$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/44452d33-9f71-38a1-8ce2-f9548e3b6b7e.roa File: 44452d33-9f71-38a1-8ce2-f9548e3b6b7e.roa (raw, json) Hash identifier: TU+3O+waCAYGq8AXZNU9rzDkjw7HcSWWCprYC0dzovo= Subject key identifier: 67:F0:80:89:7E:61:E4:A6:33:75:C7:02:AC:5A:F9:8D:31:36:4F:9C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A3480193A42E9F6BE1F031980 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/44452d33-9f71-38a1-8ce2-f9548e3b6b7e.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.33.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:19:3a:42:e9:f6:be:1f:03:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=6f40e95a-2a41-4fa3-89f4-a5df802cc1f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ad:05:fd:19:43:3b:8c:43:48:15:11:25:eb: 2a:0a:7a:2f:fe:5b:30:55:d6:11:71:44:7a:cb:ca: 9e:a5:5d:de:69:27:23:bf:c4:83:a6:39:fa:74:6d: 4b:cd:1a:c8:6d:fd:a6:ce:60:72:51:46:73:0f:74: 8c:c0:b1:61:2e:62:8e:b1:cf:bc:85:5c:76:8b:8c: 65:3a:1d:32:87:1c:45:c1:da:e2:8a:c2:74:33:87: 2d:31:ec:bd:9d:a3:5e:5a:4b:09:03:d3:ae:9a:84: 86:6b:83:a5:f9:6e:6b:c1:57:4a:0e:40:8a:5d:e8: a3:51:5c:e5:df:f7:f3:d9:6d:5d:f6:ff:f1:6d:e5: cc:31:9c:0f:9b:2c:dd:9d:7f:bd:4c:8c:f0:c8:17: ac:7b:50:76:7e:e6:b2:be:1c:01:bb:cf:36:11:e2: 51:d9:cc:f4:d0:00:40:58:a2:56:63:a7:24:17:9e: 0f:43:c1:e9:37:d0:c7:14:c4:8e:7c:e8:93:32:2f: 4b:1a:cc:a4:5b:88:8d:f4:86:49:1c:4c:2d:e5:59: 61:d8:93:fb:6a:ec:97:3f:bf:02:50:ea:74:e1:d2: ac:a1:bd:40:31:97:43:6c:f7:b2:d3:dc:33:1e:50: ec:a9:ed:7e:aa:f2:f0:81:1f:f9:d6:ff:bc:a2:10: 8b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F0:80:89:7E:61:E4:A6:33:75:C7:02:AC:5A:F9:8D:31:36:4F:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/44452d33-9f71-38a1-8ce2-f9548e3b6b7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:49:be:cf:2b:9b:c7:f3:08:3f:eb:d0:18:13:bf:e2:71:5e: 2c:83:a5:e0:2b:63:4a:62:2c:74:ac:4a:12:a0:21:79:0a:cb: 2a:58:8a:1a:af:d0:4b:45:9a:54:93:ea:43:b2:5e:47:e4:18: 5a:2d:0e:f4:d9:b3:ed:d7:00:9f:49:29:72:74:ab:0d:bc:5f: 1d:ad:e2:e6:4f:a2:fe:7e:ae:27:fc:67:90:52:82:1f:e1:c7: 4f:fa:8e:ff:ec:50:fc:81:f8:97:1f:e7:a6:c7:ea:31:5f:0e: 3e:da:a6:68:d0:39:64:fe:b5:6a:57:1f:11:16:c9:71:7c:33: f0:ea:b4:4b:81:ec:e5:3b:10:a6:f4:4b:28:a7:f6:74:83:24: 82:f4:63:e8:3b:74:dd:c1:00:af:98:0c:d9:67:2c:b4:29:8a: 97:51:17:5f:54:b5:df:01:ab:ec:31:cb:a4:87:d7:6d:f8:3e: e3:dc:b8:c2:0e:5c:e7:ca:3d:23:7d:67:5a:94:9a:28:85:f1: d7:86:eb:e3:fb:ed:83:1a:be:66:72:b8:a7:41:d0:29:a7:7a: ff:b7:ec:84:55:4a:89:c9:d3:72:a6:4a:30:05:9b:7b:2e:01: 1b:f9:d7:84:0f:7f:2d:c2:e4:d2:9f:35:3d:41:9e:29:fe:24: c5:48:91:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gBk6Qun2vh8DGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk NmY0MGU5NWEtMmE0MS00ZmEzLTg5ZjQtYTVkZjgwMmNjMWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq0F/RlDO4xDSBURJesqCnov/lswVdYRcUR6 y8qepV3eaScjv8SDpjn6dG1LzRrIbf2mzmByUUZzD3SMwLFhLmKOsc+8hVx2i4xl Oh0yhxxFwdriisJ0M4ctMey9naNeWksJA9OumoSGa4Ol+W5rwVdKDkCKXeijUVzl 3/fz2W1d9v/xbeXMMZwPmyzdnX+9TIzwyBese1B2fuayvhwBu882EeJR2cz00ABA WKJWY6ckF54PQ8HpN9DHFMSOfOiTMi9LGsykW4iN9IZJHEwt5Vlh2JP7auyXP78C UOp04dKsob1AMZdDbPey09wzHlDsqe1+qvLwgR/51v+8ohCLmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfwgIl+YeSmM3XHAqxa+Y0xNk+cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDQ0NTJkMzMtOWY3MS0z OGExLThjZTItZjk1NDhlM2I2YjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFJvs8rm8fzCD/r0BgTv+JxXiyDpeArY0piLHSsShKgIXkKyypYihqv 0EtFmlST6kOyXkfkGFotDvTZs+3XAJ9JKXJ0qw28Xx2t4uZPov5+rif8Z5BSgh/h x0/6jv/sUPyB+Jcf56bH6jFfDj7apmjQOWT+tWpXHxEWyXF8M/DqtEuB7OU7EKb0 Syin9nSDJIL0Y+g7dN3BAK+YDNlnLLQpipdRF19Utd8Bq+wxy6SH1234PuPcuMIO XOfKPSN9Z1qUmiiF8deG6+P77YMavmZyuKdB0Cmnev+37IRVSonJ03KmSjAFm3su ARv514QPfy3C5NKfNT1Bnin+JMVIkXE= -----END CERTIFICATE-----Generated at Mon Jun 30 01:29:58 2025 by rpki-client