$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eb03a7f7-a2fd-3faf-b4ab-371042807aa7.roa File: eb03a7f7-a2fd-3faf-b4ab-371042807aa7.roa (raw, json) Hash identifier: X8aQ30OS2Z9lODV9LsEin/r47dMjdSMQokQp1lpM9gs= Subject key identifier: 8E:0B:52:53:59:3C:7E:56:5E:66:E2:51:97:7C:4F:98:51:9B:15:19 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A71EB55B9F9C3760E451235E0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eb03a7f7-a2fd-3faf-b4ab-371042807aa7.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 8069 IP address blocks: 20.33.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:55:b9:f9:c3:76:0e:45:12:35:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=98d78cbb-7b3d-4865-954d-8967dfae5b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:42:bd:9c:2a:8c:4f:41:49:ce:69:de:f4:1a: 5c:7d:12:05:4f:ac:9d:da:74:a8:70:f8:7d:b3:a9: 3b:94:18:da:31:76:34:03:25:04:d4:95:d1:e1:77: ec:51:09:de:1d:61:41:6f:67:ac:fd:07:4d:4e:a4: a0:08:d2:5d:83:bd:70:2b:ab:d2:66:f7:8e:5a:fd: 44:0d:72:fb:44:a7:62:2c:29:a4:ae:d1:14:ca:1e: 0b:7c:78:7f:af:8e:b8:d1:96:02:e9:b1:6b:2e:28: 02:14:d3:56:e3:c8:74:17:92:82:3b:45:b8:54:25: fd:ea:d7:15:27:3e:1c:49:41:09:93:f4:f7:16:96: 7a:f2:20:47:74:3c:16:69:66:da:01:14:c6:d5:57: ca:83:9a:e9:84:39:32:a8:b7:a0:2c:07:07:50:3a: ca:d2:e2:1e:bd:e6:30:cb:63:5a:e7:29:4a:f2:8a: d3:c2:6e:cd:11:db:b4:df:14:31:64:d2:3f:b6:06: fa:37:ea:16:d3:85:4b:6a:06:69:04:54:de:a3:5a: 31:f7:d5:2c:36:d9:11:de:66:cd:5e:fb:1c:40:08: c9:52:80:3a:da:b6:cc:29:59:be:91:6f:b4:66:d3: 4c:f4:89:4f:23:2d:1d:dd:39:bb:cf:15:e8:9a:06: d8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:0B:52:53:59:3C:7E:56:5E:66:E2:51:97:7C:4F:98:51:9B:15:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eb03a7f7-a2fd-3faf-b4ab-371042807aa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:77:df:9e:7a:0b:a2:cb:97:93:16:92:5a:dd:3a:a2:64:d9: 1c:1a:dd:3c:96:c5:de:c3:ef:48:ac:46:95:1d:f2:2a:e3:75: 24:4d:0a:e6:08:dd:b0:a4:cd:0e:ff:e8:d6:51:77:4b:01:cd: c6:c6:31:6f:fe:aa:84:b7:f3:7d:01:22:7a:dc:8b:f9:03:68: 6c:fb:72:17:05:e3:2a:47:5c:85:36:e6:77:62:4d:34:d1:5e: cc:63:64:54:45:20:13:ae:06:ca:62:e4:d6:c7:02:5b:a5:f6: 14:6a:79:c1:d5:5a:73:3d:7a:97:f6:6f:0d:68:20:6d:3e:a9: 56:cd:b3:fd:59:8e:96:1f:e3:93:6e:9f:17:d0:2c:5e:de:84: 18:59:28:8f:c3:a4:72:b8:a9:58:e9:f5:04:5c:13:4f:aa:42: ba:6b:36:8d:62:af:a6:20:67:e3:c6:3b:c3:61:99:06:f8:f8: 54:4d:70:e9:1a:1c:3d:11:65:5c:0b:a7:b6:d0:db:7f:69:e0: 93:a8:23:51:30:fc:8b:48:eb:df:6e:d9:b8:76:66:e2:7b:65: 54:02:5c:06:b3:4f:30:08:ec:95:81:9d:a7:b8:f2:c6:62:31: 67:f5:31:14:8b:e3:0a:25:ef:7d:ca:d8:93:f2:19:58:ae:8e: a2:0b:cf:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx61W5+cN2DkUSNeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk OThkNzhjYmItN2IzZC00ODY1LTk1NGQtODk2N2RmYWU1YjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEK9nCqMT0FJzmne9BpcfRIFT6yd2nSocPh9 s6k7lBjaMXY0AyUE1JXR4XfsUQneHWFBb2es/QdNTqSgCNJdg71wK6vSZveOWv1E DXL7RKdiLCmkrtEUyh4LfHh/r4640ZYC6bFrLigCFNNW48h0F5KCO0W4VCX96tcV Jz4cSUEJk/T3FpZ68iBHdDwWaWbaARTG1VfKg5rphDkyqLegLAcHUDrK0uIeveYw y2Na5ylK8orTwm7NEdu03xQxZNI/tgb6N+oW04VLagZpBFTeo1ox99UsNtkR3mbN XvscQAjJUoA62rbMKVm+kW+0ZtNM9IlPIy0d3Tm7zxXomgbYnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4LUlNZPH5WXmbiUZd8T5hRmxUZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWIwM2E3ZjctYTJmZC0z ZmFmLWI0YWItMzcxMDQyODA3YWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF533556C6LLl5MWklrdOqJk2Rwa3TyWxd7D70isRpUd8irjdSRNCuYI 3bCkzQ7/6NZRd0sBzcbGMW/+qoS3830BInrci/kDaGz7chcF4ypHXIU25ndiTTTR XsxjZFRFIBOuBspi5NbHAlul9hRqecHVWnM9epf2bw1oIG0+qVbNs/1ZjpYf45Nu nxfQLF7ehBhZKI/DpHK4qVjp9QRcE0+qQrprNo1ir6YgZ+PGO8NhmQb4+FRNcOka HD0RZVwLp7bQ239p4JOoI1Ew/ItI699u2bh2ZuJ7ZVQCXAazTzAI7JWBnae48sZi MWf1MRSL4wol733K2JPyGViujqILzxg= -----END CERTIFICATE-----Generated at Thu Jul 10 02:37:02 2025 by rpki-client