$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3dc0fad7-7fb6-3ddd-9a11-e7aeaf916437.roa File: 3dc0fad7-7fb6-3ddd-9a11-e7aeaf916437.roa (raw, json) Hash identifier: kbUj1HV2c6cUs8UmwQ0M3gcp+nFyBh5O9mI0WPJ8b8s= Subject key identifier: 96:A1:1B:67:4F:52:7E:DF:83:ED:86:5E:E8:1C:54:FC:F1:0B:91:4A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A5B95B5EF11D25E978F1C0760 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3dc0fad7-7fb6-3ddd-9a11-e7aeaf916437.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:b5:ef:11:d2:5e:97:8f:1c:07:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=50ca79c3-a85f-455b-b060-a065cc8cb639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:54:6a:5e:89:1c:e3:fb:8f:1a:6b:91:f2:f8: 51:db:e6:31:40:10:cd:61:c7:02:3e:95:bd:9e:f0: fe:94:f9:27:2a:20:c4:09:34:1f:a8:49:0a:96:f4: fa:94:3e:81:1f:d1:7f:a3:15:c3:88:c7:b8:92:d9: d1:e1:bf:27:20:47:0d:58:cd:22:b0:97:14:02:d8: ea:6d:43:d8:98:5a:e6:9a:d5:38:a3:2b:65:36:7c: aa:ba:f6:c9:25:9d:0e:dd:74:5c:63:ef:fa:b2:81: 8c:d1:c0:4b:e7:d0:fb:d7:1c:d3:2c:de:e8:42:de: cd:bf:20:8e:24:81:12:85:11:39:c4:1b:78:e6:90: 87:6a:6c:78:d6:7f:cc:36:61:a4:fb:94:19:4b:b3: b2:9f:21:2a:53:48:94:08:79:42:02:6b:a2:ed:51: 6b:64:d7:7c:44:64:d4:c8:a2:93:d2:32:4e:56:57: 09:f9:3d:73:56:65:38:ac:0a:7d:49:c2:ca:71:f1: 7b:9d:de:69:a1:31:54:26:d1:0f:59:81:4d:f8:b2: eb:cc:77:e5:46:e4:a3:87:a2:a0:21:a3:55:30:a1: dc:7e:61:57:77:5e:24:19:fb:99:3d:25:a0:4c:b6: 71:79:88:83:a2:14:10:e0:c6:dd:78:f9:fb:5f:97: 45:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A1:1B:67:4F:52:7E:DF:83:ED:86:5E:E8:1C:54:FC:F1:0B:91:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3dc0fad7-7fb6-3ddd-9a11-e7aeaf916437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:50:07:59:2e:b9:1b:e6:d6:33:c4:cd:0d:5e:1d:17:00:53: 92:2e:9c:0c:1f:03:aa:83:a6:62:e6:a8:a7:b2:79:91:d1:e4: 76:3a:cb:22:46:c0:3f:aa:9c:f3:4d:c8:e3:eb:19:f6:83:41: da:cb:bb:e4:8a:3a:4d:61:0f:5f:ed:c0:07:64:66:84:ba:ef: 7c:7d:64:8e:de:16:b5:d8:9c:32:13:9b:c0:6b:6c:c5:a9:b4: 2e:bf:f9:f2:87:4b:f3:0e:ed:9b:76:d4:df:92:e2:f9:68:10: d0:04:7c:5d:0c:78:a0:04:b3:22:53:46:8c:72:2c:0a:58:57: 3c:18:27:cf:a1:fb:f2:58:b6:cc:17:d6:fb:ea:bc:69:a0:07: 59:2d:de:01:9c:48:66:04:53:f7:8e:1a:4e:17:1d:c2:7c:24: 32:33:86:d3:27:18:e1:63:66:09:57:e9:a1:56:3c:68:f7:14: cc:42:2e:f7:3e:56:2c:bf:19:0f:43:01:5d:29:53:6f:c4:74: b7:32:f6:ed:00:17:31:df:7b:d1:50:34:2c:b1:ed:84:a9:0e: 24:72:5c:10:3f:e9:74:fe:8e:09:3b:dd:04:c5:f4:56:21:4b: fc:ad:0d:cc:22:91:e7:cf:af:ff:6a:2d:9c:ea:94:73:64:a9: 04:87:47:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpblbXvEdJel48cB2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk NTBjYTc5YzMtYTg1Zi00NTViLWIwNjAtYTA2NWNjOGNiNjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslRqXokc4/uPGmuR8vhR2+YxQBDNYccCPpW9 nvD+lPknKiDECTQfqEkKlvT6lD6BH9F/oxXDiMe4ktnR4b8nIEcNWM0isJcUAtjq bUPYmFrmmtU4oytlNnyquvbJJZ0O3XRcY+/6soGM0cBL59D71xzTLN7oQt7NvyCO JIEShRE5xBt45pCHamx41n/MNmGk+5QZS7OynyEqU0iUCHlCAmui7VFrZNd8RGTU yKKT0jJOVlcJ+T1zVmU4rAp9ScLKcfF7nd5poTFUJtEPWYFN+LLrzHflRuSjh6Kg IaNVMKHcfmFXd14kGfuZPSWgTLZxeYiDohQQ4MbdePn7X5dFRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJahG2dPUn7fg+2GXugcVPzxC5FKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2RjMGZhZDctN2ZiNi0z ZGRkLTlhMTEtZTdhZWFmOTE2NDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBQB1kuuRvm1jPEzQ1eHRcAU5IunAwfA6qDpmLmqKeyeZHR5HY6yyJG wD+qnPNNyOPrGfaDQdrLu+SKOk1hD1/twAdkZoS673x9ZI7eFrXYnDITm8BrbMWp tC6/+fKHS/MO7Zt21N+S4vloENAEfF0MeKAEsyJTRoxyLApYVzwYJ8+h+/JYtswX 1vvqvGmgB1kt3gGcSGYEU/eOGk4XHcJ8JDIzhtMnGOFjZglX6aFWPGj3FMxCLvc+ Viy/GQ9DAV0pU2/EdLcy9u0AFzHfe9FQNCyx7YSpDiRyXBA/6XT+jgk73QTF9FYh S/ytDcwikefPr/9qLZzqlHNkqQSHR0E= -----END CERTIFICATE-----Generated at Thu Jul 10 01:56:37 2025 by rpki-client