$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/273c9b70-70a4-3eb6-9810-590c5e753b05.roa File: 273c9b70-70a4-3eb6-9810-590c5e753b05.roa (raw, json) Hash identifier: a+IYlKSG+AHtE+9UGHAV9ZDvPE5hMpMEHRqzXUQbmUY= Subject key identifier: F2:8C:8A:81:FF:66:47:DE:7D:9A:60:27:91:B0:73:45:54:18:F3:99 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858496A19B1CD5FC5E881125CA380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/273c9b70-70a4-3eb6-9810-590c5e753b05.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 8069 IP address blocks: 20.33.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:b1:cd:5f:c5:e8:81:12:5c:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=5009fc1b-387a-4990-80ab-413b4c04133d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5c:7f:6e:a3:ea:f0:1e:12:21:7e:05:55:64: 33:7c:29:8f:92:84:5e:34:dd:ae:65:55:2c:54:39: 74:fc:e4:e5:8b:61:ea:a5:79:8f:1f:09:d4:7a:97: b0:63:45:e5:d3:e9:e0:c3:6b:72:90:30:6f:fc:64: 6c:1e:ee:bf:ec:95:81:e7:46:15:0a:4d:27:3b:c0: 59:82:dc:bd:81:a3:c3:8b:bd:db:db:50:37:d3:86: b9:68:7a:1f:d6:c5:a4:2f:1c:3f:af:20:39:eb:0c: c1:8d:0a:f4:28:e3:bc:3a:2f:ae:53:d6:d8:e2:4e: d7:d8:9c:65:1e:16:5f:59:97:cc:e8:71:7b:ed:75: f7:c3:cb:2c:90:dd:f8:4c:f8:f5:1c:d8:b9:eb:42: 73:c2:af:7a:e6:f7:2f:3f:aa:79:ef:b7:2b:18:eb: cb:55:93:a0:8e:08:02:8e:bc:71:18:ec:c0:dc:64: f3:9b:6e:fb:b3:fa:14:e4:5b:d2:c6:b5:f8:bc:cb: 78:90:79:fe:de:aa:1f:35:a3:99:85:bb:08:86:d4: fc:48:b8:da:27:e0:4a:83:bf:6f:14:4a:c0:b1:c8: 69:82:b6:6e:22:3b:c2:99:28:69:50:d4:bf:9c:23: ee:74:bf:65:26:12:38:88:87:f1:01:4f:d0:49:48: 8e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8C:8A:81:FF:66:47:DE:7D:9A:60:27:91:B0:73:45:54:18:F3:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/273c9b70-70a4-3eb6-9810-590c5e753b05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:63:24:fc:cf:fc:28:99:7c:e9:7e:57:3b:e9:87:15:c4:df: bb:f1:0d:0a:c5:71:02:05:d5:a3:19:31:b8:95:63:b9:4c:7d: ea:70:35:b2:04:ca:1b:d1:77:25:e1:67:c6:9f:1c:60:f4:06: 81:26:59:1b:29:9b:5a:ec:4c:f6:e1:61:dc:c4:ff:4f:7d:6c: dc:21:54:10:8b:c9:eb:d3:9e:7d:b0:0a:26:58:32:58:ad:d9: e6:f1:a6:4d:94:f7:ee:80:91:96:55:ba:62:28:87:49:b3:29: 4a:2c:d8:27:df:6f:71:6c:51:d3:22:9b:0d:45:81:40:ea:9e: 9b:73:55:2c:4f:72:5c:c3:f4:4a:c2:ee:e6:f5:e7:c3:65:cd: ff:d9:b5:ab:72:86:89:83:83:d4:2a:aa:c1:ca:14:1b:1e:e6: 89:9f:98:6c:80:c5:39:9f:43:70:b8:1c:0c:f3:88:3d:2b:70: 55:3c:3d:ab:cb:75:c6:0e:64:a0:ea:ff:5c:77:90:0f:f7:d2: 2e:63:bd:e8:bd:2b:f7:02:e8:7c:7d:ff:2d:4b:3c:af:1f:ec: 9d:86:c7:6a:22:c4:ad:0d:ee:38:14:46:54:70:68:db:68:9a: 94:ed:c0:41:ab:bd:db:4b:1a:86:be:d7:8c:cb:ad:86:12:2e: 02:88:4e:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGbHNX8XogRJco4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk NTAwOWZjMWItMzg3YS00OTkwLTgwYWItNDEzYjRjMDQxMzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFx/bqPq8B4SIX4FVWQzfCmPkoReNN2uZVUs VDl0/OTli2HqpXmPHwnUepewY0Xl0+ngw2tykDBv/GRsHu6/7JWB50YVCk0nO8BZ gty9gaPDi73b21A304a5aHof1sWkLxw/ryA56wzBjQr0KOO8Oi+uU9bY4k7X2Jxl HhZfWZfM6HF77XX3w8sskN34TPj1HNi560Jzwq965vcvP6p577crGOvLVZOgjggC jrxxGOzA3GTzm277s/oU5FvSxrX4vMt4kHn+3qofNaOZhbsIhtT8SLjaJ+BKg79v FErAschpgrZuIjvCmShpUNS/nCPudL9lJhI4iIfxAU/QSUiOQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKMioH/ZkfefZpgJ5Gwc0VUGPOZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjczYzliNzAtNzBhNC0z ZWI2LTk4MTAtNTkwYzVlNzUzYjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1jJPzP/CiZfOl+VzvphxXE37vxDQrFcQIF1aMZMbiVY7lMfepwNbIE yhvRdyXhZ8afHGD0BoEmWRspm1rsTPbhYdzE/099bNwhVBCLyevTnn2wCiZYMlit 2ebxpk2U9+6AkZZVumIoh0mzKUos2Cffb3FsUdMimw1FgUDqnptzVSxPclzD9ErC 7ub158Nlzf/ZtatyhomDg9QqqsHKFBse5omfmGyAxTmfQ3C4HAzziD0rcFU8PavL dcYOZKDq/1x3kA/30i5jvei9K/cC6Hx9/y1LPK8f7J2Gx2oixK0N7jgURlRwaNto mpTtwEGrvdtLGoa+14zLrYYSLgKITvI= -----END CERTIFICATE-----Generated at Thu Apr 17 09:01:57 2025 by rpki-client