$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c6e160e3-34d1-3b1f-bb5b-b2f34cecf1c0.roa File: c6e160e3-34d1-3b1f-bb5b-b2f34cecf1c0.roa (raw, json) Hash identifier: L2kNLgHhpEoi+w9Yph0hTT3LZYF+pkmVjTg3lXK+MzQ= Subject key identifier: 76:03:CA:52:57:59:46:47:80:F2:6F:86:08:AA:91:74:61:1A:03:5A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A268AC891D469B72FA8C64B00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c6e160e3-34d1-3b1f-bb5b-b2f34cecf1c0.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:c8:91:d4:69:b7:2f:a8:c6:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=1086df17-52e1-46f4-8cc6-0bcc9e08fa8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:87:7f:f8:f7:fa:c7:33:76:f8:c4:69:1d:42: 2e:87:20:11:ae:11:cb:c9:d9:a4:e8:e7:9c:c8:eb: 89:d6:d2:6d:b9:2e:ba:57:ab:a7:9b:86:15:5a:e3: f6:fe:1d:ab:21:23:ce:00:d3:f1:f5:8e:36:61:f7: 0d:47:bc:92:86:a5:51:26:3d:0a:f0:18:98:7c:53: 6e:ff:f2:61:db:4d:23:2a:84:47:da:cb:cb:23:bf: 18:41:eb:03:57:69:04:92:59:e8:9d:c5:c9:1a:11: 26:b7:40:61:e8:af:d0:2f:eb:ed:9f:e9:14:67:c0: 79:59:2e:84:87:0b:39:aa:f5:7b:8b:43:62:28:97: 53:de:8a:1c:a8:68:8a:d0:44:af:12:fe:f9:3f:36: 73:8a:86:2b:d8:61:9e:3e:65:d9:4d:fb:0e:38:4c: ee:80:4e:0f:25:7f:eb:9a:4e:4c:f2:5c:f7:38:3c: 5f:a3:bd:8a:8a:0b:f1:32:15:0e:94:89:0d:f0:73: 76:57:f7:d8:70:da:ef:f7:bf:ad:17:1e:b6:1d:c8: 10:47:5d:3d:db:fe:16:d6:54:82:52:c9:7a:fa:47: 2a:58:c2:4b:bb:9e:12:d9:58:6f:61:90:90:67:b2: 8e:e8:76:4b:75:32:e0:ba:71:f4:f3:c7:72:98:12: a6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:03:CA:52:57:59:46:47:80:F2:6F:86:08:AA:91:74:61:1A:03:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c6e160e3-34d1-3b1f-bb5b-b2f34cecf1c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:21:1b:f9:80:37:a2:7f:7e:f4:0e:8c:9e:8e:3f:13:3a:24: f6:44:f5:d6:6f:e3:af:24:b4:93:ca:95:c6:bd:99:66:12:aa: 55:bd:25:14:bf:8a:f6:56:26:9c:2e:b8:ba:20:de:a0:65:02: 08:af:fa:f5:d3:79:72:c3:f0:d5:63:df:6a:70:14:d6:14:a5: a1:42:d4:d8:34:9a:2c:97:3e:93:cc:d5:2f:09:57:42:9f:41: f9:eb:1f:a8:6e:48:2d:f8:e7:4a:31:3f:2f:30:6f:ba:e5:16: ae:a1:aa:3a:01:a4:71:50:af:51:19:f0:98:11:10:1d:ea:42: 8c:0e:da:b4:ac:cc:a2:2a:3a:9a:70:c3:3e:88:84:7f:8b:48: f9:78:7d:01:20:b5:96:64:e3:fa:a7:b0:ae:9c:63:b6:92:5c: 84:9b:35:ce:12:da:48:fe:bd:2b:d2:b1:bb:c5:12:d6:f5:9b: c4:72:b1:47:1b:ac:9c:55:06:78:b4:33:72:f3:5c:c1:d3:f9: 4a:f6:cc:79:d8:3d:01:17:30:1b:19:39:fc:76:c8:d3:18:ff: 76:e6:30:88:f5:84:b3:6d:29:1f:f6:3d:78:30:5d:1f:20:64: c6:71:1f:0c:3f:34:98:4f:f0:de:f9:97:d9:b5:06:b9:93:c3: 79:89:8e:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomisiR1Gm3L6jGSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk MTA4NmRmMTctNTJlMS00NmY0LThjYzYtMGJjYzllMDhmYThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlId/+Pf6xzN2+MRpHUIuhyARrhHLydmk6Oec yOuJ1tJtuS66V6unm4YVWuP2/h2rISPOANPx9Y42YfcNR7yShqVRJj0K8BiYfFNu //Jh200jKoRH2svLI78YQesDV2kEklnoncXJGhEmt0Bh6K/QL+vtn+kUZ8B5WS6E hws5qvV7i0NiKJdT3oocqGiK0ESvEv75PzZzioYr2GGePmXZTfsOOEzugE4PJX/r mk5M8lz3ODxfo72KigvxMhUOlIkN8HN2V/fYcNrv97+tFx62HcgQR1092/4W1lSC Usl6+kcqWMJLu54S2VhvYZCQZ7KO6HZLdTLgunH088dymBKmQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYDylJXWUZHgPJvhgiqkXRhGgNaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzZlMTYwZTMtMzRkMS0z YjFmLWJiNWItYjJmMzRjZWNmMWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEhG/mAN6J/fvQOjJ6OPxM6JPZE9dZv468ktJPKlca9mWYSqlW9JRS/ ivZWJpwuuLog3qBlAgiv+vXTeXLD8NVj32pwFNYUpaFC1Ng0miyXPpPM1S8JV0Kf QfnrH6huSC3450oxPy8wb7rlFq6hqjoBpHFQr1EZ8JgREB3qQowO2rSszKIqOppw wz6IhH+LSPl4fQEgtZZk4/qnsK6cY7aSXISbNc4S2kj+vSvSsbvFEtb1m8RysUcb rJxVBni0M3LzXMHT+Ur2zHnYPQEXMBsZOfx2yNMY/3bmMIj1hLNtKR/2PXgwXR8g ZMZxHww/NJhP8N75l9m1BrmTw3mJjlo= -----END CERTIFICATE-----Generated at Mon Jun 30 00:53:55 2025 by rpki-client