$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e958850-6659-3d52-bbff-26a04f499d8d.roa File: 4e958850-6659-3d52-bbff-26a04f499d8d.roa (raw, json) Hash identifier: nu1EZwuG6KMT5xVAoKID4XCKuxTTIvCVoF6dPoL5Ia0= Subject key identifier: 23:54:29:1B:C9:F2:C2:4C:ED:41:46:B1:D9:AE:40:D3:53:82:41:9A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A68260D6B21BB7B7EA0647140 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e958850-6659-3d52-bbff-26a04f499d8d.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 8069 IP address blocks: 20.33.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:0d:6b:21:bb:7b:7e:a0:64:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=920d326e-77e9-44b7-88fb-bffdab22019d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:eb:d1:bb:7a:b7:e3:af:1d:c4:d2:22:bb:21: 2c:87:23:ec:6c:56:36:40:ae:ed:bc:84:ec:6f:5a: 5a:68:6e:00:ed:1a:ea:57:ee:fe:06:28:0a:91:df: ec:6a:24:a8:e1:57:41:b0:aa:d1:ff:ea:d3:20:29: cc:32:76:b6:96:88:20:0c:9c:c3:e4:38:3b:f4:21: a3:fb:f7:98:fb:97:00:84:d3:0f:b3:03:eb:f5:d2: f7:f7:68:97:28:0f:84:11:71:12:be:a0:0f:11:c8: 1e:d1:ba:40:fe:ea:d0:40:c3:9c:65:58:55:6e:96: 0a:07:ca:3f:2d:b8:31:b9:6f:d0:9b:05:8e:9f:c1: a9:82:86:2c:35:53:21:28:80:15:92:1b:1d:0a:45: b7:ba:d3:02:c6:75:6f:bd:66:4f:8c:83:92:92:f6: 53:ea:06:df:7f:b2:62:4e:28:88:5e:5b:80:f3:ff: 5d:2d:dd:b2:7e:f3:cb:e8:34:a9:21:08:ad:22:ac: a7:f1:53:91:b4:7e:3c:35:be:93:39:99:73:cb:0b: 9b:5f:aa:bf:bb:ac:5c:a5:65:8c:5b:a8:8a:cc:c9: b4:f6:a7:d1:91:1b:8f:3a:ea:91:cc:48:7d:a7:eb: 0b:48:09:c8:df:35:eb:d7:19:22:db:02:28:57:f0: 33:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:54:29:1B:C9:F2:C2:4C:ED:41:46:B1:D9:AE:40:D3:53:82:41:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e958850-6659-3d52-bbff-26a04f499d8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:0b:f8:77:af:86:5b:51:dc:fe:5f:5b:16:75:b0:c5:4f:fb: 1a:23:4c:4c:72:b6:df:a7:6f:6d:93:9c:73:2d:0c:3a:e6:99: fa:9a:56:22:52:df:c7:00:39:60:5e:d2:f9:b3:05:70:0d:19: fe:cb:50:96:7a:43:f0:ab:5f:78:2b:9a:18:aa:4c:a6:91:40: e2:cd:ac:e5:9b:a0:8f:1d:5f:8d:8d:24:bf:0b:05:29:29:0e: d5:3c:fc:ba:dd:90:db:83:83:6e:af:e6:26:29:a6:c1:38:e4: 29:a9:fc:c8:3d:bb:34:d0:f2:9d:2f:57:a2:47:0b:f7:b2:46: dc:6f:75:09:7b:43:96:aa:34:c1:2f:34:28:ac:a0:00:20:62: d9:11:ac:bb:67:2e:6b:76:6c:5e:9e:d9:c3:04:ad:ae:9d:38: 4f:68:b1:82:3f:80:d7:7f:1c:b2:f3:29:c8:de:57:67:f7:a2: 34:6b:d0:35:3f:a5:0c:cf:d9:99:15:f1:76:a1:dd:d3:03:39: d8:cd:55:9e:22:64:4e:27:1c:87:b5:2f:19:bb:ef:32:55:1e: 5c:de:18:6a:4e:49:54:ed:48:5e:bb:73:00:67:b1:d6:8f:34: b5:cf:77:b7:c9:16:44:78:0c:bd:49:fc:c7:3d:e6:d3:61:f3: 3a:a0:e7:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJg1rIbt7fqBkcUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk OTIwZDMyNmUtNzdlOS00NGI3LTg4ZmItYmZmZGFiMjIwMTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmevRu3q3468dxNIiuyEshyPsbFY2QK7tvITs b1paaG4A7RrqV+7+BigKkd/saiSo4VdBsKrR/+rTICnMMna2loggDJzD5Dg79CGj +/eY+5cAhNMPswPr9dL392iXKA+EEXESvqAPEcge0bpA/urQQMOcZVhVbpYKB8o/ LbgxuW/QmwWOn8GpgoYsNVMhKIAVkhsdCkW3utMCxnVvvWZPjIOSkvZT6gbff7Ji TiiIXluA8/9dLd2yfvPL6DSpIQitIqyn8VORtH48Nb6TOZlzywubX6q/u6xcpWWM W6iKzMm09qfRkRuPOuqRzEh9p+sLSAnI3zXr1xki2wIoV/AzAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNUKRvJ8sJM7UFGsdmuQNNTgkGaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGU5NTg4NTAtNjY1OS0z ZDUyLWJiZmYtMjZhMDRmNDk5ZDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4L+HevhltR3P5fWxZ1sMVP+xojTExytt+nb22TnHMtDDrmmfqaViJS 38cAOWBe0vmzBXANGf7LUJZ6Q/CrX3grmhiqTKaRQOLNrOWboI8dX42NJL8LBSkp DtU8/LrdkNuDg26v5iYppsE45Cmp/Mg9uzTQ8p0vV6JHC/eyRtxvdQl7Q5aqNMEv NCisoAAgYtkRrLtnLmt2bF6e2cMEra6dOE9osYI/gNd/HLLzKcjeV2f3ojRr0DU/ pQzP2ZkV8Xah3dMDOdjNVZ4iZE4nHIe1Lxm77zJVHlzeGGpOSVTtSF67cwBnsdaP NLXPd7fJFkR4DL1J/Mc95tNh8zqg50Q= -----END CERTIFICATE-----Generated at Thu Jul 10 03:26:03 2025 by rpki-client