$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a224f8e7-d8e5-3c2c-8b2f-55a68efb823b.roa File: a224f8e7-d8e5-3c2c-8b2f-55a68efb823b.roa (raw, json) Hash identifier: 9WKwoP+D5pz7/JApaZQVhM0DB6ylP99lVCwP1jO2wnI= Subject key identifier: D9:81:CB:25:A2:DB:58:91:04:46:E6:90:71:5B:07:1D:5D:A9:F5:42 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A5B95B623A6BB1F493B000B60 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a224f8e7-d8e5-3c2c-8b2f-55a68efb823b.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:b6:23:a6:bb:1f:49:3b:00:0b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=37c9ebdf-be8b-4754-a9d7-ec9b2bb07791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5a:0f:c6:30:7d:83:a6:43:90:6e:db:fd:24: 01:87:42:05:ee:99:b7:65:c0:43:10:38:1e:66:a1: d6:fc:9a:f0:2e:a1:b0:9b:80:70:30:eb:c7:e5:07: 70:c4:c7:4b:fd:04:49:ff:e3:12:13:e5:89:0a:76: 85:3e:41:83:8e:6b:60:de:b9:d1:d7:34:d8:2e:de: c4:a5:dd:20:33:70:b8:17:53:b2:d6:32:e9:32:77: ee:de:8b:70:f4:a6:09:2f:de:1f:c2:83:38:1c:c1: a2:d0:e8:35:9f:f0:70:38:4b:ef:d3:43:dd:54:ac: 72:98:c8:a8:ac:a5:c2:6b:aa:fb:9e:67:25:f1:6f: d8:94:c2:31:19:a0:6e:59:37:6a:5b:d2:bb:0c:49: 05:8d:72:9b:34:6f:e7:bd:b2:0a:23:1a:c7:35:bd: 98:e9:95:9e:eb:1d:d1:e0:0f:8d:86:f4:cf:35:22: 56:69:05:1a:8d:64:64:e6:38:64:21:56:13:94:78: 52:6d:71:47:ca:75:48:5b:5c:85:25:7f:75:8e:59: 58:31:22:0b:47:1e:58:71:79:b7:53:fd:df:6d:1e: 1b:67:98:25:c7:47:c3:00:8d:8f:c2:20:2d:33:f9: b4:3a:02:7c:a6:1d:94:50:b9:5c:a1:c2:e6:ac:67: f1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:81:CB:25:A2:DB:58:91:04:46:E6:90:71:5B:07:1D:5D:A9:F5:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a224f8e7-d8e5-3c2c-8b2f-55a68efb823b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:80:6b:7d:d0:11:b3:31:01:8e:e7:f5:c7:58:8f:c9:5e:59: 60:a2:5a:5b:70:89:77:50:eb:08:7a:76:19:23:7f:a1:ab:5b: 6e:67:dc:de:b0:20:79:f1:11:80:14:8e:bd:18:ad:ad:12:a2: 6b:0d:8b:cf:a6:b2:3e:25:e5:5d:cb:8d:79:40:e8:2c:6c:84: 5d:ff:af:4d:f6:d0:b8:4e:f1:57:1b:10:b1:d4:c1:37:5c:c8: c8:07:04:8d:15:64:84:16:c5:80:a4:df:0f:e8:98:20:b6:f7: b2:95:c1:b5:30:0e:5f:68:ed:7b:a3:ee:f3:b2:34:a8:b8:df: 1b:4b:68:8b:6a:38:33:07:23:d5:43:cf:b0:e9:b3:7e:c2:e5: 75:de:5f:93:01:3a:87:32:b3:77:e9:49:a8:12:38:0c:ff:7b: 63:59:4b:3f:44:bb:c9:21:78:e1:f9:e1:18:65:17:2b:c8:56: d0:aa:3f:aa:b7:15:7a:24:45:44:02:b1:48:35:fd:59:6c:3f: 48:db:4b:e2:95:20:f0:e7:80:cc:63:40:61:57:f8:ca:6e:5b: 04:60:2f:3d:26:3c:7b:c9:ab:61:27:dc:ae:ef:2e:a3:61:87: 54:ca:a2:53:59:83:3a:14:6b:0d:4d:9a:3c:8b:43:7a:9b:91: b7:38:99:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpblbYjprsfSTsAC2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk MzdjOWViZGYtYmU4Yi00NzU0LWE5ZDctZWM5YjJiYjA3NzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjloPxjB9g6ZDkG7b/SQBh0IF7pm3ZcBDEDge ZqHW/JrwLqGwm4BwMOvH5QdwxMdL/QRJ/+MSE+WJCnaFPkGDjmtg3rnR1zTYLt7E pd0gM3C4F1Oy1jLpMnfu3otw9KYJL94fwoM4HMGi0Og1n/BwOEvv00PdVKxymMio rKXCa6r7nmcl8W/YlMIxGaBuWTdqW9K7DEkFjXKbNG/nvbIKIxrHNb2Y6ZWe6x3R 4A+NhvTPNSJWaQUajWRk5jhkIVYTlHhSbXFHynVIW1yFJX91jllYMSILRx5YcXm3 U/3fbR4bZ5glx0fDAI2PwiAtM/m0OgJ8ph2UULlcocLmrGfxwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmByyWi21iRBEbmkHFbBx1dqfVCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTIyNGY4ZTctZDhlNS0z YzJjLThiMmYtNTVhNjhlZmI4MjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGAa33QEbMxAY7n9cdYj8leWWCiWltwiXdQ6wh6dhkjf6GrW25n3N6w IHnxEYAUjr0Yra0SomsNi8+msj4l5V3LjXlA6CxshF3/r0320LhO8VcbELHUwTdc yMgHBI0VZIQWxYCk3w/omCC297KVwbUwDl9o7Xuj7vOyNKi43xtLaItqODMHI9VD z7Dps37C5XXeX5MBOocys3fpSagSOAz/e2NZSz9Eu8kheOH54RhlFyvIVtCqP6q3 FXokRUQCsUg1/VlsP0jbS+KVIPDngMxjQGFX+MpuWwRgLz0mPHvJq2En3K7vLqNh h1TKolNZgzoUaw1NmjyLQ3qbkbc4mSk= -----END CERTIFICATE-----Generated at Thu Jul 10 06:21:08 2025 by rpki-client