$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e569e8-37ad-3469-895e-315f10771e8c.roa File: f5e569e8-37ad-3469-895e-315f10771e8c.roa (raw, json) Hash identifier: OE70pL8gFlQwzDXwxrXmKl4Dg//Mmf32gInXn9AshbA= Subject key identifier: 11:AB:EC:5D:BF:5E:DB:7A:E4:F6:89:C5:33:25:57:F7:B9:9C:9A:C4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A68260CC64E60041E638D084C Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e569e8-37ad-3469-895e-315f10771e8c.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 8069 IP address blocks: 20.33.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:0c:c6:4e:60:04:1e:63:8d:08:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=9f70564e-38e5-40e4-a078-159def3cb04e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:04:45:81:9c:6f:e3:16:96:6d:f1:b5:ec:7b: 9f:fd:8e:ac:d0:cd:63:35:9d:da:52:eb:e7:ec:c1: db:9e:3f:ee:4c:c6:06:4b:41:b2:58:86:92:27:94: a2:4e:f3:d4:4a:38:02:ca:4f:bd:e8:51:a1:18:58: 5f:d9:42:19:c3:83:d5:2a:bd:8d:5b:2e:fc:a1:68: 3e:f2:a3:8f:fd:dd:62:9d:2c:23:5d:cf:8a:7b:bc: 8b:e0:4b:db:fb:06:b8:ce:65:32:97:e2:86:59:15: e3:21:2a:18:06:e1:2d:7e:27:d8:de:2f:f2:6e:a7: 79:53:60:6e:72:cb:ba:fc:06:8e:3a:e4:f2:a9:5e: 5a:43:a7:89:7f:8f:f6:93:be:bb:fd:99:5d:a5:12: 63:89:7d:70:c8:f3:b9:13:9d:b0:11:75:f1:b8:74: 4a:86:9d:ce:29:92:1f:cc:20:c6:91:b7:0c:39:1c: 01:2a:9b:3a:1c:8f:e8:d5:0a:88:f7:8a:cb:f7:da: d7:87:5b:55:90:fb:a7:1a:dd:e0:d3:55:98:70:38: 24:2b:4c:84:d0:32:33:e1:cb:4f:63:22:b7:0c:76: fd:c5:09:af:1f:85:32:f3:fa:7a:33:74:0f:b2:18: d7:69:eb:5a:6d:e1:84:86:11:51:45:95:2f:b4:ef: ca:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AB:EC:5D:BF:5E:DB:7A:E4:F6:89:C5:33:25:57:F7:B9:9C:9A:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e569e8-37ad-3469-895e-315f10771e8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:22:8d:aa:b3:71:7f:1d:80:2a:9b:6f:a8:ea:7d:eb:0d:1b: 98:9f:2b:fe:8d:61:2d:08:6c:22:3c:91:e1:17:e5:06:2f:01: 28:94:24:a8:90:28:4f:4e:cf:86:70:0c:a9:49:a2:0b:ff:94: 2c:e2:4c:f0:02:0f:34:4e:60:91:6e:9d:aa:06:07:b1:cd:eb: 71:17:b8:b0:e5:e7:ae:86:d9:28:f7:33:77:6e:8f:85:04:d2: 42:88:94:b5:18:d0:8f:13:2c:13:d0:29:ff:91:a6:f8:6e:1e: aa:13:3f:59:f3:af:d1:0d:d6:ad:48:f8:01:75:a6:2a:16:33: 98:38:b1:2d:a2:53:06:1a:28:e9:2d:5d:ce:46:f7:d7:8a:72: f7:ec:35:c0:d1:f2:ab:ae:f8:e6:1a:3a:13:db:84:f7:84:67: 7c:ba:2e:7e:8a:d8:63:7f:62:ca:8b:22:3f:16:01:60:73:ac: a4:64:1a:d2:7e:65:e5:5c:69:63:46:e6:66:54:0f:f0:67:7e: 86:2a:51:ff:2b:9a:9c:e8:31:e6:2a:3c:cc:ae:60:47:60:4a: 65:ff:37:e0:c6:93:1d:01:58:bb:d6:cd:58:38:f2:5d:34:0d: 2b:a9:e7:4c:61:c9:3c:ab:47:b4:76:b3:a3:55:52:8f:90:fb: 12:03:76:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJgzGTmAEHmONCEwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk OWY3MDU2NGUtMzhlNS00MGU0LWEwNzgtMTU5ZGVmM2NiMDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQRFgZxv4xaWbfG17Huf/Y6s0M1jNZ3aUuvn 7MHbnj/uTMYGS0GyWIaSJ5SiTvPUSjgCyk+96FGhGFhf2UIZw4PVKr2NWy78oWg+ 8qOP/d1inSwjXc+Ke7yL4Evb+wa4zmUyl+KGWRXjISoYBuEtfifY3i/ybqd5U2Bu csu6/AaOOuTyqV5aQ6eJf4/2k767/ZldpRJjiX1wyPO5E52wEXXxuHRKhp3OKZIf zCDGkbcMORwBKps6HI/o1QqI94rL99rXh1tVkPunGt3g01WYcDgkK0yE0DIz4ctP YyK3DHb9xQmvH4Uy8/p6M3QPshjXaetabeGEhhFRRZUvtO/KXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGr7F2/Xtt65PaJxTMlV/e5nJrEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjVlNTY5ZTgtMzdhZC0z NDY5LTg5NWUtMzE1ZjEwNzcxZThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8ijaqzcX8dgCqbb6jqfesNG5ifK/6NYS0IbCI8keEX5QYvASiUJKiQ KE9Oz4ZwDKlJogv/lCziTPACDzROYJFunaoGB7HN63EXuLDl566G2Sj3M3duj4UE 0kKIlLUY0I8TLBPQKf+RpvhuHqoTP1nzr9EN1q1I+AF1pioWM5g4sS2iUwYaKOkt Xc5G99eKcvfsNcDR8quu+OYaOhPbhPeEZ3y6Ln6K2GN/YsqLIj8WAWBzrKRkGtJ+ ZeVcaWNG5mZUD/BnfoYqUf8rmpzoMeYqPMyuYEdgSmX/N+DGkx0BWLvWzVg48l00 DSup50xhyTyrR7R2s6NVUo+Q+xIDdhs= -----END CERTIFICATE-----Generated at Thu Jul 10 02:13:08 2025 by rpki-client