$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/69e687b5-c66f-3cd6-b1f2-623803e3abd1.roa File: 69e687b5-c66f-3cd6-b1f2-623803e3abd1.roa (raw, json) Hash identifier: O4Nf70mJZbYfAWKsfRtyiEO/Mhmypviow3wVr1aTJtk= Subject key identifier: 99:D0:9E:08:EA:96:6C:1C:41:F3:B8:53:1E:D5:0C:F7:56:98:DA:8B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584944694E892A841DE6C522A9C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/69e687b5-c66f-3cd6-b1f2-623803e3abd1.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 8069 IP address blocks: 20.33.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:4e:89:2a:84:1d:e6:c5:22:a9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=dcece3a8-53cb-419b-8956-94dc5088d96d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ff:03:ad:af:9e:7f:2e:eb:22:e1:59:a9:63: 7f:bc:64:c2:e5:22:ba:b7:a6:fd:dc:65:3e:83:1a: c7:2c:34:95:4f:5f:4b:66:d3:45:ed:83:ef:c5:bf: 05:e6:eb:ab:dc:5f:e7:13:38:75:57:8a:87:cc:5f: 24:6d:8c:7a:75:8e:85:34:6c:c1:0d:3d:8c:7c:51: 67:c2:e9:5c:b5:b3:a6:45:4d:e7:ec:40:c2:e2:0a: 41:ac:3e:e9:0c:36:92:d7:f4:7a:84:1a:57:4e:60: 06:38:80:16:54:d2:70:c9:42:e1:2e:c4:a9:93:e4: 92:ae:9e:2d:5a:82:4d:11:07:84:d6:06:9a:5b:32: 61:45:b8:1b:b2:28:42:7a:1d:38:21:4f:7e:e6:f2: 60:4d:d3:a9:03:f7:cb:0a:3c:40:7a:4b:c9:97:af: 58:b4:12:90:85:bc:3c:f2:22:cf:77:88:87:2d:66: 8d:1f:45:1c:be:ea:2e:3d:85:fc:27:5c:53:cd:f2: 74:18:bb:0e:bd:63:38:75:55:5e:5e:31:a6:a0:88: fa:1e:7f:b7:bc:79:c7:91:b0:91:c5:a5:cd:b4:20: 8f:ab:4d:16:03:22:c3:9f:e6:a7:a2:70:10:83:44: c5:f1:40:8d:bd:cb:cb:7c:b5:7e:8e:b7:b9:a4:27: 69:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D0:9E:08:EA:96:6C:1C:41:F3:B8:53:1E:D5:0C:F7:56:98:DA:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/69e687b5-c66f-3cd6-b1f2-623803e3abd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:90:96:df:89:b4:73:f4:05:5c:c2:90:68:45:17:03:e2:f9: f5:8d:07:d3:c4:98:7b:89:80:18:41:82:21:89:51:f8:98:cf: ea:fa:c5:f8:24:81:e6:94:f6:8b:33:dc:3f:5d:ed:d9:69:e4: 6f:a3:79:be:db:14:5f:86:60:bc:b2:86:b6:6e:04:ec:0e:de: 18:3a:e5:9c:c4:6a:17:ff:78:df:05:29:f6:45:61:a2:75:e0: f4:3f:d0:83:d6:f9:f4:89:c4:f9:96:2f:f1:64:ae:d0:85:90: da:2c:0f:b1:22:6c:e7:11:58:53:2b:e7:b5:e8:b5:a0:c9:d3: 9f:23:7b:38:34:0b:18:3d:67:44:49:d3:47:35:1c:72:bc:f7: 00:c4:98:66:6e:5c:f9:44:a2:b4:b6:13:1f:b2:9d:dd:c7:b6: 84:b7:81:7d:6c:68:f5:52:67:78:59:9c:55:43:cd:38:4f:23: 87:cf:b2:e9:f4:99:81:38:90:23:7f:2e:5f:2c:e0:01:11:84: fd:73:a8:ef:86:5c:5c:0e:c4:ad:1d:5a:15:1c:23:7b:13:f4: 2b:c1:cc:57:d8:01:81:7e:f9:ae:e3:8d:81:d7:dd:1a:6e:5f: e2:35:1b:2c:d2:d8:c2:58:c1:84:f4:3e:83:73:57:42:5e:31: d9:ce:05:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaU6JKoQd5sUiqcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk ZGNlY2UzYTgtNTNjYi00MTliLTg5NTYtOTRkYzUwODhkOTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/8Dra+efy7rIuFZqWN/vGTC5SK6t6b93GU+ gxrHLDSVT19LZtNF7YPvxb8F5uur3F/nEzh1V4qHzF8kbYx6dY6FNGzBDT2MfFFn wulctbOmRU3n7EDC4gpBrD7pDDaS1/R6hBpXTmAGOIAWVNJwyULhLsSpk+SSrp4t WoJNEQeE1gaaWzJhRbgbsihCeh04IU9+5vJgTdOpA/fLCjxAekvJl69YtBKQhbw8 8iLPd4iHLWaNH0UcvuouPYX8J1xTzfJ0GLsOvWM4dVVeXjGmoIj6Hn+3vHnHkbCR xaXNtCCPq00WAyLDn+anonAQg0TF8UCNvcvLfLV+jre5pCdpZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnQngjqlmwcQfO4Ux7VDPdWmNqLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjllNjg3YjUtYzY2Zi0z Y2Q2LWIxZjItNjIzODAzZTNhYmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaQlt+JtHP0BVzCkGhFFwPi+fWNB9PEmHuJgBhBgiGJUfiYz+r6xfgk geaU9osz3D9d7dlp5G+jeb7bFF+GYLyyhrZuBOwO3hg65ZzEahf/eN8FKfZFYaJ1 4PQ/0IPW+fSJxPmWL/FkrtCFkNosD7EibOcRWFMr57XotaDJ058jezg0Cxg9Z0RJ 00c1HHK89wDEmGZuXPlEorS2Ex+ynd3HtoS3gX1saPVSZ3hZnFVDzThPI4fPsun0 mYE4kCN/Ll8s4AERhP1zqO+GXFwOxK0dWhUcI3sT9CvBzFfYAYF++a7jjYHX3Rpu X+I1GyzS2MJYwYT0PoNzV0JeMdnOBd4= -----END CERTIFICATE-----Generated at Thu Apr 17 09:01:18 2025 by rpki-client