$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d851fbe8-225a-3c6f-8e78-4c283a99fd68.roa File: d851fbe8-225a-3c6f-8e78-4c283a99fd68.roa (raw, json) Hash identifier: 0hry9XYK8qub8UVNPrXyLDDSNsxZnYepCV5uTsLrZQ8= Subject key identifier: 4C:93:FE:F5:7E:E5:AE:7C:05:51:BB:F9:E6:76:94:D8:07:F7:E2:8E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849BF3FA7475AA7206A42F1F700 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d851fbe8-225a-3c6f-8e78-4c283a99fd68.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.33.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:a7:47:5a:a7:20:6a:42:f1:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=ffe159c3-92eb-4880-b949-a28519ebf4cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:85:21:cc:25:d4:6b:de:97:8d:0b:20:08:2c: ce:38:84:40:45:03:59:ac:cc:1a:a5:ab:35:32:62: 85:09:45:5d:77:11:6e:56:ab:bd:bf:67:96:db:61: 8e:53:61:df:67:f1:75:a7:1a:f8:85:26:1a:d3:0f: 84:40:f7:06:cc:c2:ce:7e:8b:de:02:ae:a0:59:36: fe:2a:a9:b0:f8:98:3f:69:8f:f5:fa:49:df:57:51: 5a:86:0d:d0:d8:eb:6f:0f:e9:16:95:cf:cc:9f:a4: e8:ce:4f:33:ba:96:f8:25:a8:b7:d4:ea:b6:c5:e1: 2b:60:c0:de:08:99:47:e7:2f:94:94:31:1b:d4:cf: 8a:b9:92:e0:bb:0b:1a:b1:0b:0a:8c:99:ff:45:58: 1c:6c:7c:e7:f8:02:54:5f:6e:24:da:fd:8c:4e:a1: d6:ad:37:41:02:f8:90:42:be:13:ac:82:44:f6:9e: 90:5e:b8:62:68:25:0c:e3:44:31:f6:6d:b3:a2:d0: 4d:ea:8c:35:54:4b:eb:b2:32:e7:31:8e:59:c9:a7: 53:41:70:ca:b4:05:68:83:9f:ff:c4:f9:42:3b:92: 2d:14:50:cc:51:7b:7f:ea:68:99:c0:2c:7d:2f:bd: 7d:08:7f:9f:25:92:5c:76:4b:70:25:56:38:7c:9d: bc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:93:FE:F5:7E:E5:AE:7C:05:51:BB:F9:E6:76:94:D8:07:F7:E2:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d851fbe8-225a-3c6f-8e78-4c283a99fd68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:2c:8a:0f:5d:e1:65:ad:f5:21:4e:7b:cf:9f:35:3c:30:53: 72:38:f8:e0:0b:60:be:4a:48:e3:6b:64:53:e9:d9:db:69:36: 33:0f:f7:97:af:23:31:70:e3:6e:a9:b0:cb:57:c6:13:91:77: 78:09:67:4d:4b:8b:06:a5:a1:cd:87:c5:1a:16:0e:7d:b7:e1: 19:e0:27:3e:50:4d:04:5e:b3:e9:f9:23:97:42:cf:e1:9e:86: f2:77:97:7d:2c:97:01:e0:87:7e:74:30:26:b5:a3:ab:24:6e: e6:37:3c:8e:e9:b7:f8:28:e9:c1:c3:a4:63:9c:c8:be:ad:44: 90:f7:99:57:99:e1:85:10:b6:49:f8:05:57:c4:1f:46:19:0b: 29:57:b2:34:ce:91:df:6e:52:0c:6d:68:f0:16:a3:6b:e2:bd: 52:11:5e:fd:b7:9e:67:88:66:79:3d:d6:25:40:05:5c:1f:d8: 92:2b:41:94:07:58:15:b2:3a:d0:3f:8a:3b:8e:1e:a0:2a:1c: 8e:24:df:9c:2d:a8:ba:1c:37:82:f0:73:a4:f6:c2:27:6f:e4: e0:ab:d5:e3:66:ed:e7:5f:16:46:94:1a:f3:ea:69:0d:d7:4a: a3:41:c6:46:c8:5f:16:62:45:90:49:63:4f:c8:ed:29:76:f9: 3b:df:2d:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P6dHWqcgakLx9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZmZlMTU5YzMtOTJlYi00ODgwLWI5NDktYTI4NTE5ZWJmNGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIUhzCXUa96XjQsgCCzOOIRARQNZrMwapas1 MmKFCUVddxFuVqu9v2eW22GOU2HfZ/F1pxr4hSYa0w+EQPcGzMLOfoveAq6gWTb+ Kqmw+Jg/aY/1+knfV1Fahg3Q2OtvD+kWlc/Mn6Tozk8zupb4Jai31Oq2xeErYMDe CJlH5y+UlDEb1M+KuZLguwsasQsKjJn/RVgcbHzn+AJUX24k2v2MTqHWrTdBAviQ Qr4TrIJE9p6QXrhiaCUM40Qx9m2zotBN6ow1VEvrsjLnMY5ZyadTQXDKtAVog5// xPlCO5ItFFDMUXt/6miZwCx9L719CH+fJZJcdktwJVY4fJ28CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyT/vV+5a58BVG7+eZ2lNgH9+KOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDg1MWZiZTgtMjI1YS0z YzZmLThlNzgtNGMyODNhOTlmZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0sig9d4WWt9SFOe8+fNTwwU3I4+OALYL5KSONrZFPp2dtpNjMP95ev IzFw426psMtXxhORd3gJZ01Liwaloc2HxRoWDn234RngJz5QTQRes+n5I5dCz+Ge hvJ3l30slwHgh350MCa1o6skbuY3PI7pt/go6cHDpGOcyL6tRJD3mVeZ4YUQtkn4 BVfEH0YZCylXsjTOkd9uUgxtaPAWo2vivVIRXv23nmeIZnk91iVABVwf2JIrQZQH WBWyOtA/ijuOHqAqHI4k35wtqLocN4Lwc6T2widv5OCr1eNm7edfFkaUGvPqaQ3X SqNBxkbIXxZiRZBJY0/I7Sl2+TvfLaM= -----END CERTIFICATE-----Generated at Mon Jun 30 01:41:25 2025 by rpki-client