$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/09cc467f-7aad-3430-a565-0591d1cc6aab.roa File: 09cc467f-7aad-3430-a565-0591d1cc6aab.roa (raw, json) Hash identifier: DO0knGnqzoqf5YHN3Rs4ZGqi7vyBXwkPnfTLPq9CQec= Subject key identifier: B5:67:6F:1E:4E:16:D3:D5:C4:1B:A4:1B:32:E3:0D:0C:40:9A:C7:94 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A3B7B057421AA882FD4699380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/09cc467f-7aad-3430-a565-0591d1cc6aab.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 8069 IP address blocks: 20.33.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:05:74:21:aa:88:2f:d4:69:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=7dbe54ab-1f15-4efb-a64d-cd70d82b7585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fd:89:5d:17:77:2f:eb:7a:bb:df:de:72:e4: 23:45:3a:07:d2:2b:77:ad:3a:1c:cc:0b:ee:4c:4d: 7e:e3:51:12:2b:17:46:41:7a:eb:72:ca:1c:79:93: 79:cc:a4:f9:bc:ad:b2:7b:48:29:19:72:56:ce:7f: 21:5b:e0:e6:00:98:b1:49:88:44:20:d8:be:e6:14: 83:75:2a:ab:8c:b0:69:58:69:2c:ac:36:1d:71:c0: 51:ad:3b:46:d6:2d:79:88:0f:23:a9:42:bc:29:1f: 98:84:38:a9:01:72:5e:50:62:d6:f2:b5:ea:e5:99: 3c:56:f6:94:61:c8:c4:cb:f7:a0:64:ee:ae:ac:85: 48:55:b1:00:5d:cf:af:60:e1:ea:a8:7d:2a:38:4c: c6:ba:b8:7f:b4:a9:89:2c:98:2f:30:de:3b:0b:89: 3b:99:db:96:c1:8f:7b:98:98:cb:4c:6a:33:fc:c3: 6a:d5:02:6f:89:19:05:02:13:25:cc:9c:7c:1e:0f: 37:94:68:f3:54:4a:66:17:c0:8d:77:ab:2b:49:8f: 9a:8a:7a:77:5e:a3:db:5c:fa:a8:7f:90:4b:a3:84: 9c:a5:00:3a:8a:de:c6:1f:e2:23:f8:48:ae:8d:f8: 17:ef:ce:15:9c:70:61:39:06:1c:a9:a2:be:94:b0: 30:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:67:6F:1E:4E:16:D3:D5:C4:1B:A4:1B:32:E3:0D:0C:40:9A:C7:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/09cc467f-7aad-3430-a565-0591d1cc6aab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:e0:8b:bd:fa:6a:e2:3e:e8:a2:46:b0:1d:f2:5c:5a:97:02: 71:09:24:ed:5b:6b:32:ae:13:d4:b6:f2:79:f0:e7:fc:5f:c3: 91:5d:67:81:21:19:54:e2:6b:08:a8:e9:88:f4:c8:06:ec:0d: fd:09:3b:6b:3b:2a:89:43:a1:6c:6e:dd:c0:b5:74:23:4b:3e: be:78:e7:32:16:26:4d:17:fe:34:d3:2f:65:c0:4f:96:75:4d: 89:2a:0f:f9:60:ea:47:12:74:da:49:bf:a5:d7:02:5f:e5:54: 6f:2d:50:4c:d8:58:f6:f7:0a:e1:13:f3:c2:d6:8c:29:dc:1f: 50:7e:44:ea:5b:11:d6:4f:fd:89:c6:75:13:3d:eb:3a:2c:89: 74:da:7d:f2:cf:74:94:25:f3:9e:4c:ea:3c:f4:c7:bc:20:71: 0c:43:aa:20:c4:7d:6a:89:54:b9:fe:65:44:30:56:e3:1b:ea: 22:69:fb:86:3a:f3:bd:12:0c:aa:16:c2:6a:e4:6d:46:53:a7: 4d:b3:bb:13:9d:5c:af:d5:17:ec:24:d9:bf:63:ee:ac:31:42: 8c:90:59:4d:71:89:4b:9f:c2:22:6a:75:1e:99:fa:b9:ad:a5: 3b:ed:85:a3:e9:bf:f9:dd:0a:0b:b6:25:13:e8:27:0a:74:12: b4:80:f4:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ewV0IaqIL9Rpk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk N2RiZTU0YWItMWYxNS00ZWZiLWE2NGQtY2Q3MGQ4MmI3NTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv2JXRd3L+t6u9/ecuQjRToH0it3rToczAvu TE1+41ESKxdGQXrrcsoceZN5zKT5vK2ye0gpGXJWzn8hW+DmAJixSYhEINi+5hSD dSqrjLBpWGksrDYdccBRrTtG1i15iA8jqUK8KR+YhDipAXJeUGLW8rXq5Zk8VvaU YcjEy/egZO6urIVIVbEAXc+vYOHqqH0qOEzGurh/tKmJLJgvMN47C4k7mduWwY97 mJjLTGoz/MNq1QJviRkFAhMlzJx8Hg83lGjzVEpmF8CNd6srSY+ainp3XqPbXPqo f5BLo4ScpQA6it7GH+Ij+EiujfgX784VnHBhOQYcqaK+lLAw4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVnbx5OFtPVxBukGzLjDQxAmseUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDljYzQ2N2YtN2FhZC0z NDMwLWE1NjUtMDU5MWQxY2M2YWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDgi736auI+6KJGsB3yXFqXAnEJJO1bazKuE9S28nnw5/xfw5FdZ4Eh GVTiawio6Yj0yAbsDf0JO2s7KolDoWxu3cC1dCNLPr545zIWJk0X/jTTL2XAT5Z1 TYkqD/lg6kcSdNpJv6XXAl/lVG8tUEzYWPb3CuET88LWjCncH1B+ROpbEdZP/YnG dRM96zosiXTaffLPdJQl855M6jz0x7wgcQxDqiDEfWqJVLn+ZUQwVuMb6iJp+4Y6 870SDKoWwmrkbUZTp02zuxOdXK/VF+wk2b9j7qwxQoyQWU1xiUufwiJqdR6Z+rmt pTvthaPpv/ndCgu2JRPoJwp0ErSA9Jk= -----END CERTIFICATE-----Generated at Mon Jun 30 01:33:36 2025 by rpki-client