$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c849a306-4c2a-3fc3-b123-c6713222f536.roa File: c849a306-4c2a-3fc3-b123-c6713222f536.roa (raw, json) Hash identifier: VP53Vt8v0fQd9XvOfNdJq4m3rdv/npJe8C5WZ5Rzia4= Subject key identifier: 83:19:29:3F:4A:C2:54:01:DA:66:C2:6A:22:F1:03:31:88:CC:DC:2B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A5B95B523CE822A3AB50B5D80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c849a306-4c2a-3fc3-b123-c6713222f536.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:b5:23:ce:82:2a:3a:b5:0b:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=d0f8daf6-e6d0-42aa-a1d2-828f83cc50fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:37:99:55:9c:d2:7d:b4:4d:6d:fb:f0:b9:6c: 2f:1f:33:6b:c0:38:46:78:42:b8:27:7e:59:03:ba: d1:08:0c:0d:1c:db:43:81:d2:f5:57:e7:59:9f:1f: 2b:74:57:ff:b7:01:29:02:0b:f3:6e:44:3b:07:f9: 85:7f:a9:f5:9f:a3:34:67:26:66:0b:52:00:19:54: 19:dc:09:7a:79:6a:16:3a:22:98:4f:cb:00:08:f4: 70:7d:d8:dc:a3:f2:7d:1f:dc:20:db:d3:c3:df:13: 88:2c:30:22:19:ad:68:fd:79:da:11:62:d1:ce:d6: 20:61:e8:7a:06:fe:b9:95:b4:5d:41:6d:6c:8f:e6: 5f:64:a7:64:77:ec:51:3d:d2:8c:2b:15:f3:32:9d: 89:ee:b5:52:6d:1f:e3:b5:a9:67:ef:a6:ac:3c:bb: 55:bf:f0:b5:6d:d3:f0:69:8a:00:df:3c:98:00:0e: 2c:a3:66:34:1c:61:ef:14:22:0a:d5:e0:8b:6c:94: 45:57:06:e7:0d:6e:07:ed:28:be:63:0a:60:c3:4c: 4d:43:79:db:53:df:a0:b4:c3:25:e1:30:c9:41:28: 79:bd:f9:d8:48:68:d6:b9:68:2f:90:90:e0:22:82: 41:43:f4:4a:8f:91:e1:ba:57:7e:9c:38:09:27:db: df:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:19:29:3F:4A:C2:54:01:DA:66:C2:6A:22:F1:03:31:88:CC:DC:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c849a306-4c2a-3fc3-b123-c6713222f536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:1b:17:02:fe:f3:e9:b4:28:8c:12:b7:96:0c:1b:b6:a7:f0: ab:3e:64:74:f3:56:68:b8:5e:08:28:19:ab:fd:4f:50:94:97: b6:98:87:3a:39:92:8f:f3:9a:0d:e1:06:ad:b1:dd:bf:41:97: f7:db:02:63:1e:76:6a:47:7a:fd:fa:c9:d9:e2:09:4a:96:c7: 4b:55:06:e1:d7:e0:c0:35:f7:40:fa:5e:f6:84:57:d4:c4:ae: ce:6f:4d:8c:3e:d8:9e:51:2c:45:31:c6:94:7f:7b:1b:18:39: 27:9d:c4:55:e6:e6:4a:cb:14:f8:41:7d:7e:ac:25:d6:f6:97: 72:93:b3:de:fb:9a:b2:24:bd:08:f4:9b:b7:53:16:10:8b:1e: fd:c7:5d:af:38:49:35:52:30:1d:9a:91:3f:b4:0d:8a:35:ee: 7d:e2:d0:d1:d7:6c:8d:80:be:2a:be:2c:bb:85:ad:d7:6b:3f: d3:55:15:83:a7:b0:47:70:1a:01:52:b5:89:d6:82:b3:3d:f1: d8:c3:1e:3e:cb:fd:5b:55:15:17:01:b8:e3:f2:7a:14:32:aa: 99:88:7b:71:78:ab:24:df:4e:65:d3:0e:c0:e0:95:2b:11:26: 5d:62:70:86:8e:a8:0a:b6:90:f3:61:f7:d1:56:ab:18:33:21: 75:75:a6:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpblbUjzoIqOrULXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk ZDBmOGRhZjYtZTZkMC00MmFhLWExZDItODI4ZjgzY2M1MGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTeZVZzSfbRNbfvwuWwvHzNrwDhGeEK4J35Z A7rRCAwNHNtDgdL1V+dZnx8rdFf/twEpAgvzbkQ7B/mFf6n1n6M0ZyZmC1IAGVQZ 3Al6eWoWOiKYT8sACPRwfdjco/J9H9wg29PD3xOILDAiGa1o/XnaEWLRztYgYeh6 Bv65lbRdQW1sj+ZfZKdkd+xRPdKMKxXzMp2J7rVSbR/jtaln76asPLtVv/C1bdPw aYoA3zyYAA4so2Y0HGHvFCIK1eCLbJRFVwbnDW4H7Si+Ywpgw0xNQ3nbU9+gtMMl 4TDJQSh5vfnYSGjWuWgvkJDgIoJBQ/RKj5Hhuld+nDgJJ9vfIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMZKT9KwlQB2mbCaiLxAzGIzNwrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzg0OWEzMDYtNGMyYS0z ZmMzLWIxMjMtYzY3MTMyMjJmNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcbFwL+8+m0KIwSt5YMG7an8Ks+ZHTzVmi4XggoGav9T1CUl7aYhzo5 ko/zmg3hBq2x3b9Bl/fbAmMedmpHev36ydniCUqWx0tVBuHX4MA190D6XvaEV9TE rs5vTYw+2J5RLEUxxpR/exsYOSedxFXm5krLFPhBfX6sJdb2l3KTs977mrIkvQj0 m7dTFhCLHv3HXa84STVSMB2akT+0DYo17n3i0NHXbI2Aviq+LLuFrddrP9NVFYOn sEdwGgFStYnWgrM98djDHj7L/VtVFRcBuOPyehQyqpmIe3F4qyTfTmXTDsDglSsR Jl1icIaOqAq2kPNh99FWqxgzIXV1plI= -----END CERTIFICATE-----Generated at Thu Jul 10 02:34:59 2025 by rpki-client