$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa File: 6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa (raw, json) Hash identifier: nYhI73sPKwTCUcWvrr9pviqNC6DenK8YeGfp5t1IpP8= Subject key identifier: D8:90:60:D8:74:51:AA:EB:E5:21:55:8C:BB:FC:A0:2B:7A:5A:99:30 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A23C01F33C442CB9565558540 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:1f:33:c4:42:cb:95:65:55:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=8a896e40-c56f-44d7-83f2-57b1c00d4804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ec:b8:d0:45:71:af:e8:3a:1b:e6:b8:c9:ed: a1:0c:29:e4:49:5e:3d:4b:d7:3d:cf:ce:2c:ef:53: e8:93:3e:81:9a:2d:60:be:96:56:41:ec:75:46:e6: e1:6f:15:1d:a4:47:e9:15:0a:7d:93:6e:de:e8:67: 9c:ff:b6:22:5f:8b:2b:b2:fa:bc:a2:2a:6c:ba:1c: 74:38:2c:0a:9a:01:5c:78:10:30:52:5f:ca:7c:e9: cd:bf:a2:35:5c:28:ea:02:a3:c6:7c:5e:f3:cb:4f: 1b:60:c5:74:e3:d4:10:ff:f7:0d:ac:a0:fe:26:6e: ca:60:96:23:5c:50:15:6d:e7:ee:a8:f1:ad:1a:16: 17:cd:70:72:b0:bd:74:c4:be:85:75:1a:a5:d9:06: 4d:97:ed:a0:8e:c8:40:30:40:f6:18:2a:15:24:3d: 14:7e:88:27:d2:60:c3:ca:f3:b5:24:be:3d:c1:13: 31:30:04:7a:f9:ad:99:2b:8c:2e:6f:4e:a4:66:01: 4b:2c:38:ea:eb:c9:95:08:91:d1:c9:b0:2c:0a:11: ac:7e:92:c7:b1:52:bb:e8:28:a1:80:fe:a7:88:5c: c2:8a:c8:8d:61:04:b7:63:fa:21:7d:d1:ef:d9:c5: ce:c1:49:af:9e:f8:43:81:51:8d:85:29:2b:5e:0e: 5f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:90:60:D8:74:51:AA:EB:E5:21:55:8C:BB:FC:A0:2B:7A:5A:99:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:5f:e3:99:06:71:89:de:29:86:f6:cf:27:d1:f5:39:0f:1a: f7:9a:ba:3d:09:89:eb:38:08:e8:4d:f7:dc:5c:10:62:4a:b3: 1d:af:ac:33:94:46:63:f8:25:a1:8d:86:a7:ad:7c:51:d3:06: 95:c4:f9:ce:89:8a:05:9b:e2:57:ab:59:cb:6c:47:a9:30:56: 1d:87:13:a4:44:da:26:e0:85:51:bd:05:99:03:c1:50:3b:44: ba:01:0c:0f:b6:6c:fc:df:41:4a:07:2e:f4:df:8c:da:aa:19: cc:e5:60:c1:82:87:39:95:e4:42:a3:8b:e2:87:a5:1e:6c:ef: 1a:c0:2e:81:9a:dd:d1:58:09:c5:11:43:e0:65:0e:f7:b9:d7: e7:9f:a1:e3:b5:7c:c6:df:1c:81:f2:a0:c2:d4:26:1f:50:69: 46:70:6f:d4:5e:7d:dd:7a:98:2d:a2:01:18:fa:a8:d9:d3:e4: b2:cf:c3:04:95:84:ed:3e:57:4f:27:9f:e0:15:34:84:5d:27: 5c:c6:49:60:ea:86:e9:bd:c1:8a:12:cc:93:df:e1:55:4d:1b: 9a:11:46:6e:f0:fe:e0:a0:9a:d1:0c:2e:5f:7b:c6:07:71:8d: 07:71:a1:84:13:83:07:e1:38:b3:e8:e6:d2:56:d0:b1:72:fa: 70:4d:44:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwB8zxELLlWVVhUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk OGE4OTZlNDAtYzU2Zi00NGQ3LTgzZjItNTdiMWMwMGQ0ODA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+y40EVxr+g6G+a4ye2hDCnkSV49S9c9z84s 71Pokz6Bmi1gvpZWQex1RubhbxUdpEfpFQp9k27e6Gec/7YiX4srsvq8oipsuhx0 OCwKmgFceBAwUl/KfOnNv6I1XCjqAqPGfF7zy08bYMV049QQ//cNrKD+Jm7KYJYj XFAVbefuqPGtGhYXzXBysL10xL6FdRql2QZNl+2gjshAMED2GCoVJD0Ufogn0mDD yvO1JL49wRMxMAR6+a2ZK4wub06kZgFLLDjq68mVCJHRybAsChGsfpLHsVK76Cih gP6niFzCisiNYQS3Y/ohfdHv2cXOwUmvnvhDgVGNhSkrXg5f9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiQYNh0Uarr5SFVjLv8oCt6WpkwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmU1MjZjMDMtNmNhOC0z YWIzLTg0YmEtY2Q0ZTZkNGQzMWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5f45kGcYneKYb2zyfR9TkPGveauj0Jies4COhN99xcEGJKsx2vrDOU RmP4JaGNhqetfFHTBpXE+c6JigWb4lerWctsR6kwVh2HE6RE2ibghVG9BZkDwVA7 RLoBDA+2bPzfQUoHLvTfjNqqGczlYMGChzmV5EKji+KHpR5s7xrALoGa3dFYCcUR Q+BlDve51+efoeO1fMbfHIHyoMLUJh9QaUZwb9Refd16mC2iARj6qNnT5LLPwwSV hO0+V08nn+AVNIRdJ1zGSWDqhum9wYoSzJPf4VVNG5oRRm7w/uCgmtEMLl97xgdx jQdxoYQTgwfhOLPo5tJW0LFy+nBNRHY= -----END CERTIFICATE-----Generated at Sun Jun 15 15:30:41 2025 by rpki-client