$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8ed73672-2fd7-30a4-8679-e19d546d48fd.roa File: 8ed73672-2fd7-30a4-8679-e19d546d48fd.roa (raw, json) Hash identifier: 2huEpSmxAULKNz4ffO4F9CojjVmluuCDaswkJxCnbEM= Subject key identifier: A7:F4:48:E0:4D:5F:C0:4F:E8:59:04:92:04:42:9F:9D:8F:23:68:21 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A348019040BCF464C055E6C40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8ed73672-2fd7-30a4-8679-e19d546d48fd.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.33.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:19:04:0b:cf:46:4c:05:5e:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=fdcc05fe-4c21-4091-b462-5c5e036b5dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:59:d7:e3:71:fd:1f:68:ba:68:2b:a4:25:84: 3e:9b:f5:6b:b9:57:6e:f8:75:6d:e1:e5:e4:10:49: 9a:86:26:8f:0c:e1:53:83:f5:a2:31:9c:06:bc:98: 20:b7:92:7f:82:57:d3:e6:1b:9b:31:45:57:91:f3: 0e:f4:95:27:cd:74:9d:be:d2:7d:f3:db:68:d7:2d: ad:eb:38:08:b6:e0:65:1d:1a:fd:ff:18:09:43:03: 5a:12:29:27:22:ad:59:98:6c:a6:b0:c2:7b:2e:e2: 9d:b0:2e:57:a4:6b:89:54:61:25:91:57:af:cc:1a: bd:b3:b1:52:61:1b:ef:b5:1c:b4:8e:61:ed:c3:46: 74:5e:d6:c0:d4:66:68:65:88:d8:e7:0f:a4:ed:12: 5b:69:b3:10:94:20:10:de:e9:03:03:f5:ba:78:4d: ac:d8:30:53:b1:56:71:17:73:71:aa:5f:32:64:a6: 29:2a:01:12:ec:a9:16:09:2a:bb:1a:d8:a3:b9:0c: e2:d7:b5:d6:5b:9a:39:33:3c:30:a9:26:59:13:73: f8:de:ca:36:57:f0:e2:27:b9:26:7e:43:97:6f:5b: cf:02:f5:35:c2:d9:ea:2b:4e:4a:7d:3d:ad:27:64: 61:00:ba:c3:9d:0b:f1:12:c4:f6:7a:f8:09:cd:1d: 25:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F4:48:E0:4D:5F:C0:4F:E8:59:04:92:04:42:9F:9D:8F:23:68:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8ed73672-2fd7-30a4-8679-e19d546d48fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:ff:49:59:4d:fe:81:a3:d2:73:7f:1b:39:fa:d1:d2:6d:99: b3:f0:17:e9:24:01:95:d0:b2:d9:2e:4c:4a:89:6d:57:0e:4b: b3:7a:3d:5c:d5:5e:3c:58:48:0c:14:4f:89:c7:16:dd:1e:b0: 1c:05:71:e9:ca:f4:f6:14:9a:90:94:a9:2c:f6:c6:90:0a:80: a4:ec:69:23:36:b8:aa:2a:a6:b4:35:7d:5d:20:ad:9c:5c:19: be:9d:f7:b7:49:8b:8b:8a:43:76:d7:d9:df:c1:b7:95:dc:05: 83:5f:a6:02:ad:55:af:4b:7a:3a:f5:c7:00:c1:f9:7e:1c:81: 69:9e:e6:d2:f5:61:5a:7f:e7:03:54:71:95:0f:af:6d:ee:e0: 1c:5e:ee:d6:ad:3a:33:d4:5c:b1:48:bd:71:e4:54:ec:4d:34: 83:51:50:8d:6b:84:87:75:af:7e:78:bd:89:a9:ab:57:05:a7: 2c:20:ea:3e:fe:8e:75:5a:f8:ca:b1:8c:77:ea:b2:6e:62:3a: cf:11:73:10:5c:df:01:55:a7:a0:0f:40:95:3c:cf:ec:b5:12: a4:59:39:c9:a1:d3:1c:60:0d:3c:9a:4d:fc:29:2a:79:83:56: cc:fb:89:02:af:e0:67:0a:1f:10:5c:e4:32:12:14:47:90:7a: d8:f8:33:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gBkEC89GTAVebEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk ZmRjYzA1ZmUtNGMyMS00MDkxLWI0NjItNWM1ZTAzNmI1ZGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VnX43H9H2i6aCukJYQ+m/VruVdu+HVt4eXk EEmahiaPDOFTg/WiMZwGvJggt5J/glfT5hubMUVXkfMO9JUnzXSdvtJ989to1y2t 6zgItuBlHRr9/xgJQwNaEiknIq1ZmGymsMJ7LuKdsC5XpGuJVGElkVevzBq9s7FS YRvvtRy0jmHtw0Z0XtbA1GZoZYjY5w+k7RJbabMQlCAQ3ukDA/W6eE2s2DBTsVZx F3Nxql8yZKYpKgES7KkWCSq7GtijuQzi17XWW5o5MzwwqSZZE3P43so2V/DiJ7km fkOXb1vPAvU1wtnqK05KfT2tJ2RhALrDnQvxEsT2evgJzR0lzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKf0SOBNX8BP6FkEkgRCn52PI2ghMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOGVkNzM2NzItMmZkNy0z MGE0LTg2NzktZTE5ZDU0NmQ0OGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGH/SVlN/oGj0nN/Gzn60dJtmbPwF+kkAZXQstkuTEqJbVcOS7N6PVzV XjxYSAwUT4nHFt0esBwFcenK9PYUmpCUqSz2xpAKgKTsaSM2uKoqprQ1fV0grZxc Gb6d97dJi4uKQ3bX2d/Bt5XcBYNfpgKtVa9Lejr1xwDB+X4cgWme5tL1YVp/5wNU cZUPr23u4Bxe7tatOjPUXLFIvXHkVOxNNINRUI1rhId1r354vYmpq1cFpywg6j7+ jnVa+MqxjHfqsm5iOs8RcxBc3wFVp6APQJU8z+y1EqRZOcmh0xxgDTyaTfwpKnmD Vsz7iQKv4GcKHxBc5DISFEeQetj4M4k= -----END CERTIFICATE-----Generated at Mon Jun 30 08:30:40 2025 by rpki-client