$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25993c8f-1295-3237-87f5-6f89f9180d01.roa File: 25993c8f-1295-3237-87f5-6f89f9180d01.roa (raw, json) Hash identifier: 9sCtt9rvFnC/GW8fkI5JQJIrWappyeLwGmzPxEtT6fw= Subject key identifier: 7C:25:F3:C4:2B:0F:BF:6D:FB:62:C1:99:F8:67:FA:9A:51:D9:71:9C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584944694EC5E3C8D67951888B00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25993c8f-1295-3237-87f5-6f89f9180d01.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 8069 IP address blocks: 20.33.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:4e:c5:e3:c8:d6:79:51:88:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=407cc83b-dfaa-4334-b21f-ee70961ece4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c7:d5:73:0b:3e:07:15:c5:ba:02:37:89:81: 9d:a2:10:f4:6c:f2:ae:f9:dd:a0:78:5e:af:6d:08: b9:3e:7d:6e:ad:31:73:db:8a:d3:09:9f:52:39:49: 8e:f0:bb:0a:66:ca:e4:fb:37:4c:6a:07:ef:99:e6: 7a:e9:2d:2e:a5:0f:d4:3e:f7:a5:42:f3:fc:1a:92: d1:d6:05:9e:f9:da:b1:e6:26:04:69:bd:b9:0e:ab: 66:8f:43:63:f7:e4:0c:cb:7c:f3:66:c4:fb:c1:b9: 53:89:62:2d:23:f5:55:3c:ef:34:e6:fe:89:cf:d9: 90:ae:9f:70:f6:34:56:bf:51:df:43:90:6f:e5:9b: d6:dd:bc:cc:77:8d:4c:92:63:13:b6:48:21:a3:38: 6f:2f:9e:ac:32:4a:a4:23:dd:8a:fa:d1:8b:71:78: e0:d8:a9:dc:05:17:ec:77:56:1f:6d:20:52:41:e1: 49:34:d4:30:2f:f0:a3:11:29:ed:04:46:51:51:21: 1c:90:d7:73:1b:e9:4f:7d:be:3a:99:87:c5:56:73: f0:ca:a2:36:ed:60:35:ad:9b:b2:da:a9:67:59:0c: 73:ce:46:09:00:65:0d:4e:4d:f5:46:03:25:d0:c7: 22:eb:b3:8c:b2:39:a3:cd:c7:c2:ef:5c:29:7f:e7: 61:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:25:F3:C4:2B:0F:BF:6D:FB:62:C1:99:F8:67:FA:9A:51:D9:71:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25993c8f-1295-3237-87f5-6f89f9180d01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:c6:ae:ea:06:8a:28:33:25:2e:67:bc:8a:6c:ef:66:90:87: c1:95:74:2c:5e:47:f4:84:43:a0:e0:10:7b:cb:59:6d:4c:d4: 2e:90:e3:e5:16:70:14:24:51:5c:a0:2a:fb:9a:a0:43:39:c0: 7e:ab:f1:e1:7c:f1:f5:c1:d0:cf:14:87:f2:0a:be:eb:02:a2: ed:b9:03:ce:0f:e3:d8:3f:56:fd:94:b8:e8:b0:02:3c:84:92: 1e:6e:03:e0:c8:1b:0e:0d:43:ac:fe:1d:54:79:0f:d0:43:07: b0:a2:6f:a3:e4:5e:c6:1c:23:37:5a:31:fa:b2:88:86:23:8c: 0d:ff:3a:af:38:d0:f3:5c:fd:8f:13:96:c1:78:66:17:26:cc: 5f:dc:80:61:aa:00:c8:80:01:da:30:03:88:00:ff:3c:67:b7: 71:c3:f4:df:5b:d3:04:11:91:0f:46:a6:e7:90:06:ca:31:3b: 29:db:e9:ff:e8:d8:9a:92:e1:52:7f:ea:a4:51:34:ea:a0:4d: 65:a4:75:a5:f0:8d:66:9c:13:9b:37:2d:33:21:0c:78:82:84: fe:bc:60:14:c3:2e:54:bb:52:1c:97:07:33:9d:b2:9e:97:9b: 35:a5:1f:38:fc:fd:51:79:a3:72:a2:df:5a:3a:d2:ec:b3:d8: 94:5f:df:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaU7F48jWeVGIiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk NDA3Y2M4M2ItZGZhYS00MzM0LWIyMWYtZWU3MDk2MWVjZTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cfVcws+BxXFugI3iYGdohD0bPKu+d2geF6v bQi5Pn1urTFz24rTCZ9SOUmO8LsKZsrk+zdMagfvmeZ66S0upQ/UPvelQvP8GpLR 1gWe+dqx5iYEab25Dqtmj0Nj9+QMy3zzZsT7wblTiWItI/VVPO805v6Jz9mQrp9w 9jRWv1HfQ5Bv5ZvW3bzMd41MkmMTtkghozhvL56sMkqkI92K+tGLcXjg2KncBRfs d1YfbSBSQeFJNNQwL/CjESntBEZRUSEckNdzG+lPfb46mYfFVnPwyqI27WA1rZuy 2qlnWQxzzkYJAGUNTk31RgMl0Mci67OMsjmjzcfC71wpf+dhhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwl88QrD79t+2LBmfhn+ppR2XGcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjU5OTNjOGYtMTI5NS0z MjM3LTg3ZjUtNmY4OWY5MTgwZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7GruoGiigzJS5nvIps72aQh8GVdCxeR/SEQ6DgEHvLWW1M1C6Q4+UW cBQkUVygKvuaoEM5wH6r8eF88fXB0M8Uh/IKvusCou25A84P49g/Vv2UuOiwAjyE kh5uA+DIGw4NQ6z+HVR5D9BDB7Cib6PkXsYcIzdaMfqyiIYjjA3/Oq840PNc/Y8T lsF4ZhcmzF/cgGGqAMiAAdowA4gA/zxnt3HD9N9b0wQRkQ9GpueQBsoxOynb6f/o 2JqS4VJ/6qRRNOqgTWWkdaXwjWacE5s3LTMhDHiChP68YBTDLlS7UhyXBzOdsp6X mzWlHzj8/VF5o3Ki31o60uyz2JRf3wA= -----END CERTIFICATE-----Generated at Thu Apr 17 09:03:15 2025 by rpki-client