$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/adce9981-1640-3807-863a-5100ced68525.roa File: adce9981-1640-3807-863a-5100ced68525.roa (raw, json) Hash identifier: Vn6n1v0xDkhh8wsWnGAdhZs6bKrvwg0i7t5RSUIQAMQ= Subject key identifier: D2:68:71:60:D1:57:CF:AD:9E:91:A2:4E:2F:00:D6:57:F9:8C:00:06 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A5B95B5DD2E9AD2155B7DF840 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/adce9981-1640-3807-863a-5100ced68525.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:b5:dd:2e:9a:d2:15:5b:7d:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=72cfd12a-9ecf-4f41-9d09-f858bb9c8f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a2:0a:59:a5:c1:ae:dc:01:89:f6:61:71:db: aa:38:b0:4c:b3:97:c1:99:95:11:c8:a1:17:63:bc: b0:50:45:09:87:ac:96:8c:3b:fe:5b:2e:cd:bf:f6: cc:7f:f2:58:f2:9a:bd:ec:cb:50:0a:9a:d2:9f:b8: 91:9e:74:cc:6c:56:15:8a:57:6e:2d:4e:1f:32:3e: c8:4d:37:c4:4a:1a:70:af:4a:44:a9:b2:e1:49:15: 36:66:37:af:f5:a6:f6:2a:15:bf:46:cd:bc:43:f1: d1:3d:50:af:b1:2e:8e:17:8f:10:e8:9b:d9:d4:be: f5:4c:a2:9d:ef:03:ea:52:5d:c2:87:fd:10:7a:30: 89:2b:c0:17:c2:f1:a5:c7:71:0d:3e:26:88:36:9d: 17:75:13:61:e1:c6:7e:61:9f:65:8e:c7:25:49:46: cf:93:31:00:ff:b1:bd:32:07:e7:2f:8d:16:77:81: 8f:48:5c:3b:54:b6:5a:19:be:f5:6d:63:02:2e:43: 71:d5:3f:7c:91:50:8a:0d:ec:13:f8:c1:60:20:ae: 71:f3:56:09:75:94:d7:3b:00:c6:1c:e1:84:e8:45: 7b:fd:8e:6b:78:cd:59:16:08:9c:97:1f:a3:80:cf: f4:db:48:cd:9c:76:ff:3a:9a:c5:44:f7:23:2d:a6: bd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:68:71:60:D1:57:CF:AD:9E:91:A2:4E:2F:00:D6:57:F9:8C:00:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/adce9981-1640-3807-863a-5100ced68525.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:ed:0b:46:7e:11:83:e9:2b:73:0c:c6:4a:ab:4d:2a:aa:f5: e0:d3:a1:50:97:3a:90:a8:ad:b2:80:24:5b:fc:79:83:01:9b: e4:1e:1a:62:0b:23:ce:83:76:58:08:a4:bc:02:b3:cb:a2:ae: eb:9d:b0:f1:a6:f0:5d:62:59:17:60:99:17:cb:c5:f1:2e:51: d4:22:1e:ab:e1:f4:74:ab:31:1c:b4:3e:40:9d:10:95:95:82: c3:a7:90:4b:af:6e:1a:07:97:31:06:c8:bc:17:bd:8b:bd:16: 0d:30:3e:29:5f:6b:ac:95:2c:68:8b:96:12:7e:75:90:9b:97: d5:a5:d1:de:f1:01:25:c0:25:ac:d8:eb:16:1e:03:d3:e0:a5: 8f:a3:1e:8b:8f:9d:1b:c6:59:72:c0:02:0a:5e:f8:21:df:33: c1:77:cd:54:59:8a:07:dc:0b:87:99:83:ac:4e:78:38:b3:40: a6:e2:bf:2b:a1:46:45:c6:48:c6:a9:34:e6:82:41:e1:c2:2a: dc:dd:7c:a7:da:27:29:22:ba:18:58:f7:a5:3f:a6:c7:02:52: ea:fd:3c:3c:f0:c5:9a:14:28:c1:82:44:13:83:0d:52:31:ab: f8:26:48:7d:20:d9:1c:6e:fb:0b:36:b2:7b:d6:32:0b:4e:d7: 28:6c:d7:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpblbXdLprSFVt9+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk NzJjZmQxMmEtOWVjZi00ZjQxLTlkMDktZjg1OGJiOWM4ZjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6IKWaXBrtwBifZhcduqOLBMs5fBmZURyKEX Y7ywUEUJh6yWjDv+Wy7Nv/bMf/JY8pq97MtQCprSn7iRnnTMbFYVilduLU4fMj7I TTfEShpwr0pEqbLhSRU2Zjev9ab2KhW/Rs28Q/HRPVCvsS6OF48Q6JvZ1L71TKKd 7wPqUl3Ch/0QejCJK8AXwvGlx3ENPiaINp0XdRNh4cZ+YZ9ljsclSUbPkzEA/7G9 MgfnL40Wd4GPSFw7VLZaGb71bWMCLkNx1T98kVCKDewT+MFgIK5x81YJdZTXOwDG HOGE6EV7/Y5reM1ZFgiclx+jgM/020jNnHb/OprFRPcjLaa9sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJocWDRV8+tnpGiTi8A1lf5jAAGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWRjZTk5ODEtMTY0MC0z ODA3LTg2M2EtNTEwMGNlZDY4NTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbtC0Z+EYPpK3MMxkqrTSqq9eDToVCXOpCorbKAJFv8eYMBm+QeGmIL I86DdlgIpLwCs8uiruudsPGm8F1iWRdgmRfLxfEuUdQiHqvh9HSrMRy0PkCdEJWV gsOnkEuvbhoHlzEGyLwXvYu9Fg0wPilfa6yVLGiLlhJ+dZCbl9Wl0d7xASXAJazY 6xYeA9PgpY+jHouPnRvGWXLAAgpe+CHfM8F3zVRZigfcC4eZg6xOeDizQKbivyuh RkXGSMapNOaCQeHCKtzdfKfaJykiuhhY96U/pscCUur9PDzwxZoUKMGCRBODDVIx q/gmSH0g2Rxu+ws2snvWMgtO1yhs13c= -----END CERTIFICATE-----Generated at Mon Jun 30 03:29:35 2025 by rpki-client