$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/20052b8d-9195-30ba-9869-f02f78771f7c.roa File: 20052b8d-9195-30ba-9869-f02f78771f7c.roa (raw, json) Hash identifier: 9fIPREqwOsLMvQLesDH+7x2VdhYZY4NgpdZaX2f5PWo= Subject key identifier: 82:E7:84:26:54:7A:CF:97:98:BC:39:AE:97:17:0B:77:F0:93:3D:CB Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A34801873DD2D06519E919F80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/20052b8d-9195-30ba-9869-f02f78771f7c.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.33.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:18:73:dd:2d:06:51:9e:91:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=3a13d558-9379-4ec1-be8c-441fa4b08dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6b:2e:b3:2d:a7:47:bd:f2:4c:fd:6b:52:c7: c5:8a:16:40:71:b3:7b:e2:f4:05:26:73:fe:97:41: ee:37:f1:a5:f8:15:c6:e6:b8:5b:41:75:ed:c3:60: 9d:7e:82:1e:c2:88:ed:35:2e:23:ec:95:01:44:1f: 2c:95:2c:aa:4b:4f:74:84:f6:ca:59:3c:d6:2e:5e: 6a:9b:00:8c:bd:2e:de:04:dc:02:19:1b:be:db:a9: ab:62:88:ac:96:ea:0c:50:69:97:f6:10:c1:23:da: 94:87:bb:02:05:ad:cf:e7:29:ff:b1:39:bf:c0:23: d0:20:02:44:bd:ae:14:d1:06:5e:20:7a:46:55:61: 24:1a:b5:7a:66:e6:96:7f:7a:fd:1e:40:75:8c:3f: f8:2f:0c:26:a8:37:26:a3:4e:6c:4f:1e:fe:8a:23: 8e:66:b0:72:3a:6d:fd:16:c6:ec:7e:74:37:f1:ed: 24:31:a8:75:01:8e:cc:64:de:82:17:e2:70:a7:02: 92:83:e8:db:72:1f:a8:e3:dc:79:bb:fb:59:e2:c8: 85:fe:1d:66:64:22:3d:3c:03:4f:a9:c3:d5:72:66: d7:66:26:c1:e1:7f:ff:20:fe:64:0a:31:34:bd:3e: ae:c7:11:f7:bd:ac:e5:db:9f:ec:17:3d:51:61:b3: 29:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E7:84:26:54:7A:CF:97:98:BC:39:AE:97:17:0B:77:F0:93:3D:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/20052b8d-9195-30ba-9869-f02f78771f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:0c:ac:26:3b:18:c2:74:b6:e5:0f:86:d4:4e:61:7f:7f:a9: d2:0a:5a:fa:f2:3c:46:6f:15:e3:9d:ad:83:69:74:b2:2e:b8: ce:39:76:c8:29:a1:20:59:d7:ca:16:46:c9:70:c9:37:75:87: 07:dd:06:bf:f9:fe:7f:5b:3d:1a:21:7c:1f:bf:95:ef:46:a2: 78:c4:b1:e6:dc:70:7e:91:83:17:de:e5:f0:10:37:6d:4e:db: 9b:02:38:9a:95:8a:17:37:b5:9e:e7:0d:d2:a0:91:09:11:19: ff:c5:b1:95:d5:00:f3:a8:55:39:45:86:8e:ae:07:b2:47:ab: 04:c8:12:35:a0:28:4f:7b:f6:58:1c:bc:bb:68:66:30:0e:0c: ca:47:95:ae:e4:f4:26:36:ed:52:54:21:11:40:7f:89:79:8b: 61:af:aa:5b:d8:25:ad:e2:0a:9b:5a:cc:53:02:a6:3e:0e:20: 61:60:2e:ae:14:6d:10:0d:4d:cf:45:a4:3a:10:c2:a5:ef:31: 62:eb:d0:51:1c:cb:4e:92:c4:f2:9f:fc:da:bc:9b:0f:84:a4: 35:85:45:7f:ae:a3:3f:68:e5:ac:fb:54:7b:a7:b9:2f:84:c5: 00:d0:ac:3a:5d:8b:4b:8d:1d:5c:c5:bb:26:39:c3:77:a4:ab: e3:d1:de:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gBhz3S0GUZ6Rn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk M2ExM2Q1NTgtOTM3OS00ZWMxLWJlOGMtNDQxZmE0YjA4ZGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGsusy2nR73yTP1rUsfFihZAcbN74vQFJnP+ l0HuN/Gl+BXG5rhbQXXtw2CdfoIewojtNS4j7JUBRB8slSyqS090hPbKWTzWLl5q mwCMvS7eBNwCGRu+26mrYoisluoMUGmX9hDBI9qUh7sCBa3P5yn/sTm/wCPQIAJE va4U0QZeIHpGVWEkGrV6ZuaWf3r9HkB1jD/4LwwmqDcmo05sTx7+iiOOZrByOm39 FsbsfnQ38e0kMah1AY7MZN6CF+JwpwKSg+jbch+o49x5u/tZ4siF/h1mZCI9PANP qcPVcmbXZibB4X//IP5kCjE0vT6uxxH3vazl25/sFz1RYbMpeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILnhCZUes+XmLw5rpcXC3fwkz3LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjAwNTJiOGQtOTE5NS0z MGJhLTk4NjktZjAyZjc4NzcxZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0MrCY7GMJ0tuUPhtROYX9/qdIKWvryPEZvFeOdrYNpdLIuuM45dsgp oSBZ18oWRslwyTd1hwfdBr/5/n9bPRohfB+/le9GonjEsebccH6Rgxfe5fAQN21O 25sCOJqVihc3tZ7nDdKgkQkRGf/FsZXVAPOoVTlFho6uB7JHqwTIEjWgKE979lgc vLtoZjAODMpHla7k9CY27VJUIRFAf4l5i2GvqlvYJa3iCptazFMCpj4OIGFgLq4U bRANTc9FpDoQwqXvMWLr0FEcy06SxPKf/Nq8mw+EpDWFRX+uoz9o5az7VHunuS+E xQDQrDpdi0uNHVzFuyY5w3ekq+PR3lk= -----END CERTIFICATE-----Generated at Mon Jun 30 08:32:37 2025 by rpki-client