$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f0058f51-71cc-3456-babb-8278aa6adf3e.roa File: f0058f51-71cc-3456-babb-8278aa6adf3e.roa (raw, json) Hash identifier: le7LFsnvoDY54dbkKPplNAFv9ZjI2G7oIeSgOYsnnE4= Subject key identifier: C6:BD:7A:15:AD:F0:2D:4F:F8:67:7C:42:FE:0E:DF:08:D2:0E:B7:9D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A19FABD8094A8CD8215257180 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f0058f51-71cc-3456-babb-8278aa6adf3e.roa Signing time: Fri 06 Jun 2025 13:01:04 +0000 ROA not before: Fri 06 Jun 2025 13:01:04 +0000 ROA not after: Thu 04 Sep 2025 13:01:04 +0000 asID: 8069 IP address blocks: 20.33.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:19:fa:bd:80:94:a8:cd:82:15:25:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 6 13:01:04 2025 GMT Not After : Sep 4 13:01:04 2025 GMT Subject: CN=51e02745-71a8-4eb3-a620-2421f768c48b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1a:77:96:fe:91:89:62:7c:cb:9c:b2:48:ad: 5a:53:d6:28:c5:63:49:3b:ea:27:43:4b:84:6e:90: 6e:81:68:6f:44:51:3f:c1:cd:40:1a:b2:6d:97:67: bf:49:14:7c:c5:ed:5a:fd:3e:b5:a7:4b:e8:79:d6: b6:58:2f:52:d6:1b:f5:95:1b:06:d6:3f:16:68:51: 91:76:10:f4:d3:27:fb:e8:5a:ea:4c:fd:94:cf:64: ae:b9:6b:f5:fc:51:b1:f8:b8:78:8c:dc:ea:e9:7a: 99:4e:6a:20:a0:61:a2:99:35:1e:98:b4:ee:1c:77: db:e1:5e:1a:47:ee:cc:29:8f:1f:82:5c:c0:a7:5c: b7:9b:82:2d:67:b8:f6:47:c4:02:21:d6:27:3f:c8: ab:c0:ea:e0:52:cf:66:83:a7:e7:c3:bf:da:6c:0b: 3f:b3:e4:7f:5f:25:77:7c:d5:b4:c9:bf:2c:e6:8b: e3:6f:f8:8d:41:4b:18:57:6d:02:fc:a1:0f:85:dd: 4d:68:74:28:7c:6b:92:dd:db:72:4d:3e:64:cf:10: 6b:79:b5:5f:35:8d:44:70:af:d3:d1:60:ba:fe:61: 35:75:35:63:87:f8:d1:32:2e:82:bb:5f:8f:d9:99: fc:c7:5f:c7:ce:de:f3:b0:af:62:07:c8:d3:cc:aa: 15:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:BD:7A:15:AD:F0:2D:4F:F8:67:7C:42:FE:0E:DF:08:D2:0E:B7:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f0058f51-71cc-3456-babb-8278aa6adf3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:8e:93:a3:fe:9f:65:96:e2:d3:97:cf:e7:59:a9:6c:2c:4d: 09:35:2b:a3:88:d1:3f:ea:36:05:ba:34:44:2e:76:32:a0:86: 32:c0:5a:86:f6:0d:3a:cd:76:6d:74:ec:f7:b2:56:15:05:46: 5f:7e:ed:34:8f:dc:e3:89:33:6a:1f:af:90:96:94:16:d3:fc: 0b:60:53:cd:65:05:7d:75:dd:62:64:19:76:9b:19:d8:06:1e: 68:fc:12:0e:59:c3:0b:b2:a6:88:83:49:af:50:1a:27:b9:ae: 2e:78:e2:18:f9:f5:e2:7e:da:3d:38:4b:70:e2:bc:06:c6:8b: 58:fe:30:9b:4d:22:5c:e1:ee:5d:87:28:d2:e7:c4:27:9e:34: 36:d4:ad:38:82:83:d6:0e:b9:d2:d1:f6:c3:f4:21:85:52:0b: c5:8b:1f:33:ce:87:cf:df:ea:8e:4d:df:d7:30:cc:fd:68:d5: 0b:74:60:28:ee:8a:7a:af:51:77:84:b9:2a:f6:b1:df:92:a2: cd:2f:f9:e1:1d:bc:33:9b:e6:10:9a:39:56:98:93:37:c9:b9: 71:56:8c:1d:db:ae:9c:43:36:72:6c:34:07:68:57:72:66:42: b4:96:71:01:a9:a1:fc:f0:e0:2b:33:9d:bf:c0:a6:82:a6:a9: 6c:f2:bf:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoZ+r2AlKjNghUlcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNjEzMDEwNFoXDTI1MDkwNDEzMDEwNFowLzEtMCsGA1UEAxMk NTFlMDI3NDUtNzFhOC00ZWIzLWE2MjAtMjQyMWY3NjhjNDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRp3lv6RiWJ8y5yySK1aU9YoxWNJO+onQ0uE bpBugWhvRFE/wc1AGrJtl2e/SRR8xe1a/T61p0voeda2WC9S1hv1lRsG1j8WaFGR dhD00yf76FrqTP2Uz2SuuWv1/FGx+Lh4jNzq6XqZTmogoGGimTUemLTuHHfb4V4a R+7MKY8fglzAp1y3m4ItZ7j2R8QCIdYnP8irwOrgUs9mg6fnw7/abAs/s+R/XyV3 fNW0yb8s5ovjb/iNQUsYV20C/KEPhd1NaHQofGuS3dtyTT5kzxBrebVfNY1EcK/T 0WC6/mE1dTVjh/jRMi6Cu1+P2Zn8x1/Hzt7zsK9iB8jTzKoVLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMa9ehWt8C1P+Gd8Qv4O3wjSDredMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjAwNThmNTEtNzFjYy0z NDU2LWJhYmItODI3OGFhNmFkZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqOk6P+n2WW4tOXz+dZqWwsTQk1K6OI0T/qNgW6NEQudjKghjLAWob2 DTrNdm107PeyVhUFRl9+7TSP3OOJM2ofr5CWlBbT/AtgU81lBX113WJkGXabGdgG Hmj8Eg5ZwwuypoiDSa9QGie5ri544hj59eJ+2j04S3DivAbGi1j+MJtNIlzh7l2H KNLnxCeeNDbUrTiCg9YOudLR9sP0IYVSC8WLHzPOh8/f6o5N39cwzP1o1Qt0YCju inqvUXeEuSr2sd+Sos0v+eEdvDOb5hCaOVaYkzfJuXFWjB3brpxDNnJsNAdoV3Jm QrSWcQGpofzw4Csznb/ApoKmqWzyv2o= -----END CERTIFICATE-----Generated at Mon Jun 30 09:01:18 2025 by rpki-client