$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c842db2-d012-3551-87ea-7b6b22348b27.roa File: 5c842db2-d012-3551-87ea-7b6b22348b27.roa (raw, json) Hash identifier: f5+wbpiChceegpRIR3FYkeqLyAHHUtsN+Lczm1UZFbI= Subject key identifier: C6:80:88:EE:53:D8:5A:FC:ED:47:E2:D0:1B:21:94:1F:10:66:5E:C4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A5B95B4D280B42CFC40896A80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c842db2-d012-3551-87ea-7b6b22348b27.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:b4:d2:80:b4:2c:fc:40:89:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=9709fb95-662c-492f-95e3-801864e06da5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c6:5e:fa:21:b7:7f:1e:b9:7c:36:63:27:ff: 1e:98:aa:cf:2e:75:9a:5a:9c:b4:d7:42:d1:c2:79: aa:91:51:fe:5e:41:c5:81:ac:7c:62:7d:9d:a9:6d: 5f:4b:6c:5b:7b:bf:ba:b9:d9:62:71:70:ad:1e:27: 68:47:f0:e7:2e:ea:6e:e7:39:f4:67:66:13:49:c0: ff:0f:2a:ae:64:7d:ca:df:3e:48:64:0a:4f:d3:96: 48:dc:41:94:88:96:6d:d6:7d:79:c1:d7:d5:e9:ef: 95:57:e8:75:20:34:54:1b:03:cf:bc:0f:87:b5:b9: 61:e0:ea:97:ba:73:56:f8:20:b4:44:7c:48:bd:de: d9:63:98:dd:a5:db:86:4e:aa:52:63:fc:86:28:74: ba:46:28:26:29:ab:fd:28:aa:57:b3:63:18:e7:7b: 71:e7:46:0f:a2:ec:ef:62:5b:5b:e0:16:2f:b3:67: 5f:ba:8b:ca:6a:f6:04:b4:b5:81:23:6e:c7:cb:7a: 4e:0a:a9:bb:26:e8:6f:13:ab:b0:0c:7f:ae:63:6c: fe:fb:4b:3a:f3:03:da:ea:c4:c8:89:07:d0:0c:3d: ec:43:d2:f2:9c:7a:0b:c3:af:91:37:fc:ea:0c:3e: 62:07:d3:e1:e4:0b:bc:bd:ac:cb:1f:1a:d2:42:16: 20:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:80:88:EE:53:D8:5A:FC:ED:47:E2:D0:1B:21:94:1F:10:66:5E:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c842db2-d012-3551-87ea-7b6b22348b27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:73:f8:0f:ea:3c:fe:e8:c3:7a:5c:7e:fb:cc:14:ee:23:b6: 6b:3f:0e:74:12:c2:5b:83:96:45:a7:8e:d0:11:8e:6f:39:df: 8c:5e:fc:45:bc:27:52:3e:cb:82:09:27:91:c0:3d:1c:6e:62: a9:e5:ee:8f:8e:8c:93:ee:f4:b8:5e:d0:f9:9b:2c:15:0e:eb: 9b:9b:26:a0:f9:10:89:7b:3b:db:a4:86:89:01:06:86:75:f6: b5:ed:da:e8:01:bf:a1:81:5d:c8:79:5f:82:70:06:7d:e3:43: 9a:ce:1b:d2:8c:c6:57:fd:f9:e5:6e:74:34:72:32:b7:cf:d9: 9c:b8:48:b5:3a:0e:9d:66:2c:2b:92:e0:d1:8d:09:22:41:0d: 09:b7:e0:c5:ef:6f:19:fc:1f:90:2b:cf:82:b5:76:73:eb:92: da:8a:84:a1:82:01:00:03:b7:fc:fc:f9:3e:75:8b:cd:68:6a: c6:f9:d7:3b:0a:b3:3f:ae:62:64:85:69:19:c2:1f:8a:1c:a2: 60:66:42:a5:f7:b1:80:04:76:4a:15:cb:06:a5:29:fa:23:36: 5f:eb:40:cc:7a:52:35:f7:c9:c9:1c:f5:1d:ef:b2:15:2f:1d: 62:21:ae:8a:7c:a4:54:c8:13:b2:ee:0e:8c:d9:55:eb:01:03: 61:de:a4:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpblbTSgLQs/ECJaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk OTcwOWZiOTUtNjYyYy00OTJmLTk1ZTMtODAxODY0ZTA2ZGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicZe+iG3fx65fDZjJ/8emKrPLnWaWpy010LR wnmqkVH+XkHFgax8Yn2dqW1fS2xbe7+6udlicXCtHidoR/DnLupu5zn0Z2YTScD/ DyquZH3K3z5IZApP05ZI3EGUiJZt1n15wdfV6e+VV+h1IDRUGwPPvA+Htblh4OqX unNW+CC0RHxIvd7ZY5jdpduGTqpSY/yGKHS6RigmKav9KKpXs2MY53tx50YPouzv Yltb4BYvs2dfuovKavYEtLWBI27Hy3pOCqm7JuhvE6uwDH+uY2z++0s68wPa6sTI iQfQDD3sQ9LynHoLw6+RN/zqDD5iB9Ph5Au8vazLHxrSQhYgnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMaAiO5T2Fr87Ufi0BshlB8QZl7EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWM4NDJkYjItZDAxMi0z NTUxLTg3ZWEtN2I2YjIyMzQ4YjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFz+A/qPP7ow3pcfvvMFO4jtms/DnQSwluDlkWnjtARjm8534xe/EW8 J1I+y4IJJ5HAPRxuYqnl7o+OjJPu9Lhe0PmbLBUO65ubJqD5EIl7O9ukhokBBoZ1 9rXt2ugBv6GBXch5X4JwBn3jQ5rOG9KMxlf9+eVudDRyMrfP2Zy4SLU6Dp1mLCuS 4NGNCSJBDQm34MXvbxn8H5Arz4K1dnPrktqKhKGCAQADt/z8+T51i81oasb51zsK sz+uYmSFaRnCH4ocomBmQqX3sYAEdkoVywalKfojNl/rQMx6UjX3yckc9R3vshUv HWIhrop8pFTIE7LuDozZVesBA2HepD8= -----END CERTIFICATE-----Generated at Mon Jun 30 06:48:27 2025 by rpki-client