$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2c93a2fe-59c9-3004-aace-53a40166520d.roa File: 2c93a2fe-59c9-3004-aace-53a40166520d.roa (raw, json) Hash identifier: axFGDKXXjtjwaXB3CVXOANJi9XEm0POKoKkdWkHA60U= Subject key identifier: 74:B0:7D:7A:13:03:45:91:41:0C:87:2E:CA:DA:D1:49:B4:AC:67:C6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A5B95B55CB6FD6ECCD1A46200 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2c93a2fe-59c9-3004-aace-53a40166520d.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:b5:5c:b6:fd:6e:cc:d1:a4:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=f8a8a49a-7843-40a6-b747-67561a43e0d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:43:67:7e:bc:75:cb:6b:bf:16:ec:91:2e:99: 6f:cd:a8:de:c1:28:97:08:e4:48:0b:6b:ed:63:ad: 8a:2e:83:eb:d8:6b:7b:62:e8:a9:f5:80:8f:73:98: 23:e3:13:fc:06:f1:c8:4c:88:a6:2a:aa:14:f6:93: df:0f:f3:54:ea:30:55:a0:f1:26:06:f6:56:31:59: 08:f4:29:0c:f2:61:74:79:68:f1:b2:b8:de:38:f5: 25:b1:5e:c3:32:f1:64:02:a8:a0:03:2b:60:af:af: 08:31:77:c3:d4:c5:73:b0:27:d7:41:0f:fb:54:4c: 57:2b:60:f0:2c:f4:19:cb:a0:24:02:c6:53:ef:6b: ef:e6:34:a5:98:9f:bf:a7:03:59:26:f5:5e:f7:a2: bd:dd:22:c0:34:69:16:aa:a9:5a:92:84:f5:f2:6c: 65:4a:fa:18:12:c9:24:98:b6:00:13:a2:bf:06:13: ad:80:fc:13:50:8b:15:a1:d7:f3:d3:13:95:26:c6: 64:bb:96:4a:8d:58:db:0c:ee:8d:4b:02:a8:54:cd: 53:af:d3:12:bb:25:c4:bf:1f:f9:d7:bf:55:f6:69: 2c:be:30:58:36:e0:e1:08:b6:bd:99:98:a4:70:9b: b8:54:2f:2c:a7:8b:01:72:c6:05:c7:61:4a:9c:be: 3d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B0:7D:7A:13:03:45:91:41:0C:87:2E:CA:DA:D1:49:B4:AC:67:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2c93a2fe-59c9-3004-aace-53a40166520d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:a5:f9:aa:4e:3d:69:eb:a0:13:82:d2:1f:3c:26:1f:49:c6: bb:e8:3c:2a:5e:15:da:a5:30:fe:2d:f5:9a:2e:61:4f:db:dd: eb:7a:5b:8e:36:ce:64:4d:1b:8e:8b:b1:67:b3:30:88:b2:a5: 8d:c9:79:23:28:c5:a0:f3:45:70:3f:0e:f4:eb:c0:d4:34:2b: 48:c6:01:3a:88:45:71:75:b3:d7:be:9b:0f:f4:17:e3:b6:26: 05:89:cf:3f:e4:31:31:32:46:91:19:47:3c:66:dc:a7:a3:1a: a4:d5:8e:ea:e5:c8:44:a9:9d:f3:03:36:84:d6:51:e3:fe:af: d6:46:c3:33:17:b4:ed:67:2d:33:e5:4f:74:46:fe:f7:27:43: 5a:dc:06:9f:e0:d9:85:c6:d7:50:87:b2:a6:f7:c6:cf:a3:81: 6b:41:fa:45:33:2f:56:c3:91:e5:63:20:c9:18:f2:3b:6f:54: 86:03:3f:5a:a2:4d:ba:fb:f3:cf:2a:12:d7:27:75:44:af:05: 87:ae:6b:0b:e2:0d:36:02:f7:d4:68:c2:89:00:3c:4c:55:88: 0d:f3:c6:3c:32:a9:3a:f6:2b:83:55:c1:89:7e:18:60:b6:6e: 41:08:30:e3:99:b7:5c:5a:13:29:a7:04:7c:97:46:a6:42:d1: e4:eb:45:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpblbVctv1uzNGkYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk ZjhhOGE0OWEtNzg0My00MGE2LWI3NDctNjc1NjFhNDNlMGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokNnfrx1y2u/FuyRLplvzajewSiXCORIC2vt Y62KLoPr2Gt7Yuip9YCPc5gj4xP8BvHITIimKqoU9pPfD/NU6jBVoPEmBvZWMVkI 9CkM8mF0eWjxsrjeOPUlsV7DMvFkAqigAytgr68IMXfD1MVzsCfXQQ/7VExXK2Dw LPQZy6AkAsZT72vv5jSlmJ+/pwNZJvVe96K93SLANGkWqqlakoT18mxlSvoYEskk mLYAE6K/BhOtgPwTUIsVodfz0xOVJsZku5ZKjVjbDO6NSwKoVM1Tr9MSuyXEvx/5 179V9mksvjBYNuDhCLa9mZikcJu4VC8sp4sBcsYFx2FKnL49lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSwfXoTA0WRQQyHLsra0Um0rGfGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMmM5M2EyZmUtNTljOS0z MDA0LWFhY2UtNTNhNDAxNjY1MjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWl+apOPWnroBOC0h88Jh9JxrvoPCpeFdqlMP4t9ZouYU/b3et6W442 zmRNG46LsWezMIiypY3JeSMoxaDzRXA/DvTrwNQ0K0jGATqIRXF1s9e+mw/0F+O2 JgWJzz/kMTEyRpEZRzxm3KejGqTVjurlyESpnfMDNoTWUeP+r9ZGwzMXtO1nLTPl T3RG/vcnQ1rcBp/g2YXG11CHsqb3xs+jgWtB+kUzL1bDkeVjIMkY8jtvVIYDP1qi Tbr7888qEtcndUSvBYeuawviDTYC99RowokAPExViA3zxjwyqTr2K4NVwYl+GGC2 bkEIMOOZt1xaEymnBHyXRqZC0eTrRfs= -----END CERTIFICATE-----Generated at Mon Jun 30 13:24:30 2025 by rpki-client