$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5411a0e2-71bf-3e49-a170-f2238edd14df.roa File: 5411a0e2-71bf-3e49-a170-f2238edd14df.roa (raw, json) Hash identifier: 6QZT/uU7CSmpKDUQR2kc5MnZTaPu7Y/nsTGbsVBFKAM= Subject key identifier: E9:5F:AB:95:1A:BB:43:BF:C0:FF:77:E8:CC:B3:8A:08:7C:26:62:2D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849C4D4CF8D35ED133F08E43620 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5411a0e2-71bf-3e49-a170-f2238edd14df.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 8069 IP address blocks: 20.33.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:cf:8d:35:ed:13:3f:08:e4:36:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=11338f83-39bd-4300-818a-2963a13afbb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:31:6c:75:ea:4e:8f:78:51:1c:8b:69:97:fd: 50:ce:d1:01:27:2f:30:f8:84:f0:e3:4d:19:3b:e6: e2:79:64:94:66:a2:40:c0:d2:bf:cb:aa:49:6c:33: 15:51:11:f8:ef:64:a8:76:38:67:94:07:e5:4d:c9: be:9c:f3:9d:12:2a:b7:f1:a5:6b:ce:4b:af:63:53: cd:db:78:f1:36:45:46:4c:cf:ac:9f:a4:a1:c4:0d: 7a:25:f1:03:e2:ab:2f:c5:8b:0c:a6:ea:b5:cb:a8: 47:4a:d9:31:00:8f:12:30:c9:0c:92:cb:46:42:56: 2e:e8:67:a1:c2:48:96:9a:13:d7:3c:d2:61:10:67: 27:7c:94:04:f0:4b:27:75:39:e5:32:62:dc:07:1c: b6:40:97:17:05:49:97:09:72:c7:0c:b2:25:23:0e: be:62:10:0a:d9:32:70:53:5a:98:67:84:cb:c9:d4: e8:f4:ed:e7:dd:00:13:2b:d7:0a:d9:1b:95:63:bd: f7:03:7f:8e:32:87:3e:3d:d1:f6:52:dd:e2:6d:23: ed:ab:fa:10:3e:0a:0d:7f:df:fb:c4:5f:73:4b:19: e5:7f:bf:f8:75:9b:77:73:24:99:00:68:d4:3e:b8: ae:a8:3a:4d:9f:53:56:31:ec:ef:71:b5:22:08:a5: 46:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5F:AB:95:1A:BB:43:BF:C0:FF:77:E8:CC:B3:8A:08:7C:26:62:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5411a0e2-71bf-3e49-a170-f2238edd14df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:af:32:41:34:5e:10:c4:5e:87:50:b7:b0:5b:9b:eb:91:84: 5c:56:7d:97:6c:98:52:bb:50:5e:6e:06:a6:b2:6a:50:6f:a9: d7:24:2e:66:f9:1c:b0:87:11:95:14:24:a8:1f:ea:88:be:f3: d6:33:98:ed:47:48:bc:8a:a4:c5:a9:06:49:12:4a:f4:50:f6: 8f:89:38:01:fe:d9:93:8b:f6:f3:6d:bb:d5:1f:c2:9c:12:9f: 4e:11:2a:da:20:fe:a0:e8:e9:f2:4c:61:5c:69:1e:4b:68:ae: 98:33:4a:23:1e:f9:12:67:18:c2:4a:db:d2:23:0c:5a:fb:e5: 2b:d3:c6:12:c4:c5:8a:35:d2:8a:bd:3f:42:ef:ec:58:f4:4b: a1:eb:04:4e:75:70:95:11:ff:1c:5b:83:0d:ad:f9:8a:43:b3: bd:6d:7e:0a:4a:15:5d:49:28:33:f3:53:fd:35:39:f7:50:6e: 1b:f8:eb:31:2b:45:7d:33:ae:25:c9:40:7e:23:f3:0a:41:4c: 7f:0b:f6:db:fb:e6:4f:96:c7:26:87:75:35:e2:8c:a9:20:5b: 21:f0:82:0c:e7:c1:47:e2:9e:54:7a:70:7d:3b:7f:fc:b4:d0: 73:26:6b:96:8b:f8:f2:e6:12:b2:44:f4:83:5e:87:ad:48:97: 5e:d2:84:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1M+NNe0TPwjkNiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk MTEzMzhmODMtMzliZC00MzAwLTgxOGEtMjk2M2ExM2FmYmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDFsdepOj3hRHItpl/1QztEBJy8w+ITw400Z O+bieWSUZqJAwNK/y6pJbDMVURH472SodjhnlAflTcm+nPOdEiq38aVrzkuvY1PN 23jxNkVGTM+sn6ShxA16JfED4qsvxYsMpuq1y6hHStkxAI8SMMkMkstGQlYu6Geh wkiWmhPXPNJhEGcnfJQE8EsndTnlMmLcBxy2QJcXBUmXCXLHDLIlIw6+YhAK2TJw U1qYZ4TLydTo9O3n3QATK9cK2RuVY733A3+OMoc+PdH2Ut3ibSPtq/oQPgoNf9/7 xF9zSxnlf7/4dZt3cySZAGjUPriuqDpNn1NWMezvcbUiCKVGCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlfq5Uau0O/wP936Myzigh8JmItMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTQxMWEwZTItNzFiZi0z ZTQ5LWExNzAtZjIyMzhlZGQxNGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmvMkE0XhDEXodQt7Bbm+uRhFxWfZdsmFK7UF5uBqayalBvqdckLmb5 HLCHEZUUJKgf6oi+89YzmO1HSLyKpMWpBkkSSvRQ9o+JOAH+2ZOL9vNtu9UfwpwS n04RKtog/qDo6fJMYVxpHktorpgzSiMe+RJnGMJK29IjDFr75SvTxhLExYo10oq9 P0Lv7Fj0S6HrBE51cJUR/xxbgw2t+YpDs71tfgpKFV1JKDPzU/01OfdQbhv46zEr RX0zriXJQH4j8wpBTH8L9tv75k+WxyaHdTXijKkgWyHwggznwUfinlR6cH07f/y0 0HMma5aL+PLmErJE9INeh61Il17ShNU= -----END CERTIFICATE-----Generated at Mon Jun 30 02:07:07 2025 by rpki-client