$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/257673b6-c9c1-3a5b-b86e-987bf59a6f9a.roa File: 257673b6-c9c1-3a5b-b86e-987bf59a6f9a.roa (raw, json) Hash identifier: LR/ii5VAtwl5rHJz2vZ0I6hR+fA8ynZqdhDPbHuhFoM= Subject key identifier: 06:BE:36:10:15:E2:95:EB:4B:60:AF:BE:98:97:DB:BE:44:91:E7:76 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A71EB557CC0A35F31AE8B7A80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/257673b6-c9c1-3a5b-b86e-987bf59a6f9a.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 8069 IP address blocks: 20.33.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:55:7c:c0:a3:5f:31:ae:8b:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=6f93b850-f4aa-45c2-8d57-111dc322a81d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:71:13:1f:ca:05:7e:b8:f4:88:e1:14:62:c3: b5:3d:f9:08:fe:4b:ff:bb:18:5e:9a:f8:36:82:8f: 67:fa:26:e5:94:33:ea:54:db:01:75:0b:02:1e:c1: 2e:0a:c4:c0:7f:e9:6e:3b:9e:e5:7a:49:ab:5b:05: 1a:4b:65:e6:73:dc:2b:f0:0c:7e:74:18:46:8a:b3: 9a:09:44:6a:de:c1:7b:7a:54:2e:4d:19:0d:5b:6b: ab:76:1a:ad:82:9c:ac:fc:99:1f:04:48:31:30:73: e0:27:24:21:a6:b0:e3:b9:bf:b8:e4:19:2a:2d:93: d2:bf:f8:30:da:90:bf:e5:62:75:06:4a:f7:7b:6d: 2e:fe:09:1b:ac:0d:3a:62:44:18:c9:c3:00:63:1e: 65:d2:b0:c1:1a:89:e7:bc:d8:7f:84:4c:61:56:dd: 50:61:9e:a6:b8:3a:59:d3:5c:53:61:15:71:44:b5: bd:ed:46:17:f4:22:84:22:5f:29:77:f7:5d:7c:9e: e4:b9:e8:7b:54:cf:02:eb:a6:10:ef:91:13:d2:1d: d9:1a:db:fb:b5:bd:43:2e:f2:a2:81:7a:1d:c7:09: 17:39:80:c8:ce:6d:2a:ad:bb:ec:a0:66:44:5f:86: ed:75:70:c2:d3:e2:cd:47:1c:0c:3a:c3:26:98:a7: b0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:BE:36:10:15:E2:95:EB:4B:60:AF:BE:98:97:DB:BE:44:91:E7:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/257673b6-c9c1-3a5b-b86e-987bf59a6f9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:d8:5d:f8:c6:2d:ec:01:bf:87:32:35:67:9a:5d:1c:6a:dd: 66:46:a9:15:f8:e1:fb:45:84:05:da:85:2f:79:cc:ab:9c:4c: eb:32:ea:2d:c7:bf:98:59:bd:a0:44:e2:a1:1b:21:8b:c4:c4: cb:e8:8a:9b:cf:50:13:db:2d:d3:a3:19:c7:50:27:d4:a2:c2: 36:03:29:81:8b:86:88:bc:e8:5f:f2:c9:ab:48:27:8f:1c:88: 40:34:d2:53:0f:a8:28:7f:79:f0:49:b2:17:5a:46:e4:5c:79: 6d:bc:ac:51:5e:c5:1a:4e:9b:b3:93:79:a3:2f:86:c4:49:52: 1a:c9:ea:fb:09:39:71:85:a1:1f:83:af:70:f4:4e:24:7f:99: ac:e8:5b:32:18:f7:e7:6f:95:20:61:98:a3:c5:ec:db:36:0c: 54:b7:1d:29:13:8a:28:68:ec:6a:f0:2c:bf:d5:c7:51:80:e0: 14:22:f7:8e:bf:d5:53:69:cf:49:a2:b5:89:5d:52:f6:56:8a: be:7a:4f:23:06:a5:d7:07:a5:7a:5a:7d:89:ed:8a:26:25:e6: 0b:2a:aa:f0:ab:92:7f:c2:8e:03:99:fa:ca:5f:40:18:3b:dc: 99:34:04:e7:ed:64:ff:4d:8c:e0:6a:6c:0a:71:a6:00:17:aa: 1f:b7:8e:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx61V8wKNfMa6LeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk NmY5M2I4NTAtZjRhYS00NWMyLThkNTctMTExZGMzMjJhODFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnETH8oFfrj0iOEUYsO1PfkI/kv/uxhemvg2 go9n+ibllDPqVNsBdQsCHsEuCsTAf+luO57lekmrWwUaS2Xmc9wr8Ax+dBhGirOa CURq3sF7elQuTRkNW2urdhqtgpys/JkfBEgxMHPgJyQhprDjub+45BkqLZPSv/gw 2pC/5WJ1Bkr3e20u/gkbrA06YkQYycMAYx5l0rDBGonnvNh/hExhVt1QYZ6muDpZ 01xTYRVxRLW97UYX9CKEIl8pd/ddfJ7kueh7VM8C66YQ75ET0h3ZGtv7tb1DLvKi gXodxwkXOYDIzm0qrbvsoGZEX4btdXDC0+LNRxwMOsMmmKewUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAa+NhAV4pXrS2CvvpiX275Eked2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjU3NjczYjYtYzljMS0z YTViLWI4NmUtOTg3YmY1OWE2ZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCENMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPYXfjGLewBv4cyNWeaXRxq3WZGqRX44ftFhAXahS95zKucTOsy6i3H v5hZvaBE4qEbIYvExMvoipvPUBPbLdOjGcdQJ9SiwjYDKYGLhoi86F/yyatIJ48c iEA00lMPqCh/efBJshdaRuRceW28rFFexRpOm7OTeaMvhsRJUhrJ6vsJOXGFoR+D r3D0TiR/mazoWzIY9+dvlSBhmKPF7Ns2DFS3HSkTiiho7GrwLL/Vx1GA4BQi946/ 1VNpz0mitYldUvZWir56TyMGpdcHpXpafYntiiYl5gsqqvCrkn/CjgOZ+spfQBg7 3Jk0BOftZP9NjOBqbApxpgAXqh+3jow= -----END CERTIFICATE-----Generated at Thu Jul 10 01:45:02 2025 by rpki-client