$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1da52d71-8ee6-39ae-8f50-8b6776ffe1ff.roa File: 1da52d71-8ee6-39ae-8f50-8b6776ffe1ff.roa (raw, json) Hash identifier: 9iRMwkeH1I4gSvx5lhIljoreYhYAeOdO5P7p+OhYLa4= Subject key identifier: C1:D1:C6:EF:28:78:9A:C3:1D:67:8F:85:6E:66:9C:65:17:89:89:A9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A497074F18FE2792AE85EFFC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1da52d71-8ee6-39ae-8f50-8b6776ffe1ff.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 8069 IP address blocks: 20.33.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:74:f1:8f:e2:79:2a:e8:5e:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=c70da9c9-2ab2-4249-9c62-03e1dbec1bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c3:fe:34:1f:d8:d1:55:02:f0:d6:ee:51:6c: 97:7f:cd:bb:a4:e0:1a:78:38:5b:b3:a5:af:c6:e5: fd:8d:97:13:23:4b:04:e4:1f:61:e1:2a:36:bd:b4: 81:16:3d:ba:1b:2a:6c:66:7f:cb:5d:17:62:15:4f: 6e:42:13:3b:b2:87:40:1e:ef:61:7b:ae:e4:c7:ea: 85:01:48:53:b8:ec:61:97:00:cf:31:ef:5c:34:be: b3:8e:5c:db:b7:3c:1a:4d:05:40:a7:32:97:16:d8: fa:67:92:78:af:e1:0f:b5:5d:cd:6f:66:bf:a2:0f: 92:75:ec:2e:04:d3:29:d2:9e:40:0b:20:43:b3:92: 66:0f:53:3c:0c:36:a4:f7:ad:81:37:13:98:7f:2c: f7:9a:92:62:54:2f:b5:9c:fb:39:c3:6d:b8:58:95: 62:45:be:8e:54:c6:52:18:59:3c:57:39:05:a4:42: 2c:d7:ce:18:c8:f6:40:a6:2e:fd:94:de:6c:d1:39: 91:44:4a:16:51:56:1b:76:ed:6d:a8:40:8e:6e:54: 20:59:32:9b:d6:03:f5:c0:54:f9:38:13:cd:90:48: fb:8b:8e:d0:e9:5b:59:18:16:ea:aa:3a:12:3a:4d: e6:a4:d3:fe:b9:87:12:5e:48:20:3b:39:a3:d2:b6: b7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D1:C6:EF:28:78:9A:C3:1D:67:8F:85:6E:66:9C:65:17:89:89:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1da52d71-8ee6-39ae-8f50-8b6776ffe1ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:6a:db:43:21:f7:7d:6d:9c:f9:4b:72:3f:2a:37:be:b1:27: a8:8f:8a:fc:fe:7d:0d:73:8d:0c:e3:a7:06:f0:42:67:ae:50: f7:aa:e5:19:a8:40:86:27:1c:89:30:20:57:97:92:df:bc:57: 5e:44:51:21:ca:2d:66:aa:e9:05:f2:57:7a:d8:8f:99:fa:87: d5:d9:1c:a3:17:35:ce:91:e2:f0:64:74:0d:8e:67:51:81:37: ed:6d:f1:d8:f2:3e:90:6d:be:17:7d:17:36:1d:ee:3f:64:19: 46:29:c7:0e:d7:a0:18:c9:27:44:de:33:9d:ee:e1:04:be:17: 71:b8:97:de:de:da:d1:8f:a0:d3:4d:aa:27:2f:b8:ee:fa:da: 95:1c:63:8b:e9:1c:55:b0:63:54:d6:97:8f:59:af:dd:8c:d8: 16:9d:01:9a:c5:79:f5:82:80:67:5c:23:55:47:65:c0:c4:00: ea:d2:17:05:e9:57:70:a8:2c:7f:29:42:d7:cc:69:42:86:67: 85:fa:73:4a:24:b5:34:68:86:44:18:d7:1a:07:f0:e0:bb:43: 5c:e0:b7:80:92:c3:6d:88:eb:10:c1:43:2c:e9:12:e6:4a:3f: ee:a4:2c:83:da:56:93:40:b5:23:6a:b0:0d:0b:d3:96:c1:ad: a8:33:c0:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHTxj+J5Kuhe/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk YzcwZGE5YzktMmFiMi00MjQ5LTljNjItMDNlMWRiZWMxYmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsP+NB/Y0VUC8NbuUWyXf827pOAaeDhbs6Wv xuX9jZcTI0sE5B9h4So2vbSBFj26GypsZn/LXRdiFU9uQhM7sodAHu9he67kx+qF AUhTuOxhlwDPMe9cNL6zjlzbtzwaTQVApzKXFtj6Z5J4r+EPtV3Nb2a/og+Sdewu BNMp0p5ACyBDs5JmD1M8DDak962BNxOYfyz3mpJiVC+1nPs5w224WJViRb6OVMZS GFk8VzkFpEIs184YyPZApi79lN5s0TmRREoWUVYbdu1tqECOblQgWTKb1gP1wFT5 OBPNkEj7i47Q6VtZGBbqqjoSOk3mpNP+uYcSXkggOzmj0ra3JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHRxu8oeJrDHWePhW5mnGUXiYmpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMWRhNTJkNzEtOGVlNi0z OWFlLThmNTAtOGI2Nzc2ZmZlMWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNq20Mh931tnPlLcj8qN76xJ6iPivz+fQ1zjQzjpwbwQmeuUPeq5Rmo QIYnHIkwIFeXkt+8V15EUSHKLWaq6QXyV3rYj5n6h9XZHKMXNc6R4vBkdA2OZ1GB N+1t8djyPpBtvhd9FzYd7j9kGUYpxw7XoBjJJ0TeM53u4QS+F3G4l97e2tGPoNNN qicvuO762pUcY4vpHFWwY1TWl49Zr92M2BadAZrFefWCgGdcI1VHZcDEAOrSFwXp V3CoLH8pQtfMaUKGZ4X6c0oktTRohkQY1xoH8OC7Q1zgt4CSw22I6xDBQyzpEuZK P+6kLIPaVpNAtSNqsA0L05bBragzwDw= -----END CERTIFICATE-----Generated at Mon Jun 30 09:05:32 2025 by rpki-client