$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3c589ef7-d75d-3bfa-8141-2f00031c4044.roa File: 3c589ef7-d75d-3bfa-8141-2f00031c4044.roa (raw, json) Hash identifier: Cx2zB4ttU3sLd4LG58kx6/9Z9upZ4OyQvWic8G4YgTc= Subject key identifier: 69:B8:EB:E0:14:46:D9:E5:7B:94:0D:BD:82:17:4E:82:17:18:2A:81 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A14658BC9FE11FE3776B1CC40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3c589ef7-d75d-3bfa-8141-2f00031c4044.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 8069 IP address blocks: 20.33.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:8b:c9:fe:11:fe:37:76:b1:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=85e369ac-fa05-4a92-84d1-1c0528b055d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9e:de:92:fe:90:e4:7c:bc:ab:d8:2d:32:58: 38:50:51:01:f3:c9:cc:38:c1:43:d2:a4:43:77:cd: 5c:94:15:f3:51:bc:08:7c:f0:e7:91:17:a8:1f:f9: 59:67:98:a9:05:ba:a6:f4:32:6e:b1:d4:b6:7a:86: d2:bc:59:9d:97:2c:64:cb:2b:a5:1c:f3:6a:65:98: 17:20:0a:d2:ec:e3:7f:dd:39:e1:92:92:e4:2e:20: d2:59:75:2b:75:dd:0a:21:58:ae:48:46:90:d0:71: a5:ff:ed:51:d3:a5:69:60:33:8b:9a:71:7d:e6:bf: 89:b7:61:d2:75:fc:34:83:ad:75:2b:57:99:5c:4a: 7d:02:20:21:f8:c8:53:79:ef:2e:c4:04:00:e9:49: 93:4b:b2:6c:c5:26:ff:be:86:49:38:7e:0b:a3:9f: 65:de:e4:8f:26:be:bb:53:a6:ad:75:f0:af:fa:77: 8d:e5:0e:4f:8b:ad:2e:6e:be:d9:d8:0b:cb:97:ff: 0b:ae:f8:d5:07:24:50:6a:53:51:76:a7:45:10:61: 17:ed:4c:f6:5f:4e:61:ad:ba:32:3d:80:da:56:b7: 25:57:15:35:ec:a8:16:a9:26:63:62:0a:cb:ca:a4: e7:c3:92:cb:24:4c:24:2a:a1:7b:c8:b8:93:ce:1b: ef:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B8:EB:E0:14:46:D9:E5:7B:94:0D:BD:82:17:4E:82:17:18:2A:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3c589ef7-d75d-3bfa-8141-2f00031c4044.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ed:64:a4:c0:72:85:89:68:6e:a3:9e:f6:6d:9a:42:ce:d8: dc:cc:0f:1a:ef:ff:42:76:e7:5f:11:07:98:30:c5:ec:5e:de: 26:92:48:ea:26:60:d7:09:27:b8:04:2e:ae:1e:41:32:33:9f: 5a:2a:a0:e9:7b:37:25:d7:05:3b:41:07:6c:5c:ed:ba:d5:17: d1:09:b6:16:a7:fc:82:30:19:6e:57:94:d3:a4:3d:d7:b3:f2: d5:b7:37:18:87:78:32:de:bd:9a:33:50:cf:4c:82:fc:1b:13: 80:c9:ad:e8:1a:24:80:0e:11:eb:ae:1c:07:bc:da:dc:cd:32: ef:4e:ae:df:d7:6c:dc:67:0f:21:92:ea:62:75:55:c9:61:0a: 7a:fb:e6:a3:01:93:a2:e6:56:91:8a:cd:11:44:7b:51:73:19: 15:e4:ed:f1:9b:9e:d9:87:f3:ce:19:4e:c9:d9:a6:53:f9:c4: 52:42:d7:29:75:24:e6:a7:06:41:fb:e3:38:a0:2c:39:08:3e: b2:db:d6:27:ba:97:f2:eb:9d:d6:ed:bd:ac:de:86:93:19:86: 93:d2:34:bd:44:95:a2:b7:5d:c7:04:5d:32:86:c6:7c:0d:51: c0:80:d6:dc:c8:ce:f5:21:85:73:99:14:73:00:10:d6:ec:9e: 68:3c:cc:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZYvJ/hH+N3axzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk ODVlMzY5YWMtZmEwNS00YTkyLTg0ZDEtMWMwNTI4YjA1NWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw57ekv6Q5Hy8q9gtMlg4UFEB88nMOMFD0qRD d81clBXzUbwIfPDnkReoH/lZZ5ipBbqm9DJusdS2eobSvFmdlyxkyyulHPNqZZgX IArS7ON/3TnhkpLkLiDSWXUrdd0KIViuSEaQ0HGl/+1R06VpYDOLmnF95r+Jt2HS dfw0g611K1eZXEp9AiAh+MhTee8uxAQA6UmTS7JsxSb/voZJOH4Lo59l3uSPJr67 U6atdfCv+neN5Q5Pi60ubr7Z2AvLl/8LrvjVByRQalNRdqdFEGEX7Uz2X05hrboy PYDaVrclVxU17KgWqSZjYgrLyqTnw5LLJEwkKqF7yLiTzhvvmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGm46+AURtnle5QNvYIXToIXGCqBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2M1ODllZjctZDc1ZC0z YmZhLTgxNDEtMmYwMDAzMWM0MDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbtZKTAcoWJaG6jnvZtmkLO2NzMDxrv/0J2518RB5gwxexe3iaSSOom YNcJJ7gELq4eQTIzn1oqoOl7NyXXBTtBB2xc7brVF9EJthan/IIwGW5XlNOkPdez 8tW3NxiHeDLevZozUM9MgvwbE4DJregaJIAOEeuuHAe82tzNMu9Ort/XbNxnDyGS 6mJ1VclhCnr75qMBk6LmVpGKzRFEe1FzGRXk7fGbntmH884ZTsnZplP5xFJC1yl1 JOanBkH74zigLDkIPrLb1ie6l/LrndbtvazehpMZhpPSNL1ElaK3XccEXTKGxnwN UcCA1tzIzvUhhXOZFHMAENbsnmg8zBc= -----END CERTIFICATE-----Generated at Sun Jun 15 15:57:24 2025 by rpki-client