$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/da902bdd-b291-3f52-9179-510d31b3bb85.roa File: da902bdd-b291-3f52-9179-510d31b3bb85.roa (raw, json) Hash identifier: SBeHdkBgTIGSr3KENf37hhXngIGrWHN6z+KUpAsxeSs= Subject key identifier: 1D:7A:0D:F4:AF:FD:67:BC:34:6F:2E:4E:40:1C:0D:90:F6:54:37:3C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A5B95B4858442DC4948937F00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/da902bdd-b291-3f52-9179-510d31b3bb85.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:b4:85:84:42:dc:49:48:93:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=f5d86991-3de5-470b-b71c-94eb311895b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dc:68:b2:91:3d:3e:bd:8c:d3:6f:ae:d9:f4: 42:fc:2c:4d:05:48:d4:4b:18:79:1f:18:1d:f3:c2: cb:2c:54:fd:b5:de:c0:51:dd:ad:2a:f3:89:7f:0b: 59:9b:55:6a:3c:06:ab:70:bd:b5:ab:e8:a6:95:20: 2c:44:2c:58:6f:15:34:f8:45:d6:36:db:37:9e:54: e1:47:47:55:08:ed:e5:41:d6:e0:93:64:00:c1:89: 00:0f:61:37:ca:07:9b:24:77:19:08:91:00:33:d3: 13:b8:35:16:b3:09:3a:b6:53:da:eb:dc:18:7b:7b: 70:e3:2c:8c:cd:ab:e5:05:c1:73:25:c6:dc:30:47: e0:e1:bc:d6:a3:a9:0d:2f:17:df:1f:61:84:07:7b: a4:bc:f0:b0:30:4e:9f:0b:38:c0:6d:a4:a4:24:e7: 0a:8c:4b:78:01:96:34:11:dc:46:23:6c:24:94:d8: 67:ac:2b:c9:87:7d:a7:86:86:cf:7f:dd:fa:25:cb: 92:8f:b3:46:27:3d:fe:a4:3f:83:47:d5:09:da:7d: d6:e9:2b:9c:c9:3f:b2:a0:4d:ee:a4:de:13:32:6a: 81:8d:12:7c:9c:ef:03:b6:f6:a3:48:55:3b:89:1e: b7:15:b4:0d:60:4f:52:25:ae:77:b6:07:f8:0c:b8: e8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7A:0D:F4:AF:FD:67:BC:34:6F:2E:4E:40:1C:0D:90:F6:54:37:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/da902bdd-b291-3f52-9179-510d31b3bb85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:62:94:16:1f:7d:b4:b9:3c:87:8b:6c:51:ef:f6:06:05:2f: 79:81:72:5c:2e:32:ec:37:6e:49:54:dc:99:90:c9:10:a4:4b: ad:5b:78:d9:43:eb:1d:8d:7c:96:d7:22:9b:4c:33:57:10:7e: 38:57:08:41:ec:2e:e9:83:4b:e8:33:97:2f:7f:0f:fc:50:0b: 37:08:00:6a:8a:51:ec:7e:6b:62:d9:54:d1:b3:85:20:17:d2: 58:7d:c9:05:31:b9:77:09:32:70:2a:b4:f8:23:68:8a:cd:a2: 47:81:84:00:15:c8:53:b9:02:6b:fd:93:24:95:8f:9a:52:95: 47:42:9c:60:3f:45:a1:bd:c4:40:ed:a2:31:b1:b1:8f:2b:3d: 1f:4f:7b:d6:f4:d8:eb:60:2f:71:2f:c0:55:71:92:e6:24:d7: b6:98:95:06:6c:43:64:97:0c:95:78:85:2a:46:f5:72:dd:e3: 71:27:16:e9:03:85:de:30:6f:fb:d5:38:af:7d:0c:10:a8:a3: 8e:c1:65:06:12:79:b2:0b:ac:53:14:88:1f:27:e3:eb:77:f8: 66:a4:4d:4c:a3:bc:d9:2e:86:c2:fb:dd:3e:f3:ae:d6:1d:24: 6c:f8:98:c0:21:10:94:f8:0d:87:aa:4b:e6:cd:a9:e5:ca:cf: a0:34:2e:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpblbSFhELcSUiTfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk ZjVkODY5OTEtM2RlNS00NzBiLWI3MWMtOTRlYjMxMTg5NWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdxospE9Pr2M02+u2fRC/CxNBUjUSxh5Hxgd 88LLLFT9td7AUd2tKvOJfwtZm1VqPAarcL21q+imlSAsRCxYbxU0+EXWNts3nlTh R0dVCO3lQdbgk2QAwYkAD2E3ygebJHcZCJEAM9MTuDUWswk6tlPa69wYe3tw4yyM zavlBcFzJcbcMEfg4bzWo6kNLxffH2GEB3ukvPCwME6fCzjAbaSkJOcKjEt4AZY0 EdxGI2wklNhnrCvJh32nhobPf936JcuSj7NGJz3+pD+DR9UJ2n3W6SucyT+yoE3u pN4TMmqBjRJ8nO8DtvajSFU7iR63FbQNYE9SJa53tgf4DLjoOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB16DfSv/We8NG8uTkAcDZD2VDc8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGE5MDJiZGQtYjI5MS0z ZjUyLTkxNzktNTEwZDMxYjNiYjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpilBYffbS5PIeLbFHv9gYFL3mBclwuMuw3bklU3JmQyRCkS61beNlD 6x2NfJbXIptMM1cQfjhXCEHsLumDS+gzly9/D/xQCzcIAGqKUex+a2LZVNGzhSAX 0lh9yQUxuXcJMnAqtPgjaIrNokeBhAAVyFO5Amv9kySVj5pSlUdCnGA/RaG9xEDt ojGxsY8rPR9Pe9b02OtgL3EvwFVxkuYk17aYlQZsQ2SXDJV4hSpG9XLd43EnFukD hd4wb/vVOK99DBCoo47BZQYSebILrFMUiB8n4+t3+GakTUyjvNkuhsL73T7zrtYd JGz4mMAhEJT4DYeqS+bNqeXKz6A0LlQ= -----END CERTIFICATE-----Generated at Mon Jun 30 14:40:02 2025 by rpki-client