$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/afceef4f-d98a-3a55-87af-6d0e1ed3d7c7.roa File: afceef4f-d98a-3a55-87af-6d0e1ed3d7c7.roa (raw, json) Hash identifier: d4e8XIGEOWocG2IlK6WfNVUmZDvqL69JPNUmjgr12oo= Subject key identifier: 4C:97:1C:1F:39:E7:17:E1:3B:64:1C:FA:90:83:FB:DE:EB:E1:9F:AE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A68260D0169FF7B7073C77E40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/afceef4f-d98a-3a55-87af-6d0e1ed3d7c7.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 8069 IP address blocks: 20.33.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:0d:01:69:ff:7b:70:73:c7:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=d24b885d-a0ca-421d-bbb3-fbfcfad96e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0c:02:c4:d1:32:4a:20:55:9e:3e:f2:fa:c0: 95:58:16:4a:95:8b:35:33:e9:f7:32:ab:70:c5:3d: 76:6a:56:4b:c0:e1:36:62:a2:17:87:df:8f:11:eb: 11:59:7a:9c:8f:12:d7:db:9c:41:dc:b1:63:dc:d3: f0:24:ac:2d:45:15:70:d1:52:b5:dd:26:89:e4:2b: f5:10:0f:1e:3d:be:80:53:f0:2e:fe:12:12:aa:fe: 17:7c:28:c4:74:01:6b:0a:f1:18:f6:b3:28:50:4a: 26:a7:eb:61:dc:64:8b:53:16:0c:2a:32:98:07:d7: a7:57:ec:e7:8d:ef:2e:1a:2b:bf:4c:bc:fb:ba:a5: d3:62:fb:42:b8:67:33:a5:a4:3e:a4:2d:d5:d3:44: 7c:a9:2c:27:44:44:3e:d6:31:97:22:a5:25:40:7b: 65:de:af:73:5c:16:08:a8:c0:f8:46:f5:58:1b:19: d8:c3:3a:53:6b:2b:c9:0e:46:25:5e:93:5e:af:46: 36:0a:b6:96:8e:6c:26:a4:56:a9:a7:c4:c5:51:28: 70:59:d7:44:91:41:00:50:d9:96:e2:ad:6c:bd:2d: 3c:4d:6c:83:98:88:b9:2d:72:c7:06:9d:a9:57:c1: 55:80:02:59:a9:a3:55:2e:1f:69:02:6a:0c:29:5c: df:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:97:1C:1F:39:E7:17:E1:3B:64:1C:FA:90:83:FB:DE:EB:E1:9F:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/afceef4f-d98a-3a55-87af-6d0e1ed3d7c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:65:c6:d3:8f:a8:eb:56:d5:82:77:8e:83:39:02:eb:7e:b6: 32:14:ce:d9:60:bf:c1:d2:3c:f2:45:df:22:e9:c3:50:c1:4c: 40:6a:7c:a2:e2:ea:7e:88:e6:1b:3b:cb:a1:dd:6c:18:7f:17: ec:12:b1:0c:f4:13:54:e3:46:61:bc:31:08:3d:91:c8:11:19: 7d:aa:22:af:92:b0:80:b3:6c:3f:bc:e4:61:19:78:6d:81:b1: f5:f1:0e:42:38:35:a2:f4:0f:c1:8c:6d:50:8a:32:07:a2:4f: 9a:81:5c:7c:06:40:ce:ee:38:cb:23:1f:67:7c:e2:74:fe:8b: c4:24:51:25:6a:17:34:db:ae:4e:dd:e5:14:61:12:4c:f5:6c: 90:09:22:8c:d9:4e:22:b7:1d:7a:63:4d:4d:96:4f:3b:6a:4e: 71:41:b6:0b:fb:13:97:13:db:17:3f:c0:e7:a6:43:3c:61:e7: 5d:fe:b5:67:74:0b:62:38:a8:15:a4:1f:32:32:be:7c:0f:40: f8:13:12:20:59:42:b0:49:52:3a:4f:29:2d:2b:f8:9d:b8:d1: bb:cd:27:98:c3:db:59:a7:5e:7f:0a:ff:c2:8a:79:f7:b3:f7: 0e:7b:31:04:6d:04:b4:e3:57:24:cb:44:c4:8e:a1:91:2c:f2: 70:2e:da:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJg0Baf97cHPHfkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk ZDI0Yjg4NWQtYTBjYS00MjFkLWJiYjMtZmJmY2ZhZDk2ZTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQwCxNEySiBVnj7y+sCVWBZKlYs1M+n3Mqtw xT12alZLwOE2YqIXh9+PEesRWXqcjxLX25xB3LFj3NPwJKwtRRVw0VK13SaJ5Cv1 EA8ePb6AU/Au/hISqv4XfCjEdAFrCvEY9rMoUEomp+th3GSLUxYMKjKYB9enV+zn je8uGiu/TLz7uqXTYvtCuGczpaQ+pC3V00R8qSwnREQ+1jGXIqUlQHtl3q9zXBYI qMD4RvVYGxnYwzpTayvJDkYlXpNer0Y2CraWjmwmpFapp8TFUShwWddEkUEAUNmW 4q1svS08TWyDmIi5LXLHBp2pV8FVgAJZqaNVLh9pAmoMKVzfZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyXHB855xfhO2Qc+pCD+97r4Z+uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWZjZWVmNGYtZDk4YS0z YTU1LTg3YWYtNmQwZTFlZDNkN2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFlxtOPqOtW1YJ3joM5Aut+tjIUztlgv8HSPPJF3yLpw1DBTEBqfKLi 6n6I5hs7y6HdbBh/F+wSsQz0E1TjRmG8MQg9kcgRGX2qIq+SsICzbD+85GEZeG2B sfXxDkI4NaL0D8GMbVCKMgeiT5qBXHwGQM7uOMsjH2d84nT+i8QkUSVqFzTbrk7d 5RRhEkz1bJAJIozZTiK3HXpjTU2WTztqTnFBtgv7E5cT2xc/wOemQzxh513+tWd0 C2I4qBWkHzIyvnwPQPgTEiBZQrBJUjpPKS0r+J240bvNJ5jD21mnXn8K/8KKefez 9w57MQRtBLTjVyTLRMSOoZEs8nAu2s8= -----END CERTIFICATE-----Generated at Thu Jul 10 01:37:53 2025 by rpki-client