$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5649da9b-3839-3d07-bcad-0c91e11ba7ce.roa File: 5649da9b-3839-3d07-bcad-0c91e11ba7ce.roa (raw, json) Hash identifier: gd0H6obAtdVZtV1yIIgwkHyJX8uLW2hI9yamCjLURBk= Subject key identifier: 64:8D:79:62:03:6C:6B:8C:14:0C:9C:D2:3D:00:9A:2E:22:92:C3:ED Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A68260D45B7A1DEDC711F0180 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5649da9b-3839-3d07-bcad-0c91e11ba7ce.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 8069 IP address blocks: 20.33.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:0d:45:b7:a1:de:dc:71:1f:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=426c53a6-18cb-4aa4-93bf-d2ab27fc0bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:50:c5:01:ba:c0:17:42:5a:86:94:65:b0:52: dc:73:ed:cc:2f:6b:9f:2c:01:b4:6e:a2:b3:22:54: 44:86:e6:8b:9e:bd:e3:3c:35:7f:33:d9:63:8d:ce: 8a:bd:fa:62:e7:1f:39:1d:42:ca:eb:38:a9:e0:91: 81:31:4b:c8:fd:8b:18:9a:bf:1a:5f:fc:7d:f4:ac: f9:49:9c:9d:b1:5c:8d:4f:df:02:45:fa:6d:5c:02: e5:2a:26:a6:f6:76:59:db:31:92:f8:b0:c3:6a:bc: 00:70:57:7b:77:ff:ff:67:60:b7:cf:1a:f0:63:ee: 9c:1a:2a:0a:28:7c:80:12:33:ff:30:23:16:bb:c0: 8d:94:fc:bd:ce:40:fb:61:2b:19:16:24:03:0b:46: cb:85:69:06:38:46:9d:20:ee:7e:5b:e8:af:78:ba: 98:75:c1:33:5b:c5:6e:7c:f3:52:b9:0f:2f:d9:b6: 36:88:ea:a4:e6:d5:a1:18:ce:2d:a3:e1:83:70:d2: 83:e3:7b:4d:c7:37:9d:7c:ee:cf:9a:f0:c7:0b:96: 3d:5f:af:59:55:3e:e7:cb:ef:4b:83:c3:2f:49:40: 99:8e:a0:d9:9e:c3:8b:a2:07:a1:60:44:86:ba:65: 01:63:15:a9:ac:81:65:a0:33:d3:07:c0:13:09:fc: 66:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8D:79:62:03:6C:6B:8C:14:0C:9C:D2:3D:00:9A:2E:22:92:C3:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5649da9b-3839-3d07-bcad-0c91e11ba7ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:78:16:4e:d0:04:bd:d1:5c:7b:ac:b8:d2:ba:8e:34:46:16: 99:3d:cc:b4:ee:10:58:5f:fa:17:62:51:92:7b:d4:96:a6:11: c4:46:10:bc:28:c0:fa:70:20:23:8a:16:7f:13:b5:fa:83:d9: 66:2f:ad:c9:d7:9d:d9:4d:c3:c7:16:26:10:38:8f:30:57:b9: 52:b2:b2:3b:32:17:87:ed:ad:da:af:82:5c:c8:2e:35:f0:41: 6a:ff:e6:52:b6:30:eb:01:3c:de:51:85:28:79:50:16:a8:88: 80:23:b8:a5:f4:2a:c5:05:13:83:08:be:40:9a:fb:68:c3:26: 6f:4b:05:bc:aa:26:42:da:01:20:ae:0e:ca:ca:ef:02:b4:49: 9b:a6:7b:ed:42:89:73:5f:7f:43:09:cd:c4:8a:6d:3f:36:37: 8e:e0:f3:dd:1e:78:03:55:d0:23:c5:69:3d:3e:e0:d6:56:aa: 59:38:d9:64:c6:d4:c0:b0:a3:97:c6:cc:aa:21:e4:a6:b4:d5: b0:ed:7a:08:84:b6:e8:74:89:00:47:d6:f6:7d:de:c8:0a:24: ca:2b:5e:90:1e:db:af:6e:37:8f:ae:00:dc:5d:06:b0:ec:d9: 6a:c2:dd:c6:82:14:35:55:c3:d7:e2:4b:c6:90:a2:44:e3:4c: ee:f3:3f:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJg1Ft6He3HEfAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NDI2YzUzYTYtMThjYi00YWE0LTkzYmYtZDJhYjI3ZmMwYmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lDFAbrAF0JahpRlsFLcc+3ML2ufLAG0bqKz IlREhuaLnr3jPDV/M9ljjc6Kvfpi5x85HULK6zip4JGBMUvI/YsYmr8aX/x99Kz5 SZydsVyNT98CRfptXALlKiam9nZZ2zGS+LDDarwAcFd7d///Z2C3zxrwY+6cGioK KHyAEjP/MCMWu8CNlPy9zkD7YSsZFiQDC0bLhWkGOEadIO5+W+iveLqYdcEzW8Vu fPNSuQ8v2bY2iOqk5tWhGM4to+GDcNKD43tNxzedfO7PmvDHC5Y9X69ZVT7ny+9L g8MvSUCZjqDZnsOLogehYESGumUBYxWprIFloDPTB8ATCfxm+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSNeWIDbGuMFAyc0j0Ami4iksPtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTY0OWRhOWItMzgzOS0z ZDA3LWJjYWQtMGM5MWUxMWJhN2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEF4Fk7QBL3RXHusuNK6jjRGFpk9zLTuEFhf+hdiUZJ71JamEcRGELwo wPpwICOKFn8TtfqD2WYvrcnXndlNw8cWJhA4jzBXuVKysjsyF4ftrdqvglzILjXw QWr/5lK2MOsBPN5RhSh5UBaoiIAjuKX0KsUFE4MIvkCa+2jDJm9LBbyqJkLaASCu DsrK7wK0SZume+1CiXNff0MJzcSKbT82N47g890eeANV0CPFaT0+4NZWqlk42WTG 1MCwo5fGzKoh5Ka01bDtegiEtuh0iQBH1vZ93sgKJMorXpAe269uN4+uANxdBrDs 2WrC3caCFDVVw9fiS8aQokTjTO7zP0c= -----END CERTIFICATE-----Generated at Thu Jul 10 01:18:31 2025 by rpki-client