$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/795156b6-7498-321b-9c02-ae19435bf64a.roa File: 795156b6-7498-321b-9c02-ae19435bf64a.roa (raw, json) Hash identifier: ulOsCnuLkknXItolhmTOl9qbqK7Ei7/rfwrICI6+UII= Subject key identifier: 78:E0:6D:8D:48:C7:A7:B9:89:E8:F9:7F:E1:A5:93:75:93:38:B7:BD Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A71EB55985E739FF9E14C95C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/795156b6-7498-321b-9c02-ae19435bf64a.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 8069 IP address blocks: 20.33.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:55:98:5e:73:9f:f9:e1:4c:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=49b5ba26-c5dd-4640-86b3-eb11b79a3801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:31:1a:92:dc:54:e4:89:57:c5:62:ec:f2:4b: e2:c2:71:af:3c:a0:47:79:31:e4:82:a8:a5:1e:c5: ef:a2:40:05:ba:91:4b:fd:47:b6:65:05:83:14:a6: 23:93:e4:a5:04:5e:5a:0a:1f:05:92:f6:da:ff:fd: d0:d1:c3:a6:d3:53:e9:c5:da:73:57:4f:20:68:d9: f2:a5:01:90:c9:7b:36:6d:55:d7:19:c6:38:82:53: 75:a8:c5:a1:d9:04:dd:08:22:b3:a5:05:75:21:1c: 86:b3:2c:73:24:c1:78:d6:44:11:39:a2:9a:1c:bd: 17:69:1b:e9:6e:f0:6f:3d:9c:03:06:58:8b:4f:23: ee:a2:6d:6c:31:2a:e2:1d:f8:07:a5:52:22:fa:31: 8b:55:7f:ac:33:06:a9:d8:29:3c:69:e2:e0:f9:9c: 6e:ae:e2:b7:76:ae:bc:ea:04:01:56:8a:ab:f9:67: 6c:9b:78:ba:a3:75:d0:f4:69:f3:25:08:76:4b:a6: 9d:a0:ab:eb:de:93:3a:fe:d7:2a:97:3e:3a:bf:27: ff:41:f4:03:93:9b:2b:5c:0e:b8:38:0a:5d:0c:33: 52:67:3d:5e:69:2b:4d:6c:13:25:6c:2c:07:4c:7f: 0c:a6:5a:46:d5:31:79:b4:ae:23:b2:67:f3:5e:9f: cc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E0:6D:8D:48:C7:A7:B9:89:E8:F9:7F:E1:A5:93:75:93:38:B7:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/795156b6-7498-321b-9c02-ae19435bf64a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:e4:b3:c9:1c:42:68:5f:7e:24:f2:81:cb:6b:79:c4:b4:c4: d1:b4:8a:49:48:a2:c3:c9:dd:8d:0d:d1:74:1e:1d:02:b8:6f: 1f:b5:c1:3b:63:d2:7d:b4:ae:b8:d3:cd:bc:d4:9b:3d:35:31: a0:a3:44:df:d5:c8:f0:c1:70:75:d2:83:2a:1d:7a:06:5b:98: 0b:3b:c2:46:71:51:54:19:a7:dc:45:5a:79:d5:65:94:b0:39: 61:c2:0d:c3:93:77:bc:dc:d4:67:d4:2b:ba:bd:0a:a1:2b:9d: c8:e4:e0:c5:e4:96:03:28:08:76:16:e6:49:76:16:1e:78:04: 79:be:68:ce:05:0a:e6:44:d1:07:23:2f:a4:bd:88:b6:eb:b1: 22:bf:be:53:1f:d8:6c:cc:95:9d:08:95:99:93:21:5b:65:6d: 0a:fa:b7:c9:86:bb:4b:ce:13:01:df:47:2c:82:aa:af:d0:23: f0:c8:99:d2:8c:4a:09:3c:1d:1d:2b:d7:d1:8d:26:79:bb:49: 7d:75:ef:f9:00:f2:97:56:66:1b:ca:4c:62:05:09:fc:ef:03: 1f:55:96:52:e9:01:44:dd:2e:1e:7f:c6:13:5a:87:85:37:e7: c2:23:a0:02:3e:86:99:11:6d:47:d0:4b:64:35:30:ab:5b:cf: 58:cf:a9:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx61WYXnOf+eFMlcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk NDliNWJhMjYtYzVkZC00NjQwLTg2YjMtZWIxMWI3OWEzODAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjEaktxU5IlXxWLs8kviwnGvPKBHeTHkgqil HsXvokAFupFL/Ue2ZQWDFKYjk+SlBF5aCh8Fkvba//3Q0cOm01PpxdpzV08gaNny pQGQyXs2bVXXGcY4glN1qMWh2QTdCCKzpQV1IRyGsyxzJMF41kQROaKaHL0XaRvp bvBvPZwDBliLTyPuom1sMSriHfgHpVIi+jGLVX+sMwap2Ck8aeLg+ZxuruK3dq68 6gQBVoqr+Wdsm3i6o3XQ9GnzJQh2S6adoKvr3pM6/tcqlz46vyf/QfQDk5srXA64 OApdDDNSZz1eaStNbBMlbCwHTH8MplpG1TF5tK4jsmfzXp/MowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjgbY1Ix6e5iej5f+Glk3WTOLe9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzk1MTU2YjYtNzQ5OC0z MjFiLTljMDItYWUxOTQzNWJmNjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7ks8kcQmhffiTygctrecS0xNG0iklIosPJ3Y0N0XQeHQK4bx+1wTtj 0n20rrjTzbzUmz01MaCjRN/VyPDBcHXSgyodegZbmAs7wkZxUVQZp9xFWnnVZZSw OWHCDcOTd7zc1GfUK7q9CqErncjk4MXklgMoCHYW5kl2Fh54BHm+aM4FCuZE0Qcj L6S9iLbrsSK/vlMf2GzMlZ0IlZmTIVtlbQr6t8mGu0vOEwHfRyyCqq/QI/DImdKM Sgk8HR0r19GNJnm7SX117/kA8pdWZhvKTGIFCfzvAx9VllLpAUTdLh5/xhNah4U3 58IjoAI+hpkRbUfQS2Q1MKtbz1jPqRw= -----END CERTIFICATE-----Generated at Thu Jul 10 09:42:33 2025 by rpki-client