$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e86bab7f-476b-3211-99b7-b56509930684.roa File: e86bab7f-476b-3211-99b7-b56509930684.roa (raw, json) Hash identifier: RRzf6GmjqLufy5/Cipfk7PKxh+ecXiiQ9r4XW591aEA= Subject key identifier: 29:30:D6:2B:E6:4F:85:59:DA:59:69:E9:EE:2A:44:BF:70:61:C6:16 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A68260D78ACA3CCFEE8B25D80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e86bab7f-476b-3211-99b7-b56509930684.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 8069 IP address blocks: 20.33.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:0d:78:ac:a3:cc:fe:e8:b2:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=58236c77-1d3a-44c1-a83d-8667979ee156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:da:9d:fb:fc:2f:31:36:c6:a6:ab:70:c4:57: df:f3:98:ab:7d:c5:7c:e3:50:23:27:db:29:9f:d1: 62:bd:52:2d:02:f8:62:ff:e7:99:ee:aa:03:0a:bf: 30:d7:19:17:d5:0b:9a:4e:5f:e6:b6:d9:0b:9b:42: 3a:82:29:69:f0:f7:58:32:b8:7c:de:ba:71:bf:bb: 63:d5:bb:1e:08:10:70:9a:4a:4d:73:69:68:67:e7: 8c:67:01:b2:ba:51:fb:a4:97:39:45:e1:8e:a0:77: 46:f2:c1:a7:2b:f9:e9:22:2c:ba:ae:ec:80:83:64: 31:3c:a8:37:6a:57:ce:9f:c4:62:38:15:64:15:fe: 10:ee:5c:4b:37:8b:7b:58:63:5f:89:87:1b:71:ab: 99:46:b3:6b:a5:b9:3d:41:a7:bc:19:ee:da:6c:2a: 44:0c:7d:a2:9b:ee:4d:8e:92:b2:dc:3e:01:99:97: aa:0b:70:70:fe:29:25:24:ca:6d:be:14:1f:ce:04: 17:63:46:98:15:00:c2:74:4a:05:3f:8c:05:a2:9e: f3:a7:f0:ca:9d:04:90:8f:db:9d:de:7e:d6:03:2c: 58:97:7b:60:c9:d0:34:89:6f:50:b3:09:39:a2:40: 57:be:6b:69:9b:63:b1:7b:cc:a0:9a:d3:67:e8:18: 7c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:30:D6:2B:E6:4F:85:59:DA:59:69:E9:EE:2A:44:BF:70:61:C6:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e86bab7f-476b-3211-99b7-b56509930684.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:82:ea:71:c8:91:a3:73:8d:37:28:38:fd:8f:87:bf:2b:8c: be:fa:1d:73:a6:d9:63:c1:a5:7c:30:e4:09:58:85:0b:e2:a2: c2:a6:a0:aa:b6:e5:93:66:2b:8c:02:87:d3:32:00:43:e6:ac: 5d:60:39:e7:f5:e1:c2:af:69:5a:a2:6b:7b:e7:1a:34:28:b7: 76:00:ab:57:80:98:3f:0f:17:64:a3:12:04:a2:4a:27:bc:47: 2e:a3:6d:22:ea:f1:0a:e3:db:62:93:5c:96:be:92:95:12:a8: 6b:48:c8:37:7b:f5:fe:f4:56:3a:47:b6:97:58:9e:7f:b3:19: dc:da:01:c3:4b:10:ea:58:5d:e3:e9:6e:e7:c1:18:7f:1b:75: e0:68:af:fe:85:08:32:6a:39:a1:cc:b1:35:88:32:32:64:9e: 04:74:f4:07:c6:07:7f:e5:4a:82:6f:cc:e8:79:fe:fc:0c:15: 7d:48:89:f1:b1:81:65:6f:7c:89:ca:4f:38:8c:c6:44:74:4e: 3f:75:2e:62:2a:a9:f2:60:c3:2e:96:68:3b:77:e2:e8:5a:15: d5:90:93:34:96:0b:b1:10:92:13:ba:25:75:e5:d3:13:e6:62: ec:e8:e0:b9:a6:b3:8e:f5:8c:3c:1c:af:1b:a0:bc:0d:c6:66: a2:8f:9d:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJg14rKPM/uiyXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NTgyMzZjNzctMWQzYS00NGMxLWE4M2QtODY2Nzk3OWVlMTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndqd+/wvMTbGpqtwxFff85irfcV841AjJ9sp n9FivVItAvhi/+eZ7qoDCr8w1xkX1QuaTl/mttkLm0I6gilp8PdYMrh83rpxv7tj 1bseCBBwmkpNc2loZ+eMZwGyulH7pJc5ReGOoHdG8sGnK/npIiy6ruyAg2QxPKg3 alfOn8RiOBVkFf4Q7lxLN4t7WGNfiYcbcauZRrNrpbk9Qae8Ge7abCpEDH2im+5N jpKy3D4BmZeqC3Bw/iklJMptvhQfzgQXY0aYFQDCdEoFP4wFop7zp/DKnQSQj9ud 3n7WAyxYl3tgydA0iW9Qswk5okBXvmtpm2Oxe8ygmtNn6Bh8XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkw1ivmT4VZ2llp6e4qRL9wYcYWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTg2YmFiN2YtNDc2Yi0z MjExLTk5YjctYjU2NTA5OTMwNjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqC6nHIkaNzjTcoOP2Ph78rjL76HXOm2WPBpXww5AlYhQviosKmoKq2 5ZNmK4wCh9MyAEPmrF1gOef14cKvaVqia3vnGjQot3YAq1eAmD8PF2SjEgSiSie8 Ry6jbSLq8Qrj22KTXJa+kpUSqGtIyDd79f70VjpHtpdYnn+zGdzaAcNLEOpYXePp bufBGH8bdeBor/6FCDJqOaHMsTWIMjJkngR09AfGB3/lSoJvzOh5/vwMFX1IifGx gWVvfInKTziMxkR0Tj91LmIqqfJgwy6WaDt34uhaFdWQkzSWC7EQkhO6JXXl0xPm Yuzo4Lmms471jDwcrxugvA3GZqKPnW8= -----END CERTIFICATE-----Generated at Thu Jul 10 03:30:17 2025 by rpki-client