$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/989bb846-baa3-3143-83bd-8768ef87ff43.roa File: 989bb846-baa3-3143-83bd-8768ef87ff43.roa (raw, json) Hash identifier: rHSAieyYBXHX1TK2K3E+nB3VDouaRJmc9y187uHmuEo= Subject key identifier: A7:9D:30:1C:41:53:8D:38:B7:F4:D7:21:FF:62:CB:F8:E8:DE:D7:30 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A68260D53CB519145B9D46A44 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/989bb846-baa3-3143-83bd-8768ef87ff43.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 8069 IP address blocks: 20.33.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:0d:53:cb:51:91:45:b9:d4:6a:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=347bfdef-e61e-43fa-abc2-e3da78622c26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:93:a2:31:41:27:61:55:b6:b4:78:62:ba:79: 0d:7d:29:3b:b7:ac:5f:6c:7f:a8:8b:04:f2:df:ea: 12:0f:a7:79:c6:94:40:b4:cc:77:57:68:7c:aa:d8: 7f:f1:c1:08:35:96:a8:9f:8d:aa:af:14:8b:83:b2: 53:0e:ae:f4:13:03:d1:fa:35:34:96:14:3a:fc:7b: 22:cc:72:12:72:16:09:e0:2c:98:7e:c8:4c:74:24: 0a:55:bf:b5:e1:62:d9:57:ea:f2:1d:7d:01:c8:d1: 0b:54:bc:d7:52:53:68:0f:30:97:bb:e8:db:9b:7e: 42:de:7a:45:12:5f:47:2a:14:3f:ff:ea:60:04:aa: e8:8c:da:53:4d:50:a2:d3:a9:a3:f2:9b:01:fd:07: 1f:c3:71:dd:3c:21:c7:56:10:0a:e8:39:fe:aa:73: 56:b0:11:f4:65:1c:94:5e:f9:2a:79:37:3a:04:f3: e0:8e:0f:a7:1d:3b:f3:ca:24:72:d2:31:f7:fe:b8: 74:c3:29:f3:e3:68:e9:d7:d2:19:2f:19:03:65:85: 9e:04:73:4b:3a:f5:17:91:ff:68:66:9a:58:79:55: 6a:f7:d0:26:95:c6:89:3a:24:86:01:26:f7:2e:61: 6a:c2:cf:ee:19:9c:2a:49:80:65:1d:c7:7c:77:76: e3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9D:30:1C:41:53:8D:38:B7:F4:D7:21:FF:62:CB:F8:E8:DE:D7:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/989bb846-baa3-3143-83bd-8768ef87ff43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:25:d0:16:6b:84:6e:3a:16:cb:3c:b2:35:55:53:cd:04:39: 58:cf:41:6d:6c:db:35:74:e1:2d:bf:9d:45:cd:42:b6:56:74: 66:a1:c4:d3:b3:01:22:90:b4:39:76:dc:e9:2b:1d:6f:da:85: 0d:d6:f2:30:98:27:8a:b5:eb:a3:c4:31:e0:54:da:3c:f7:36: 06:10:5d:5a:fa:94:8f:b3:0b:ba:d0:58:10:c0:d8:ba:8d:f7: 42:33:6c:af:2d:af:d4:cb:37:06:57:49:17:ef:46:0a:b1:8e: 3e:54:dc:7b:2a:f4:73:6a:59:c4:80:07:6c:2d:2d:c7:5b:0a: 6c:5a:6a:ec:08:1c:ae:6a:19:31:69:64:ac:61:53:06:03:fc: 1a:43:fd:cf:14:fa:2f:02:88:d4:bf:c9:9e:bc:33:58:10:e2: 1a:c1:2a:50:72:23:d6:49:52:c8:9c:c9:b0:3e:aa:a9:d5:2b: ca:8d:44:09:36:04:94:9c:d6:55:e7:08:e0:03:8e:28:49:3f: ad:86:61:15:5a:ce:1d:eb:e1:fd:a9:a2:2e:e9:dc:03:ab:18: be:61:78:a2:c6:c3:e4:da:b2:38:e3:b3:e2:bb:db:e3:6b:14: 02:cd:d7:bd:6d:9d:f6:2e:9b:ab:2d:71:02:14:d3:d0:c5:fa: 0d:fd:31:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJg1Ty1GRRbnUakQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk MzQ3YmZkZWYtZTYxZS00M2ZhLWFiYzItZTNkYTc4NjIyYzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5OiMUEnYVW2tHhiunkNfSk7t6xfbH+oiwTy 3+oSD6d5xpRAtMx3V2h8qth/8cEINZaon42qrxSLg7JTDq70EwPR+jU0lhQ6/Hsi zHISchYJ4CyYfshMdCQKVb+14WLZV+ryHX0ByNELVLzXUlNoDzCXu+jbm35C3npF El9HKhQ//+pgBKrojNpTTVCi06mj8psB/Qcfw3HdPCHHVhAK6Dn+qnNWsBH0ZRyU XvkqeTc6BPPgjg+nHTvzyiRy0jH3/rh0wynz42jp19IZLxkDZYWeBHNLOvUXkf9o ZppYeVVq99AmlcaJOiSGASb3LmFqws/uGZwqSYBlHcd8d3bjqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKedMBxBU404t/TXIf9iy/jo3tcwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTg5YmI4NDYtYmFhMy0z MTQzLTgzYmQtODc2OGVmODdmZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwl0BZrhG46Fss8sjVVU80EOVjPQW1s2zV04S2/nUXNQrZWdGahxNOz ASKQtDl23OkrHW/ahQ3W8jCYJ4q166PEMeBU2jz3NgYQXVr6lI+zC7rQWBDA2LqN 90IzbK8tr9TLNwZXSRfvRgqxjj5U3Hsq9HNqWcSAB2wtLcdbCmxaauwIHK5qGTFp ZKxhUwYD/BpD/c8U+i8CiNS/yZ68M1gQ4hrBKlByI9ZJUsicybA+qqnVK8qNRAk2 BJSc1lXnCOADjihJP62GYRVazh3r4f2poi7p3AOrGL5heKLGw+Tasjjjs+K72+Nr FALN171tnfYum6stcQIU09DF+g39Mdw= -----END CERTIFICATE-----Generated at Thu Jul 10 03:47:49 2025 by rpki-client