:5a:ad:d2:f4:c8:62:44:d3:f1: 9f:6c:c2:92:db:a6:7e:4d:17:97:da:8e:5d:1c:02: a2:cc:71:e4:df:59:cb:50:3e:04:72:74:0d:23:71: 57:7b:fe:03:f9:e1:66:86:9c:9e:ff:be:d5:9d:7a: 75:1a:e7:7e:77:2a:e0:f5:b0:bd:2c:9c:9d:7c:4c: 0b:1c:2e:5a:4b:7c:e7:c1:54:b6:a4:c7:c7:d6:f3: e4:84:66:80:af:9b:5f:38:2f:32:d2:40:a0:79:54: e1:df:24:25:4d:ee:37:46:c8:d4:85:14:46:d9:d5: 2e:02:b0:f0:a2:9d:d8:04:50:e4:cc:fc:f4:75:f9: aa:38:8f:1f:98:6c:9d:35:1e:0f:cb:89:b3:7c:f4: a8:ea:59:16:97:df:3d:71:64:c9:90:83:eb:6c:c1: a2:83:f4:40:45:49:8a:e2:d2:4c:35:6e:28:94:c2: 3b:69:e0:48:95:85:7f:23:05:ec:8c:86:c9:7e:4f: eb:38:0b:0b:f9:4a:12:1a:22:0e:1e:a4:76:ea:34: 8b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:58:B2:4A:86:68:93:2D:36:BF:24:23:ED:35:78:29:02:8E:45:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43645d55-9561-369b-9813-11df0c8526be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:f7:7c:78:24:89:c7:33:bd:d2:61:c7:33:09:12:f3:d2:cf: d7:86:7c:a7:27:4f:ee:e0:60:35:ab:19:01:c0:fc:62:6f:90: 0b:dd:e8:f7:db:cb:79:d2:f0:a6:a9:82:b2:b1:88:2f:67:9f: 93:e7:d5:d9:3d:cd:c6:b3:d7:2d:ef:25:a5:b9:54:a8:d1:4b: 6c:5f:06:49:f7:1d:7b:ef:19:42:65:ed:31:08:6e:ff:98:02: 4c:a0:a3:27:17:62:a5:b4:08:a0:4b:82:cd:ec:3f:55:8f:40: c1:eb:c3:52:29:1c:47:9f:da:b7:8e:64:e9:f4:70:36:ce:fd: 8b:44:36:1b:57:75:1e:cc:00:d3:68:9f:1e:26:5f:cc:81:4a: a3:db:dc:48:06:ca:82:37:55:43:ac:fb:2e:33:dc:b6:82:d1: 98:89:c5:78:8f:a6:e4:fb:a6:2d:84:58:68:70:23:a2:4f:02: 21:25:72:bd:c6:3e:f9:1f:7e:26:d0:ba:57:55:2a:8a:8f:77: 0c:f5:28:54:54:12:15:61:ac:ec:d0:c8:46:66:26:20:64:12: 8f:c1:37:67:7a:a5:6d:29:1c:82:ef:73:14:fa:5c:93:13:fe: 37:a3:f1:47:f8:ff:b8:5f:1f:3d:cc:a0:c9:9c:5c:af:41:92: 2b:4e:92:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmsZRwqMUZSBg5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk M2E5OWY3MzYtYmIxOS00NjQwLTgyNTAtYTdmOGU1MDA4YmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx+i6RFn5A26kOxA3IZFjDcKbHc6QfH+Goig mpY+48xC4z1AfZ+9QhRkjDN6cb2ueTdardL0yGJE0/GfbMKS26Z+TReX2o5dHAKi zHHk31nLUD4EcnQNI3FXe/4D+eFmhpye/77VnXp1Gud+dyrg9bC9LJydfEwLHC5a S3znwVS2pMfH1vPkhGaAr5tfOC8y0kCgeVTh3yQlTe43RsjUhRRG2dUuArDwop3Y BFDkzPz0dfmqOI8fmGydNR4Py4mzfPSo6lkWl989cWTJkIPrbMGig/RARUmK4tJM NW4olMI7aeBIlYV/IwXsjIbJfk/rOAsL+UoSGiIOHqR26jSLIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVYskqGaJMtNr8kI+01eCkCjkVOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDM2NDVkNTUtOTU2MS0z NjliLTk4MTMtMTFkZjBjODUyNmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABj3fHgkicczvdJhxzMJEvPSz9eGfKcnT+7gYDWrGQHA/GJvkAvd6Pfb y3nS8KapgrKxiC9nn5Pn1dk9zcaz1y3vJaW5VKjRS2xfBkn3HXvvGUJl7TEIbv+Y AkygoycXYqW0CKBLgs3sP1WPQMHrw1IpHEef2reOZOn0cDbO/YtENhtXdR7MANNo nx4mX8yBSqPb3EgGyoI3VUOs+y4z3LaC0ZiJxXiPpuT7pi2EWGhwI6JPAiElcr3G PvkffibQuldVKoqPdwz1KFRUEhVhrOzQyEZmJiBkEo/BN2d6pW0pHILvcxT6XJMT /jej8Uf4/7hfHz3MoMmcXK9BkitOkms= -----END CERTIFICATE-----Generated at Tue Jul 1 13:12:50 2025 by rpki-client