$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01a3c2a1-2f63-34b0-8a64-c14151d1f457.roa File: 01a3c2a1-2f63-34b0-8a64-c14151d1f457.roa (raw, json) Hash identifier: UFDW4935m5Fv9VrI4VjDuo69oWzpic/neRl2Msz/Qwg= Subject key identifier: 0D:5A:5B:83:07:33:CD:92:F0:B7:8D:8C:25:9D:CC:2B:A9:C6:25:3D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A5B95B66BC07067108C3BE0A0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01a3c2a1-2f63-34b0-8a64-c14151d1f457.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:b6:6b:c0:70:67:10:8c:3b:e0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=ece5bedc-db41-4f93-a886-ed8bd914d32d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e5:e3:ea:9e:e5:90:b5:63:ff:95:bd:bb:7e: 36:32:d0:ef:36:bd:ad:a5:da:4d:b8:15:0d:f4:54: 3a:b5:3f:1a:c6:d9:5c:08:a2:48:dd:cd:9d:39:d2: 79:36:ee:84:de:9f:f4:b5:03:bf:5d:78:55:13:39: 4b:dd:4d:fe:39:31:d6:23:08:1b:0e:23:62:01:a4: d8:6f:1f:ea:63:44:c0:e8:cb:8d:3b:b2:8e:97:77: 2c:0e:91:ff:b8:80:8c:ae:01:c4:36:4e:36:dc:f7: d9:26:f5:cc:b1:fd:09:24:a9:d2:01:83:45:b6:d2: 8d:9e:d8:e2:af:a1:fe:d9:49:ca:28:df:25:e1:99: 95:6b:41:44:f4:88:c6:33:fd:d3:9a:b0:cf:da:65: 06:77:fa:dc:f3:ee:1a:32:0b:cc:20:e0:88:a3:73: ec:43:d8:0a:6b:ee:e0:a2:c5:6f:69:d2:89:1f:f3: 12:5a:66:f1:d9:32:fe:48:90:81:23:58:af:b9:1e: 99:8e:58:aa:0a:76:80:71:19:90:64:25:91:8e:5e: 71:8d:05:06:1e:6c:84:44:8b:e3:29:85:0d:7f:83: a5:49:1b:ce:9b:ae:97:54:fb:84:e2:c4:a6:7d:94: 02:3f:58:21:48:06:15:7d:66:79:4c:14:8f:d8:96: 6c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5A:5B:83:07:33:CD:92:F0:B7:8D:8C:25:9D:CC:2B:A9:C6:25:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01a3c2a1-2f63-34b0-8a64-c14151d1f457.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:ca:12:f5:c7:69:75:a3:91:5e:e6:07:eb:09:3b:db:a6:0f: e7:dc:a1:c3:03:1e:d2:de:d5:bd:ce:88:4d:30:ef:6c:a8:90: 2c:a5:2d:22:99:39:03:63:eb:1e:c6:de:87:cf:4d:50:9a:dc: b2:22:8f:d4:df:00:95:ab:16:8e:8b:e6:73:8a:bc:60:d2:df: cd:3c:87:30:1a:a1:0e:a6:b6:5b:be:a7:74:c8:5d:0f:dc:05: ad:23:6e:ff:43:e6:89:0f:6b:cd:00:11:05:a3:2c:5d:4f:fd: 34:38:4c:e6:99:8a:0a:dc:65:81:96:b9:2e:04:ea:3b:e3:42: 82:2a:f7:b5:ee:6f:b3:0f:e1:c0:5d:a3:fd:dc:24:02:1d:3e: 54:32:b9:f9:23:41:f1:7f:f6:19:a3:1b:3e:1c:7e:52:c0:72: fc:aa:3f:ce:3d:49:b4:db:a7:13:9a:73:b3:36:5e:0b:1b:76: 18:e2:2b:bd:16:49:a6:1a:e0:a6:98:6f:f8:8c:6a:5d:29:89: b5:84:20:89:28:e3:55:de:88:29:54:0c:31:8b:04:a6:08:4f: d6:5b:5c:0f:cd:d2:40:1e:20:0d:a4:cb:f9:60:6d:cd:2a:1b: ce:75:a6:21:9b:46:a1:89:33:94:c5:c8:6f:5a:6a:29:03:7d: 22:9e:5f:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpblbZrwHBnEIw74KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk ZWNlNWJlZGMtZGI0MS00ZjkzLWE4ODYtZWQ4YmQ5MTRkMzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+Xj6p7lkLVj/5W9u342MtDvNr2tpdpNuBUN 9FQ6tT8axtlcCKJI3c2dOdJ5Nu6E3p/0tQO/XXhVEzlL3U3+OTHWIwgbDiNiAaTY bx/qY0TA6MuNO7KOl3csDpH/uICMrgHENk423PfZJvXMsf0JJKnSAYNFttKNntji r6H+2UnKKN8l4ZmVa0FE9IjGM/3TmrDP2mUGd/rc8+4aMgvMIOCIo3PsQ9gKa+7g osVvadKJH/MSWmbx2TL+SJCBI1ivuR6ZjliqCnaAcRmQZCWRjl5xjQUGHmyERIvj KYUNf4OlSRvOm66XVPuE4sSmfZQCP1ghSAYVfWZ5TBSP2JZs5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1aW4MHM82S8LeNjCWdzCupxiU9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDFhM2MyYTEtMmY2My0z NGIwLThhNjQtYzE0MTUxZDFmNDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDKEvXHaXWjkV7mB+sJO9umD+fcocMDHtLe1b3OiE0w72yokCylLSKZ OQNj6x7G3ofPTVCa3LIij9TfAJWrFo6L5nOKvGDS3808hzAaoQ6mtlu+p3TIXQ/c Ba0jbv9D5okPa80AEQWjLF1P/TQ4TOaZigrcZYGWuS4E6jvjQoIq97Xub7MP4cBd o/3cJAIdPlQyufkjQfF/9hmjGz4cflLAcvyqP849SbTbpxOac7M2XgsbdhjiK70W SaYa4KaYb/iMal0pibWEIIko41XeiClUDDGLBKYIT9ZbXA/N0kAeIA2ky/lgbc0q G851piGbRqGJM5TFyG9aaikDfSKeX/A= -----END CERTIFICATE-----Generated at Thu Jul 10 01:27:37 2025 by rpki-client