$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e68b6155-3d36-35e2-bf22-871b49c9a01a.roa File: e68b6155-3d36-35e2-bf22-871b49c9a01a.roa (raw, json) Hash identifier: fHQfoIW8i51b/dAPeOMyi4FoG/Kozz4pjdF0csjdDB8= Subject key identifier: 42:BD:EA:EB:CA:ED:35:45:7B:34:DF:41:86:E6:A8:EE:06:D9:82:B9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849350EA3BF28610BA57E7F0300 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e68b6155-3d36-35e2-bf22-871b49c9a01a.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 8069 IP address blocks: 20.33.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:a3:bf:28:61:0b:a5:7e:7f:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=df609250-2a95-4ec8-9efb-5b3159958601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d0:ae:95:97:41:62:25:0c:45:e2:b3:10:98: 51:e9:1a:a6:de:c6:9f:e0:f1:39:2d:5b:4e:a8:ac: bc:6f:9b:6f:1c:22:2c:aa:e8:10:c0:d3:90:68:cd: 8d:fc:70:c0:94:a7:8e:1b:b7:aa:2b:43:e3:f0:6c: 4a:7a:6c:a2:25:2a:a6:03:b5:8b:7a:39:7b:02:fa: b7:5a:aa:cc:4c:65:5c:6c:fd:54:f5:d6:ed:85:17: 99:a9:0e:b5:92:02:02:6c:be:50:d8:f7:9b:bf:df: 59:7a:cd:91:ce:00:19:11:5e:ca:02:7a:21:80:d7: 88:6b:ee:30:38:49:8d:53:6d:eb:dc:80:21:e9:e6: 36:fc:64:a9:37:1e:f0:18:93:72:ba:3b:3a:a5:af: d1:97:0e:f6:ad:90:1b:ba:95:88:89:6d:39:e1:88: ba:76:9a:82:d2:4a:3f:2c:15:2f:ac:45:51:de:03: 52:61:f2:b5:7a:7f:57:2a:d0:87:56:f6:87:00:d4: 40:12:8d:f2:b4:55:48:fb:f8:54:cc:29:8e:8d:d6: 8c:67:0a:c0:b5:7e:23:a1:bb:25:c3:df:20:de:c5: 1a:40:8e:f8:8a:4f:cd:f5:a4:dc:db:d7:47:8c:09: f6:13:dd:40:70:bd:1e:16:90:09:c7:38:7d:25:ea: eb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BD:EA:EB:CA:ED:35:45:7B:34:DF:41:86:E6:A8:EE:06:D9:82:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e68b6155-3d36-35e2-bf22-871b49c9a01a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:c5:e1:bf:b1:de:59:11:f7:95:5c:5a:9d:47:e5:d0:e6:a0: 94:8f:39:a0:d4:8f:33:e5:d4:2e:cc:10:d8:aa:ca:3c:c4:aa: 40:ed:82:c3:2b:ed:5f:3b:7b:82:b5:7a:5c:bf:f9:35:4a:3b: e8:96:62:7c:bb:26:dc:db:21:3a:f3:a3:6a:9b:9e:d3:32:f0: 63:4c:a6:51:70:8c:6c:61:7e:d3:c3:49:2b:ce:f6:bd:f8:33: 87:ac:7d:50:c2:c9:21:9c:a7:86:82:0f:f6:d7:96:5c:0a:52: 44:af:58:89:6d:c0:07:4b:07:c8:17:86:4f:72:89:c8:79:8f: 3b:c5:00:28:9f:54:b0:43:49:4f:2b:41:dc:cb:b0:0d:45:8d: a5:0a:21:0f:86:9d:5c:98:25:57:32:8b:ce:00:2d:40:85:b7: 85:a9:a1:ae:d8:31:cb:c9:11:07:97:ed:eb:f7:83:a8:fa:57: e9:19:70:3d:be:31:95:2f:c7:d6:24:24:75:0a:70:88:87:10: 39:18:92:d9:99:8b:41:8a:c0:1d:0c:5c:e0:4b:0e:4a:05:5d: cf:99:76:ce:42:85:0e:a3:04:cc:0b:57:1b:e3:e6:f4:d4:09: 82:28:d3:6f:3b:52:6f:19:86:5c:92:b4:75:43:60:d8:a7:62: 44:7f:9d:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DqO/KGELpX5/AwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk ZGY2MDkyNTAtMmE5NS00ZWM4LTllZmItNWIzMTU5OTU4NjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtCulZdBYiUMReKzEJhR6Rqm3saf4PE5LVtO qKy8b5tvHCIsqugQwNOQaM2N/HDAlKeOG7eqK0Pj8GxKemyiJSqmA7WLejl7Avq3 WqrMTGVcbP1U9dbthReZqQ61kgICbL5Q2Pebv99Zes2RzgAZEV7KAnohgNeIa+4w OEmNU23r3IAh6eY2/GSpNx7wGJNyujs6pa/Rlw72rZAbupWIiW054Yi6dpqC0ko/ LBUvrEVR3gNSYfK1en9XKtCHVvaHANRAEo3ytFVI+/hUzCmOjdaMZwrAtX4jobsl w98g3sUaQI74ik/N9aTc29dHjAn2E91AcL0eFpAJxzh9Jerr+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEK96uvK7TVFezTfQYbmqO4G2YK5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTY4YjYxNTUtM2QzNi0z NWUyLWJmMjItODcxYjQ5YzlhMDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELF4b+x3lkR95VcWp1H5dDmoJSPOaDUjzPl1C7MENiqyjzEqkDtgsMr 7V87e4K1ely/+TVKO+iWYny7JtzbITrzo2qbntMy8GNMplFwjGxhftPDSSvO9r34 M4esfVDCySGcp4aCD/bXllwKUkSvWIltwAdLB8gXhk9yich5jzvFACifVLBDSU8r QdzLsA1FjaUKIQ+GnVyYJVcyi84ALUCFt4Wpoa7YMcvJEQeX7ev3g6j6V+kZcD2+ MZUvx9YkJHUKcIiHEDkYktmZi0GKwB0MXOBLDkoFXc+Zds5ChQ6jBMwLVxvj5vTU CYIo0287Um8ZhlyStHVDYNinYkR/nUs= -----END CERTIFICATE-----Generated at Sat Apr 5 09:40:20 2025 by rpki-client