$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce3991cc-6dfe-33db-8152-8d60ebb2897a.roa File: ce3991cc-6dfe-33db-8152-8d60ebb2897a.roa (raw, json) Hash identifier: RxfaHTGlAqFK4ObE5X1JvHA65TBqifcneVDfnPQrVWc= Subject key identifier: 1C:1F:34:BA:E2:69:3C:AD:45:21:26:F1:01:54:EA:4C:AC:2D:4B:63 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A5B95B4AAEA36E2279078AB00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce3991cc-6dfe-33db-8152-8d60ebb2897a.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:b4:aa:ea:36:e2:27:90:78:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=35362e80-42ae-4e99-b237-f3b3c9e6a15e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ee:66:81:7e:ef:f4:5d:91:40:2d:c7:a7:03: c4:f2:e3:e1:e3:c3:9d:6d:60:cb:93:70:7e:d9:c9: 07:bf:2c:89:6e:30:03:79:fe:04:f9:02:b2:3c:58: e8:da:f2:29:b5:57:d4:06:34:ab:c9:10:46:85:11: 4c:e8:72:ee:52:9e:25:97:58:c7:c2:dd:64:f0:8e: ab:8e:ed:a6:ed:02:02:76:dd:57:a5:7a:33:ad:33: 80:83:63:a2:a7:28:2f:e8:bf:c3:4e:b6:4b:3c:3e: 97:70:35:e8:25:fd:34:d2:09:9d:40:ec:fb:74:9c: 3f:30:59:91:39:32:8c:c8:20:03:10:44:38:bd:10: 26:cc:c1:9a:b4:9d:b3:ec:5f:c0:00:86:06:47:a2: cd:be:94:f0:0d:51:ca:a9:3f:c3:70:63:1c:55:0a: 28:35:fa:db:17:c5:27:06:3f:45:73:dd:d4:b5:31: 5e:4a:3e:46:4d:03:4f:57:25:aa:bd:ad:cf:ec:e9: 80:f4:ac:d9:70:ba:6a:d9:7e:ac:c1:af:1e:c9:5b: ee:94:c1:c2:4e:2b:0f:07:e9:d1:5d:0b:1d:c9:db: 84:da:07:b9:19:3c:ea:8d:3c:b7:d0:c5:4f:ba:5b: 81:73:6e:92:2f:dd:22:1d:0f:61:5c:f8:3c:f8:c5: 38:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1F:34:BA:E2:69:3C:AD:45:21:26:F1:01:54:EA:4C:AC:2D:4B:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce3991cc-6dfe-33db-8152-8d60ebb2897a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:cf:f9:0c:6e:e0:dd:13:1d:6f:af:c0:b3:b7:ee:5b:ee:8b: c3:4c:88:02:e1:90:0d:5f:41:c2:4f:d6:e4:d4:d5:66:af:58: 09:80:6d:f8:b0:70:63:aa:2d:1c:dd:c4:3e:14:88:23:db:c1: c8:10:f2:c9:bc:56:b6:d6:80:9b:75:05:5b:ee:8f:5e:b3:d1: 85:3b:89:c3:2f:61:84:f9:cd:08:ee:dd:e7:26:d3:0f:79:c3: ed:ec:f9:b0:5c:ae:25:a3:06:53:86:e4:cb:66:f5:e2:68:31: 23:e1:15:5e:c4:08:70:e8:d0:35:82:00:6e:91:e6:70:f9:fb: 02:23:9a:de:ff:36:b0:ff:77:f1:a7:2e:12:aa:24:7b:e4:ac: 4e:12:f4:3c:0c:be:e0:fb:00:b4:c8:dd:37:19:3b:39:9f:b7: e0:e8:9c:34:18:a7:1e:93:d2:b8:f6:d7:1d:e0:83:85:89:2c: c5:ef:06:be:9c:b0:12:10:dc:4c:0f:85:9b:0a:24:a7:10:9e: f7:3d:bd:25:a7:80:4d:59:54:33:5e:e6:6a:8b:84:ad:3c:c3: e7:a6:8f:f7:ed:37:c3:b2:dd:c3:06:e9:89:88:ff:90:ac:c7: 3a:cf:21:49:06:5e:f8:89:08:ec:f5:93:a9:ba:cb:02:50:02: b8:79:b4:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpblbSq6jbiJ5B4qwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk MzUzNjJlODAtNDJhZS00ZTk5LWIyMzctZjNiM2M5ZTZhMTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu5mgX7v9F2RQC3HpwPE8uPh48OdbWDLk3B+ 2ckHvyyJbjADef4E+QKyPFjo2vIptVfUBjSryRBGhRFM6HLuUp4ll1jHwt1k8I6r ju2m7QICdt1XpXozrTOAg2Oipygv6L/DTrZLPD6XcDXoJf000gmdQOz7dJw/MFmR OTKMyCADEEQ4vRAmzMGatJ2z7F/AAIYGR6LNvpTwDVHKqT/DcGMcVQooNfrbF8Un Bj9Fc93UtTFeSj5GTQNPVyWqva3P7OmA9KzZcLpq2X6swa8eyVvulMHCTisPB+nR XQsdyduE2ge5GTzqjTy30MVPuluBc26SL90iHQ9hXPg8+MU4fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwfNLriaTytRSEm8QFU6kysLUtjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2UzOTkxY2MtNmRmZS0z M2RiLTgxNTItOGQ2MGViYjI4OTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfP+Qxu4N0THW+vwLO37lvui8NMiALhkA1fQcJP1uTU1WavWAmAbfiw cGOqLRzdxD4UiCPbwcgQ8sm8VrbWgJt1BVvuj16z0YU7icMvYYT5zQju3ecm0w95 w+3s+bBcriWjBlOG5Mtm9eJoMSPhFV7ECHDo0DWCAG6R5nD5+wIjmt7/NrD/d/Gn LhKqJHvkrE4S9DwMvuD7ALTI3TcZOzmft+DonDQYpx6T0rj21x3gg4WJLMXvBr6c sBIQ3EwPhZsKJKcQnvc9vSWngE1ZVDNe5mqLhK08w+emj/ftN8Oy3cMG6YmI/5Cs xzrPIUkGXviJCOz1k6m6ywJQArh5tGE= -----END CERTIFICATE-----Generated at Thu Jul 10 06:33:55 2025 by rpki-client