$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4765031d-1fb0-368a-b723-e6788ae0b6c0.roa File: 4765031d-1fb0-368a-b723-e6788ae0b6c0.roa (raw, json) Hash identifier: daZ1IiI1kGjtoBwy+zQpGJgfMQOIysl2Q9MK7ZjuN4Y= Subject key identifier: 06:61:75:0A:D3:1D:FE:4A:7A:C8:D3:31:DA:B8:72:A2:CC:77:22:2D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A23C01F5E9F28374E10C09F80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4765031d-1fb0-368a-b723-e6788ae0b6c0.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:1f:5e:9f:28:37:4e:10:c0:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=0e547ab7-09f3-4cb7-81f2-c530809c0e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:02:7d:13:1e:4b:97:e1:25:1c:23:98:aa:3e: 98:bc:fc:7e:80:a6:13:26:bf:82:c2:fe:c2:b2:22: 5a:03:53:92:5b:fa:27:b3:e0:8f:3f:49:44:71:cb: 94:44:94:a5:0d:55:c3:08:00:73:76:f4:74:e6:16: 4d:e7:ff:06:7d:66:2d:61:a9:98:4b:58:52:75:29: 5e:31:e0:83:be:2b:e9:d1:5a:1f:87:f9:39:e9:12: d0:a7:92:12:90:51:9b:3b:2e:be:f8:a7:cf:fd:6d: c5:06:07:07:98:68:50:fc:01:dc:87:ea:4a:ef:79: af:c0:55:c6:b7:0f:9b:86:73:b0:d1:73:92:df:ef: 18:4c:10:b6:3d:9e:0f:60:b6:20:ce:e4:cf:2e:49: c1:49:91:c7:87:eb:c2:35:b9:1f:59:62:57:d2:ee: 31:16:fc:eb:b7:44:58:c9:a8:f7:17:0d:ed:3e:38: a9:7c:af:2d:f8:f7:e6:7d:e1:7b:02:1b:cd:cf:c5: 2f:15:04:eb:98:0a:07:99:03:9a:ff:55:bf:ab:d7: 1e:29:c8:03:fa:6b:c7:bf:b2:58:bc:23:63:3f:bb: eb:db:de:93:db:0e:33:0d:7f:1e:da:f8:10:ab:1e: 04:8a:ad:62:37:af:a3:4c:c3:14:da:9c:36:f2:45: b7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:61:75:0A:D3:1D:FE:4A:7A:C8:D3:31:DA:B8:72:A2:CC:77:22:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4765031d-1fb0-368a-b723-e6788ae0b6c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:cf:ea:fe:2c:e4:b1:0e:6a:4a:e6:9f:b8:45:d9:cc:28:f2: c2:1b:67:18:ea:71:58:d2:6e:a0:7f:b8:38:0b:60:1d:6e:f6: 0b:d4:b3:78:19:4d:07:7e:c6:a4:c5:2b:b1:90:2b:ce:d5:14: 94:56:a6:28:a9:2b:08:5a:50:21:6e:95:e3:e4:46:49:a1:34: bc:8e:d6:49:cf:6e:c1:3a:bc:35:70:f9:3c:1b:5d:c9:f3:ff: 22:0e:77:71:e7:89:ae:3e:91:12:2a:33:1f:a6:c0:4c:46:f3: 1a:cf:90:c7:ca:a9:66:1f:97:8f:10:63:b5:35:79:e0:78:9e: f7:17:e5:cc:2a:4b:45:79:c4:a4:13:63:c4:3d:06:d8:b9:a8: 57:8d:43:06:ae:04:db:67:93:4f:24:7d:4e:16:e2:ce:90:ca: ae:59:1d:d4:b2:93:17:77:44:d5:25:7d:34:22:13:4b:b0:db: 21:bc:a2:a3:87:46:f6:65:ec:4a:62:fc:f3:a5:38:3b:f6:0a: 8c:d5:a7:95:cc:0d:0d:53:c3:9f:fb:7c:6a:dd:4d:4d:46:28: 5c:0f:db:a5:92:0e:da:94:d9:db:d7:88:ee:ac:43:23:c4:60: 87:b5:58:49:a1:ec:fc:cb:be:2c:22:db:38:8b:ee:36:c5:a0: f3:aa:70:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwB9enyg3ThDAn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk MGU1NDdhYjctMDlmMy00Y2I3LTgxZjItYzUzMDgwOWMwZTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QJ9Ex5Ll+ElHCOYqj6YvPx+gKYTJr+Cwv7C siJaA1OSW/ons+CPP0lEccuURJSlDVXDCABzdvR05hZN5/8GfWYtYamYS1hSdSle MeCDvivp0Vofh/k56RLQp5ISkFGbOy6++KfP/W3FBgcHmGhQ/AHch+pK73mvwFXG tw+bhnOw0XOS3+8YTBC2PZ4PYLYgzuTPLknBSZHHh+vCNbkfWWJX0u4xFvzrt0RY yaj3Fw3tPjipfK8t+PfmfeF7AhvNz8UvFQTrmAoHmQOa/1W/q9ceKcgD+mvHv7JY vCNjP7vr296T2w4zDX8e2vgQqx4Eiq1iN6+jTMMU2pw28kW3lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZhdQrTHf5KesjTMdq4cqLMdyItMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDc2NTAzMWQtMWZiMC0z NjhhLWI3MjMtZTY3ODhhZTBiNmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXP6v4s5LEOakrmn7hF2cwo8sIbZxjqcVjSbqB/uDgLYB1u9gvUs3gZ TQd+xqTFK7GQK87VFJRWpiipKwhaUCFulePkRkmhNLyO1knPbsE6vDVw+TwbXcnz /yIOd3Hnia4+kRIqMx+mwExG8xrPkMfKqWYfl48QY7U1eeB4nvcX5cwqS0V5xKQT Y8Q9Bti5qFeNQwauBNtnk08kfU4W4s6Qyq5ZHdSykxd3RNUlfTQiE0uw2yG8oqOH RvZl7Epi/POlODv2CozVp5XMDQ1Tw5/7fGrdTU1GKFwP26WSDtqU2dvXiO6sQyPE YIe1WEmh7PzLviwi2ziL7jbFoPOqcDo= -----END CERTIFICATE-----Generated at Sun Jun 15 15:34:30 2025 by rpki-client