$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3024c24c-377f-3c3d-9a0a-06ffed47fa68.roa File: 3024c24c-377f-3c3d-9a0a-06ffed47fa68.roa (raw, json) Hash identifier: ezHkmE+3voYPzpU9f6qr0tkZWkx/H1h+GGNrX6uCsS8= Subject key identifier: FF:88:72:AA:4D:C3:BA:01:19:43:92:E4:E7:29:43:A6:FE:9D:8E:C2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A71EB55C6FD0A77629F96AEC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3024c24c-377f-3c3d-9a0a-06ffed47fa68.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 8069 IP address blocks: 20.33.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:55:c6:fd:0a:77:62:9f:96:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=b5ce04ba-2940-400c-b203-219bf8890cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1d:3f:47:f3:59:2a:5e:7a:09:ca:6f:3c:9a: 78:af:08:88:1b:de:04:29:1a:d1:ed:7e:58:a4:dd: 47:ad:9a:37:3b:0a:65:c1:bf:14:bd:28:73:c5:57: 9a:4b:c9:4b:ee:d4:65:8b:d8:4a:02:26:e6:43:ee: 67:bc:9d:79:6d:e9:76:95:e7:79:ca:52:2b:09:76: 92:ae:3c:f2:33:03:83:9f:ee:00:01:b8:92:56:19: 32:98:75:2a:8f:95:b4:4d:35:22:5a:1c:7e:bf:10: 84:46:51:2d:b5:64:09:1b:d3:5d:b8:15:ca:58:80: 5c:99:96:ec:7c:cd:57:4d:83:6e:b9:70:c7:fe:1d: 56:41:8f:5f:58:27:c3:03:b4:c9:02:4a:15:f3:06: 16:cd:bd:ac:0d:9c:4b:41:10:e0:01:15:5e:23:cd: 6f:04:9f:b1:08:7b:70:56:31:5b:8d:29:2c:1c:00: 0b:83:68:91:04:4b:94:45:5d:13:d9:f0:e6:c3:d2: 91:5e:e1:3c:4e:04:f4:0e:12:12:27:0a:f8:5d:b2: e3:ca:6b:77:19:4a:26:20:d2:df:27:a2:04:0a:b2: b3:b0:24:5e:7f:5b:61:2e:cc:17:4e:75:2c:1b:3a: b7:14:40:67:c1:f6:ea:f3:44:e8:10:b1:96:44:0b: 02:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:88:72:AA:4D:C3:BA:01:19:43:92:E4:E7:29:43:A6:FE:9D:8E:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3024c24c-377f-3c3d-9a0a-06ffed47fa68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:68:5e:c5:12:cd:04:39:07:f2:16:2f:51:cb:00:9a:97:a3: ad:f4:22:37:3d:70:ba:36:b9:d2:18:23:16:23:aa:00:4b:01: 32:9a:a7:11:b4:99:6d:75:15:52:28:68:95:5a:31:1d:04:9d: af:dc:8e:5a:11:64:eb:3c:a1:45:f6:67:26:aa:52:6d:55:c5: 1a:3a:d6:57:8e:98:eb:85:2a:92:56:95:a9:a0:25:d6:a1:1e: ab:93:35:98:c2:a6:ed:a2:b9:9c:b5:84:4d:06:37:23:84:5f: 76:05:00:9c:1a:08:1f:04:70:f1:26:41:03:6d:cb:43:8b:4c: 4f:1d:7b:cc:61:21:f6:a4:e6:74:68:44:89:a0:2b:05:73:25: 3b:09:ad:a6:7d:20:05:50:c8:43:42:94:5b:cb:33:16:93:e5: 25:bb:64:67:db:f4:ee:8b:65:e9:c0:71:9b:85:48:e7:c0:7b: 8c:b3:6a:ab:0b:ae:b0:b4:44:20:07:47:4d:14:e1:fa:06:9c: ee:33:52:2a:99:ca:56:45:cc:2b:7f:c6:c7:54:eb:f7:bf:95: 87:27:d1:39:b6:c2:a1:ef:9c:7f:6d:91:50:14:b0:5d:29:e6: c3:d9:c0:a4:64:f7:56:91:ef:53:66:3b:b5:31:5d:05:14:2a: ae:77:c2:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx61XG/Qp3Yp+WrsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk YjVjZTA0YmEtMjk0MC00MDBjLWIyMDMtMjE5YmY4ODkwY2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1R0/R/NZKl56CcpvPJp4rwiIG94EKRrR7X5Y pN1HrZo3Owplwb8UvShzxVeaS8lL7tRli9hKAibmQ+5nvJ15bel2led5ylIrCXaS rjzyMwODn+4AAbiSVhkymHUqj5W0TTUiWhx+vxCERlEttWQJG9NduBXKWIBcmZbs fM1XTYNuuXDH/h1WQY9fWCfDA7TJAkoV8wYWzb2sDZxLQRDgARVeI81vBJ+xCHtw VjFbjSksHAALg2iRBEuURV0T2fDmw9KRXuE8TgT0DhISJwr4XbLjymt3GUomINLf J6IECrKzsCRef1thLswXTnUsGzq3FEBnwfbq80ToELGWRAsCXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+IcqpNw7oBGUOS5OcpQ6b+nY7CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzAyNGMyNGMtMzc3Zi0z YzNkLTlhMGEtMDZmZmVkNDdmYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACloXsUSzQQ5B/IWL1HLAJqXo630Ijc9cLo2udIYIxYjqgBLATKapxG0 mW11FVIoaJVaMR0Ena/cjloRZOs8oUX2ZyaqUm1VxRo61leOmOuFKpJWlamgJdah HquTNZjCpu2iuZy1hE0GNyOEX3YFAJwaCB8EcPEmQQNty0OLTE8de8xhIfak5nRo RImgKwVzJTsJraZ9IAVQyENClFvLMxaT5SW7ZGfb9O6LZenAcZuFSOfAe4yzaqsL rrC0RCAHR00U4foGnO4zUiqZylZFzCt/xsdU6/e/lYcn0Tm2wqHvnH9tkVAUsF0p 5sPZwKRk91aR71NmO7UxXQUUKq53wow= -----END CERTIFICATE-----Generated at Thu Jul 10 06:23:48 2025 by rpki-client