$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d6208af-a9bf-3bf7-bd20-7dd74ebd03c4.roa File: 7d6208af-a9bf-3bf7-bd20-7dd74ebd03c4.roa (raw, json) Hash identifier: 2uDyOFLwiWJaQjzluREY+jGZw5DRzRaZEp24zPIzjrk= Subject key identifier: D9:E3:65:A1:8C:19:3D:1D:17:B5:B9:C5:3D:F2:CE:84:87:B6:59:4E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A5B95B5340ADC69A15D3133E0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d6208af-a9bf-3bf7-bd20-7dd74ebd03c4.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:b5:34:0a:dc:69:a1:5d:31:33:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=23897a7e-05f3-432a-868a-c0b0771a9b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:84:c2:e4:e5:ec:c2:ea:6e:ea:ed:b0:f1:1e: a7:d4:c3:a6:30:e6:9a:86:2b:a4:b1:31:88:92:aa: 99:ad:bb:96:b5:3f:da:1f:ff:f0:2d:13:95:dc:a7: a6:85:c4:85:70:ae:17:26:a5:69:8f:e3:4f:36:d0: 0b:95:bd:5f:09:ff:81:a6:90:52:a3:20:11:03:d6: 29:ff:d4:5f:a1:40:17:24:e5:ba:36:e8:5f:87:de: ef:5e:6b:15:78:74:86:91:40:c5:0e:cc:48:15:59: 97:b7:d2:e4:11:80:91:61:d3:fb:16:9f:23:be:48: 16:0d:69:15:84:5a:7b:67:6c:23:39:9a:e3:54:40: f1:db:31:ad:43:37:e7:d8:6c:c1:13:ba:28:a6:50: eb:92:10:cd:34:51:96:21:a2:d4:42:52:a2:53:29: e9:b6:df:82:96:fd:5d:e3:f5:d9:c2:b8:04:54:05: f4:b6:ec:0d:09:fd:f7:77:62:c7:05:d7:38:ed:d6: dc:bc:63:de:57:b5:d1:8c:c6:4e:f3:1f:42:b6:9c: ad:3c:fc:d4:f8:15:1d:e1:37:53:32:63:59:ec:2e: 53:f3:25:b5:50:58:7f:42:f3:0e:b8:51:48:7d:f0: 3b:d5:9e:4c:eb:4a:94:08:52:11:fb:c9:29:ed:5b: d1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E3:65:A1:8C:19:3D:1D:17:B5:B9:C5:3D:F2:CE:84:87:B6:59:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d6208af-a9bf-3bf7-bd20-7dd74ebd03c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:34:75:b7:ff:37:3a:2c:14:82:31:6b:a4:85:25:b7:16:cb: 64:a6:e4:fc:7f:40:6c:2b:95:83:72:ff:8d:43:09:cf:0a:a9: 0e:00:b7:21:16:5d:d2:0e:c4:eb:ea:3e:21:fc:fa:aa:0e:8c: b5:67:5c:aa:db:3e:f1:bc:6c:a6:d3:8c:8c:05:37:5a:b1:0d: 53:c2:9c:ca:0d:f9:48:ad:6b:17:0e:a5:92:bb:a5:e9:9e:13: 96:62:c4:51:0a:29:f9:60:04:a9:da:d5:83:b3:ea:1e:97:df: 7e:8f:fb:45:4a:c2:a3:2b:9a:7e:5c:7d:d4:71:5a:38:2f:a0: 5a:87:28:1e:65:77:09:6e:2c:29:76:b9:dc:2e:4b:c3:7f:cb: 7e:08:2a:93:5d:7c:cf:50:c9:e6:9f:a6:b4:bf:4c:ea:9d:2d: bd:9c:ec:e4:71:ec:6e:7b:15:6b:6e:15:36:4a:57:8d:f6:8c: 89:03:a5:df:45:96:2c:a7:61:cc:37:a0:55:40:35:65:89:c7: 5d:08:21:e6:32:88:f4:f1:c7:f6:0a:c4:99:e4:b1:dd:65:fd: b1:37:71:d0:ad:6d:e2:6e:a2:25:b5:5f:34:e9:73:1e:45:07: 53:10:ec:71:8b:9f:bb:61:f4:a1:6b:2f:13:b1:bf:35:33:fd: f5:f1:e7:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpblbU0CtxpoV0xM+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk MjM4OTdhN2UtMDVmMy00MzJhLTg2OGEtYzBiMDc3MWE5YjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4TC5OXswupu6u2w8R6n1MOmMOaahiuksTGI kqqZrbuWtT/aH//wLROV3KemhcSFcK4XJqVpj+NPNtALlb1fCf+BppBSoyARA9Yp /9RfoUAXJOW6Nuhfh97vXmsVeHSGkUDFDsxIFVmXt9LkEYCRYdP7Fp8jvkgWDWkV hFp7Z2wjOZrjVEDx2zGtQzfn2GzBE7ooplDrkhDNNFGWIaLUQlKiUynptt+Clv1d 4/XZwrgEVAX0tuwNCf33d2LHBdc47dbcvGPeV7XRjMZO8x9CtpytPPzU+BUd4TdT MmNZ7C5T8yW1UFh/QvMOuFFIffA71Z5M60qUCFIR+8kp7VvRVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnjZaGMGT0dF7W5xT3yzoSHtllOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2Q2MjA4YWYtYTliZi0z YmY3LWJkMjAtN2RkNzRlYmQwM2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJY0dbf/NzosFIIxa6SFJbcWy2Sm5Px/QGwrlYNy/41DCc8KqQ4AtyEW XdIOxOvqPiH8+qoOjLVnXKrbPvG8bKbTjIwFN1qxDVPCnMoN+UitaxcOpZK7peme E5ZixFEKKflgBKna1YOz6h6X336P+0VKwqMrmn5cfdRxWjgvoFqHKB5ldwluLCl2 udwuS8N/y34IKpNdfM9QyeafprS/TOqdLb2c7ORx7G57FWtuFTZKV432jIkDpd9F liynYcw3oFVANWWJx10IIeYyiPTxx/YKxJnksd1l/bE3cdCtbeJuoiW1XzTpcx5F B1MQ7HGLn7th9KFrLxOxvzUz/fXx53s= -----END CERTIFICATE-----Generated at Thu Jul 10 02:52:50 2025 by rpki-client