$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/65c5f302-93d9-3b12-bfcb-d7313015deb9.roa File: 65c5f302-93d9-3b12-bfcb-d7313015deb9.roa (raw, json) Hash identifier: 96PSvM+k7pEPmIEZSkcgioLtkjCxGIYVdT7cGyYyO1U= Subject key identifier: FD:D4:B1:66:61:81:20:43:DE:5F:19:D5:03:F4:03:FC:15:02:5D:59 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A2C20271CA5DD83A49C690BE0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/65c5f302-93d9-3b12-bfcb-d7313015deb9.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 8069 IP address blocks: 20.33.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:27:1c:a5:dd:83:a4:9c:69:0b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=82797165-2b42-4e1c-be1f-9c2ad4c8e143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b4:74:3a:c3:a1:57:45:78:bf:f4:7f:d7:9a: ad:f8:27:b5:80:3b:f4:81:cb:fe:49:a9:10:f5:f6: ec:2b:54:89:1d:c2:03:95:cb:8d:af:2d:3f:e1:0f: fc:ea:70:95:9f:58:8a:4d:e0:d0:05:81:3e:7d:40: 39:8e:8e:92:76:2c:cc:db:1b:d3:2f:9c:a8:13:49: f0:47:69:4a:58:ab:b7:70:53:4e:03:1f:c4:b9:6e: 47:26:ac:4f:f7:16:75:16:8f:6c:10:9c:2e:f1:8e: aa:c2:08:2e:ce:32:40:44:ce:77:6a:db:49:fb:96: 2f:3c:3a:8d:66:74:6a:2c:22:9b:4e:ce:20:60:17: f4:15:02:b8:4e:9f:3c:8e:89:32:51:6a:99:8c:ca: 10:55:f8:c1:18:96:38:87:e7:3a:7c:7f:da:24:60: 07:c3:02:33:22:0d:0d:4c:d2:5f:04:78:98:78:cb: f3:fc:b5:b4:76:9d:b8:54:0e:d5:b4:f5:58:d9:4b: 67:44:6f:f5:c1:66:60:25:77:6e:a3:3d:f7:df:c0: 1d:3a:47:5a:62:91:70:6c:93:07:b9:8f:a6:79:6e: b7:0c:25:31:63:30:b9:18:7b:fe:24:00:7d:3e:2c: af:57:82:a9:99:29:3c:c0:92:39:51:47:6b:85:ef: 39:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D4:B1:66:61:81:20:43:DE:5F:19:D5:03:F4:03:FC:15:02:5D:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/65c5f302-93d9-3b12-bfcb-d7313015deb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:8f:4b:4f:10:1f:76:f8:60:e9:b8:f8:12:ab:a5:8f:e8:61: 18:c1:d5:9e:07:af:d2:5c:fb:66:fc:71:96:7c:3d:27:fb:3d: 95:c0:b2:81:10:15:e2:fd:0b:8c:cb:51:fd:8e:88:77:3b:ec: a1:d8:a4:86:71:08:d5:8b:17:48:ef:f1:52:29:64:00:cd:ef: 70:3f:54:90:c2:80:5f:06:b8:fb:6b:f2:19:f3:60:1a:18:8e: 97:ff:f2:cb:1d:67:61:69:d5:ed:6b:1b:de:d2:05:e9:22:e3: 1f:03:09:61:9b:e9:e6:6e:53:bd:1f:8d:bb:34:04:6c:68:6c: eb:43:96:50:e7:30:5b:5a:80:52:c6:ed:22:30:5f:59:41:97: 24:a5:96:1b:16:46:1a:f4:b9:7d:45:c2:95:9f:31:f0:37:da: 09:4f:7e:b1:22:d4:0c:a4:d7:b2:bf:74:ba:ca:51:8e:8f:db: 94:59:25:ee:63:30:2d:a5:61:ae:8e:88:8a:41:58:e8:09:97: 31:ac:3d:61:64:9f:79:a6:54:31:2f:b4:c8:44:2f:a3:40:e5: 1b:1c:25:f0:a6:73:6f:2b:4f:7e:77:9a:99:6f:90:91:b7:94: b2:4f:49:bc:3c:f9:76:79:f5:c4:3f:c8:e5:ee:2e:4a:47:d3: 6a:2c:4a:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosICccpd2DpJxpC+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk ODI3OTcxNjUtMmI0Mi00ZTFjLWJlMWYtOWMyYWQ0YzhlMTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbR0OsOhV0V4v/R/15qt+Ce1gDv0gcv+SakQ 9fbsK1SJHcIDlcuNry0/4Q/86nCVn1iKTeDQBYE+fUA5jo6SdizM2xvTL5yoE0nw R2lKWKu3cFNOAx/EuW5HJqxP9xZ1Fo9sEJwu8Y6qwgguzjJARM53attJ+5YvPDqN ZnRqLCKbTs4gYBf0FQK4Tp88jokyUWqZjMoQVfjBGJY4h+c6fH/aJGAHwwIzIg0N TNJfBHiYeMvz/LW0dp24VA7VtPVY2UtnRG/1wWZgJXduoz3338AdOkdaYpFwbJMH uY+meW63DCUxYzC5GHv+JAB9PiyvV4KpmSk8wJI5UUdrhe85WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3UsWZhgSBD3l8Z1QP0A/wVAl1ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjVjNWYzMDItOTNkOS0z YjEyLWJmY2ItZDczMTMwMTVkZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKPS08QH3b4YOm4+BKrpY/oYRjB1Z4Hr9Jc+2b8cZZ8PSf7PZXAsoEQ FeL9C4zLUf2OiHc77KHYpIZxCNWLF0jv8VIpZADN73A/VJDCgF8GuPtr8hnzYBoY jpf/8ssdZ2Fp1e1rG97SBeki4x8DCWGb6eZuU70fjbs0BGxobOtDllDnMFtagFLG 7SIwX1lBlySllhsWRhr0uX1FwpWfMfA32glPfrEi1Ayk17K/dLrKUY6P25RZJe5j MC2lYa6OiIpBWOgJlzGsPWFkn3mmVDEvtMhEL6NA5RscJfCmc28rT353mplvkJG3 lLJPSbw8+XZ59cQ/yOXuLkpH02osSnA= -----END CERTIFICATE-----Generated at Sun Jun 15 17:16:37 2025 by rpki-client