$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e3baa8e1-c647-3c96-a38c-39faa625d5ca.roa File: e3baa8e1-c647-3c96-a38c-39faa625d5ca.roa (raw, json) Hash identifier: HRShgZBBm026hS3fdX/dTT5fBgNACyvnVKvibJpfPp0= Subject key identifier: CD:B7:9A:76:35:BA:80:15:0C:39:1B:2F:92:69:BF:5F:2A:D2:94:3B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A71EB55703ED2CD1719F47970 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e3baa8e1-c647-3c96-a38c-39faa625d5ca.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 8069 IP address blocks: 20.33.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:55:70:3e:d2:cd:17:19:f4:79:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=a371ba84-bda0-4a84-8ba7-ae4e1d0af656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d5:80:1c:f5:58:b9:4a:e7:0f:f4:be:93:55: af:89:77:64:98:36:23:e3:38:4a:eb:3d:b9:35:fa: 6a:de:82:04:4c:4e:b3:a0:24:ee:fc:4a:a3:31:34: b2:e1:15:c4:f0:07:1f:ff:e6:33:bc:cf:31:8d:19: fc:93:be:6d:23:b2:86:ff:f3:b2:e1:ed:4d:1c:c6: 3a:a6:07:da:21:5e:2e:db:46:15:d9:b1:9b:49:a1: 1f:7c:bb:df:8b:3d:e8:ac:ac:d5:d5:c8:8a:24:69: e1:81:ab:d1:3b:41:4a:3c:3a:49:d4:07:f7:6c:64: fb:b5:b4:53:40:2e:7d:37:a1:c1:d2:77:38:43:5f: e1:9c:cf:b9:9e:5f:23:56:24:d4:b9:f1:74:f6:98: 5a:dd:68:d1:1a:06:cf:4a:d8:56:72:f9:bd:f8:f8: d6:d0:2a:98:56:8d:ee:8a:40:9c:55:25:80:35:d2: 3e:31:c8:c5:41:03:94:82:82:3a:17:a1:0c:65:74: 43:1c:25:58:a9:2b:f5:d1:01:77:f2:85:bd:e6:72: 44:94:57:f7:4f:b7:68:05:02:1d:6c:9a:e1:1b:0f: 28:c1:b0:15:45:59:1b:9f:40:41:5b:c3:ee:f5:17: 38:4a:35:df:2d:c5:c3:b3:c0:f5:52:bb:4a:9f:d6: a4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B7:9A:76:35:BA:80:15:0C:39:1B:2F:92:69:BF:5F:2A:D2:94:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e3baa8e1-c647-3c96-a38c-39faa625d5ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:51:c7:20:5a:b1:5c:6a:22:04:52:76:d3:a8:a0:35:68:b6: 5b:7d:4a:03:fa:42:5a:ff:08:ed:ba:2c:f9:d2:65:33:e9:71: 3d:40:47:19:ef:84:20:47:a1:1a:fa:ee:6b:a2:ce:c4:38:eb: 26:df:15:e4:79:67:40:bc:a7:7d:46:33:7f:07:9b:2a:3d:17: 81:84:3a:a7:a6:b1:de:2d:08:26:dd:cb:0d:9b:f4:f4:e7:24: 80:82:d6:01:0c:a2:e9:a1:bd:0a:1d:e5:64:36:99:0c:d0:14: 83:65:fe:92:36:12:5b:4f:5c:7d:15:71:3b:b0:86:6a:c0:2a: ef:8e:5f:9d:68:54:a0:57:1f:c8:d2:10:9c:2c:24:bc:21:78: 95:62:ac:cc:3c:85:47:3b:3a:6f:2f:a9:4b:52:2b:00:89:72: 03:57:3f:ff:96:ee:e4:c2:97:d8:93:79:ef:0d:c1:7f:fe:cd: 0f:c4:60:7f:9d:44:8b:22:91:bc:34:e1:63:b1:47:d2:ce:26: 2b:f8:32:7c:3e:b9:35:ae:76:be:d3:47:4d:32:bf:69:c1:c2: a5:d9:ba:99:9d:77:ac:89:1c:1f:da:a6:fb:91:ba:89:82:7d: f0:29:fd:07:5c:18:02:5f:2e:29:86:b4:27:6e:42:f7:f6:f8: 20:23:da:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx61VwPtLNFxn0eXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk YTM3MWJhODQtYmRhMC00YTg0LThiYTctYWU0ZTFkMGFmNjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdWAHPVYuUrnD/S+k1WviXdkmDYj4zhK6z25 Nfpq3oIETE6zoCTu/EqjMTSy4RXE8Acf/+YzvM8xjRn8k75tI7KG//Oy4e1NHMY6 pgfaIV4u20YV2bGbSaEffLvfiz3orKzV1ciKJGnhgavRO0FKPDpJ1Af3bGT7tbRT QC59N6HB0nc4Q1/hnM+5nl8jViTUufF09pha3WjRGgbPSthWcvm9+PjW0CqYVo3u ikCcVSWANdI+McjFQQOUgoI6F6EMZXRDHCVYqSv10QF38oW95nJElFf3T7doBQId bJrhGw8owbAVRVkbn0BBW8Pu9Rc4SjXfLcXDs8D1UrtKn9akNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM23mnY1uoAVDDkbL5Jpv18q0pQ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTNiYWE4ZTEtYzY0Ny0z Yzk2LWEzOGMtMzlmYWE2MjVkNWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVRxyBasVxqIgRSdtOooDVotlt9SgP6Qlr/CO26LPnSZTPpcT1ARxnv hCBHoRr67muizsQ46ybfFeR5Z0C8p31GM38Hmyo9F4GEOqemsd4tCCbdyw2b9PTn JICC1gEMoumhvQod5WQ2mQzQFINl/pI2EltPXH0VcTuwhmrAKu+OX51oVKBXH8jS EJwsJLwheJVirMw8hUc7Om8vqUtSKwCJcgNXP/+W7uTCl9iTee8NwX/+zQ/EYH+d RIsikbw04WOxR9LOJiv4Mnw+uTWudr7TR00yv2nBwqXZupmdd6yJHB/apvuRuomC ffAp/QdcGAJfLimGtCduQvf2+CAj2pU= -----END CERTIFICATE-----Generated at Thu Jul 10 01:28:22 2025 by rpki-client