$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/56f7c880-8e8b-3593-9681-d656157a4812.roa File: 56f7c880-8e8b-3593-9681-d656157a4812.roa (raw, json) Hash identifier: HvUdrwN7rgy6hQM3S8acpI1N5yQEltTRxCtzYEzWCuI= Subject key identifier: 90:6D:15:BE:72:07:CF:18:4F:50:F5:43:BD:23:EF:E8:3D:4D:9C:6A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A23C01E8DE0C4A1A444204AE0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/56f7c880-8e8b-3593-9681-d656157a4812.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:1e:8d:e0:c4:a1:a4:44:20:4a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=d573c887-516e-4b49-b3cb-d8953962d57e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:34:ee:54:18:eb:1c:a9:c1:61:f3:43:aa:3e: 3b:83:2d:40:33:72:7d:b2:db:66:37:28:6c:ee:c4: 38:e2:20:82:dd:ee:7d:4c:33:2a:fc:1c:81:26:71: 1c:81:5e:68:1e:b2:cb:59:70:8c:1b:cf:3f:a2:ad: 16:99:c3:45:3a:ae:1a:14:aa:7b:59:dd:f6:12:4d: 5c:b3:44:55:a1:37:1b:8a:5e:c6:67:79:82:bc:d6: 40:29:6c:e0:8b:32:8d:0c:0b:2a:34:b9:29:b6:c5: 08:21:2b:e0:cf:a2:0c:e2:2d:b1:02:31:74:6b:46: f2:48:b7:8d:75:54:86:2a:5a:e7:00:b3:11:bd:13: 89:05:7c:f6:9e:60:3b:20:05:ec:4b:16:72:51:56: 6a:23:76:0d:47:4e:79:69:e5:e0:cb:a8:7a:af:9c: dc:f9:0f:f1:d7:f6:8d:c4:d7:3e:00:0d:ca:50:7b: 04:5e:d3:25:c3:1a:e2:60:fd:8c:44:6c:f5:2d:eb: 2f:d8:db:24:e0:1d:39:0b:e5:18:87:70:15:18:3b: ee:27:6e:fd:fa:e4:96:de:58:e0:08:8d:69:91:e5: 42:f1:8b:6a:38:53:93:40:75:6b:39:13:ed:13:29: df:e0:d4:a8:8a:11:45:33:8a:33:fb:78:e3:54:32: 3f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:6D:15:BE:72:07:CF:18:4F:50:F5:43:BD:23:EF:E8:3D:4D:9C:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/56f7c880-8e8b-3593-9681-d656157a4812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:9f:6b:31:1d:43:91:c4:1c:42:0f:90:28:e5:ea:c5:19:2f: 49:bf:8e:d8:08:83:c1:41:17:b7:8e:c1:68:ce:e2:5b:c6:7f: 35:e8:d2:33:2b:a8:95:d1:f0:ae:54:b2:36:00:ac:bf:8d:d2: d6:a9:f4:44:0d:35:98:1e:ff:16:7b:fd:55:fd:09:fe:66:01: 11:df:e6:e4:5b:68:86:54:70:23:7a:28:af:53:ab:4c:43:c5: 67:5a:fd:4b:85:ea:bb:7e:84:fa:fc:12:0d:2e:98:e4:20:3c: 9c:86:dc:e3:ea:85:73:7b:2e:a4:39:80:ff:c7:82:65:1a:15: a8:3f:23:da:62:6e:bc:8b:2a:a5:aa:55:46:e2:61:bb:1b:09: 3c:50:91:fc:76:27:47:95:01:01:80:1b:3e:ca:84:60:f8:81: 73:1f:a0:ad:99:ea:19:88:2b:12:e0:4a:a9:b4:3f:cb:41:1c: 6c:ad:5e:e6:f6:1e:ec:2f:47:78:55:d9:4b:f6:f4:ee:40:4f: f0:b3:56:9a:b6:d1:80:e1:04:01:26:de:eb:b1:a1:7b:7f:c0: fe:84:7c:71:5f:24:0e:64:fe:fa:86:f4:20:0a:c6:90:c1:2f: 29:13:70:46:40:e0:31:3f:5d:af:db:7f:43:5f:2e:20:69:bd: 07:b0:c8:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwB6N4MShpEQgSuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk ZDU3M2M4ODctNTE2ZS00YjQ5LWIzY2ItZDg5NTM5NjJkNTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8DTuVBjrHKnBYfNDqj47gy1AM3J9sttmNyhs 7sQ44iCC3e59TDMq/ByBJnEcgV5oHrLLWXCMG88/oq0WmcNFOq4aFKp7Wd32Ek1c s0RVoTcbil7GZ3mCvNZAKWzgizKNDAsqNLkptsUIISvgz6IM4i2xAjF0a0bySLeN dVSGKlrnALMRvROJBXz2nmA7IAXsSxZyUVZqI3YNR055aeXgy6h6r5zc+Q/x1/aN xNc+AA3KUHsEXtMlwxriYP2MRGz1Lesv2Nsk4B05C+UYh3AVGDvuJ279+uSW3ljg CI1pkeVC8YtqOFOTQHVrORPtEynf4NSoihFFM4oz+3jjVDI/ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBtFb5yB88YT1D1Q70j7+g9TZxqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTZmN2M4ODAtOGU4Yi0z NTkzLTk2ODEtZDY1NjE1N2E0ODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2fazEdQ5HEHEIPkCjl6sUZL0m/jtgIg8FBF7eOwWjO4lvGfzXo0jMr qJXR8K5UsjYArL+N0tap9EQNNZge/xZ7/VX9Cf5mARHf5uRbaIZUcCN6KK9Tq0xD xWda/UuF6rt+hPr8Eg0umOQgPJyG3OPqhXN7LqQ5gP/HgmUaFag/I9pibryLKqWq VUbiYbsbCTxQkfx2J0eVAQGAGz7KhGD4gXMfoK2Z6hmIKxLgSqm0P8tBHGytXub2 HuwvR3hV2Uv29O5AT/CzVpq20YDhBAEm3uuxoXt/wP6EfHFfJA5k/vqG9CAKxpDB LykTcEZA4DE/Xa/bf0NfLiBpvQewyIs= -----END CERTIFICATE-----Generated at Mon Jun 30 18:38:28 2025 by rpki-client