$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/989bb846-baa3-3143-83bd-8768ef87ff43.roa File: 989bb846-baa3-3143-83bd-8768ef87ff43.roa (raw, json) Hash identifier: Mpgfty7Kio8Lz8zBZAg3q369xoU3gX4Ev1ikL34tSA4= Subject key identifier: FF:89:9E:3C:5E:8F:AC:28:47:54:9C:8F:C2:D6:96:80:D4:56:D0:44 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584988CF34BC1C491A2A0EDCFD30 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/989bb846-baa3-3143-83bd-8768ef87ff43.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 8069 IP address blocks: 20.33.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:34:bc:1c:49:1a:2a:0e:dc:fd:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=e034b756-518d-42dc-a585-fb0cad75d674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3e:a5:38:1f:8a:fd:54:41:fd:8a:35:bc:92: 86:d6:e6:90:62:6f:1c:ee:c7:80:3b:92:40:84:b1: e5:c2:e6:f9:b7:cb:0f:8f:13:7b:49:6d:d9:98:bf: 60:e0:ef:db:27:c0:1b:e3:5f:53:1b:3c:f6:77:57: 3d:78:52:d3:13:34:29:a6:50:30:c9:20:d9:88:4d: bb:2d:21:38:7a:45:b7:c8:af:db:f7:f1:e9:7c:6d: e0:6a:44:97:8a:58:2e:25:6b:7d:db:fd:76:9f:a8: 36:38:5b:7d:40:0e:03:3d:79:b6:cc:d0:34:a5:6b: 15:34:76:e6:61:13:71:c4:df:3c:64:94:61:c4:50: ca:1d:30:d9:38:77:aa:66:c8:46:ad:bb:f9:71:a5: ca:bf:c9:dc:1b:d6:7d:52:7b:16:16:19:63:a2:4f: c5:eb:54:ce:ec:c3:de:09:08:b3:c3:bc:5f:3d:ba: d2:29:69:5c:85:e9:f3:c4:f6:fa:77:00:fb:e1:66: 4c:b2:74:7b:08:27:8a:a3:2d:0f:ab:58:6b:e4:dd: 4f:2d:2d:0a:39:68:6b:2d:e7:1b:68:ab:b0:3a:e7: 8a:ab:df:3d:31:3e:3d:01:5a:79:95:5f:f9:16:bf: 6e:a8:0c:a7:f1:07:80:69:e4:78:9e:23:e2:65:22: 2c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:89:9E:3C:5E:8F:AC:28:47:54:9C:8F:C2:D6:96:80:D4:56:D0:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/989bb846-baa3-3143-83bd-8768ef87ff43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:90:fa:8f:f3:a0:6d:1e:88:be:c2:60:18:a5:d1:37:59:b2: 1d:5c:2b:68:cf:86:9c:2e:92:11:7d:db:18:7f:6b:13:29:0a: 04:75:d6:a2:ed:58:d8:53:54:89:30:b8:fc:c2:64:52:ff:94: d3:1f:41:c9:e4:76:2d:d9:77:1d:d7:14:6e:ef:cf:01:6c:22: df:b7:35:0f:b4:c7:08:20:f6:1b:1b:05:25:94:4c:86:66:44: 29:0f:9c:84:03:25:3a:a3:4a:62:be:68:71:35:d4:66:8a:fa: f1:28:3c:89:04:39:1d:56:26:ee:4d:ee:6f:e1:7e:60:32:75: 7a:d0:ed:18:01:cf:be:6d:5a:b9:fa:13:44:05:ce:13:42:32: 2d:67:1f:19:3d:07:c8:1c:33:5d:b0:85:34:4c:84:80:39:78: b2:53:90:d1:4e:a4:0d:86:45:9c:95:69:98:f0:ec:8a:8a:75: 50:06:ea:5a:45:06:e1:29:66:bf:6a:4f:f7:4b:26:05:d4:12: 69:55:91:da:88:82:03:f5:9a:2e:e1:f1:e1:64:7d:e3:7c:8e: 9d:2e:5c:db:4d:d2:57:d4:3a:1f:f8:c4:8a:74:19:6e:80:dc: f1:9f:c0:06:60:34:de:16:f6:c9:21:13:90:b6:cd:c4:1d:fc: 77:1a:b9:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzzS8HEkaKg7c/TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk ZTAzNGI3NTYtNTE4ZC00MmRjLWE1ODUtZmIwY2FkNzVkNjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D6lOB+K/VRB/Yo1vJKG1uaQYm8c7seAO5JA hLHlwub5t8sPjxN7SW3ZmL9g4O/bJ8Ab419TGzz2d1c9eFLTEzQpplAwySDZiE27 LSE4ekW3yK/b9/HpfG3gakSXilguJWt92/12n6g2OFt9QA4DPXm2zNA0pWsVNHbm YRNxxN88ZJRhxFDKHTDZOHeqZshGrbv5caXKv8ncG9Z9UnsWFhljok/F61TO7MPe CQizw7xfPbrSKWlchenzxPb6dwD74WZMsnR7CCeKoy0Pq1hr5N1PLS0KOWhrLecb aKuwOueKq989MT49AVp5lV/5Fr9uqAyn8QeAaeR4niPiZSIs3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+Jnjxej6woR1Scj8LWloDUVtBEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTg5YmI4NDYtYmFhMy0z MTQzLTgzYmQtODc2OGVmODdmZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKQ+o/zoG0eiL7CYBil0TdZsh1cK2jPhpwukhF92xh/axMpCgR11qLt WNhTVIkwuPzCZFL/lNMfQcnkdi3Zdx3XFG7vzwFsIt+3NQ+0xwgg9hsbBSWUTIZm RCkPnIQDJTqjSmK+aHE11GaK+vEoPIkEOR1WJu5N7m/hfmAydXrQ7RgBz75tWrn6 E0QFzhNCMi1nHxk9B8gcM12whTRMhIA5eLJTkNFOpA2GRZyVaZjw7IqKdVAG6lpF BuEpZr9qT/dLJgXUEmlVkdqIggP1mi7h8eFkfeN8jp0uXNtN0lfUOh/4xIp0GW6A 3PGfwAZgNN4W9skhE5C2zcQd/Hcauac= -----END CERTIFICATE-----Generated at Tue Jul 1 01:00:43 2025 by rpki-client