$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/70cbfac7-7845-3c22-8003-b419f184ca4b.roa File: 70cbfac7-7845-3c22-8003-b419f184ca4b.roa (raw, json) Hash identifier: Ufw6Rr4DE7eMhmAdpvxdbolV2DgPgG5WLlQiijrNZ1U= Subject key identifier: 09:B3:E5:C6:E7:31:34:F8:8C:72:AF:5A:A9:D3:6F:B1:2B:46:1E:3A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A23C01EACCC7B3BE96FFFE800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/70cbfac7-7845-3c22-8003-b419f184ca4b.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:1e:ac:cc:7b:3b:e9:6f:ff:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=76d43516-d6e6-456b-add2-a0e56276cf5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:39:bd:05:8a:7a:32:6c:a6:90:84:55:7e:5c: ab:27:dc:5a:de:d5:19:4e:6d:6f:25:36:e0:b3:56: 79:73:6d:90:9a:c4:96:25:41:a1:81:21:81:82:9b: e5:bb:28:16:44:7b:79:51:3c:bf:f3:07:25:69:18: 9c:bb:4a:48:a1:57:e0:72:b1:4a:15:9a:43:cb:d0: bf:f2:02:38:fb:d3:36:7f:4c:d2:28:97:a5:9c:04: 05:0f:9f:1b:88:70:87:6c:11:4b:98:9b:36:4e:1d: 49:80:a4:2b:3a:02:26:42:15:23:90:bb:b2:62:88: 75:21:38:22:f2:4a:b1:39:de:8a:de:b5:82:79:cc: 82:a4:2e:92:83:1a:cb:1e:aa:a3:9c:ff:a3:ff:5f: d9:1b:27:a8:25:9b:07:16:3a:b7:ff:59:b3:c3:dd: f2:24:26:ec:5f:c9:29:ca:bb:ab:73:57:7d:2a:31: 85:6e:c2:de:9a:4c:38:7a:6a:0d:ef:11:39:1a:f9: 4a:70:cd:13:31:86:6f:36:03:f3:4c:59:5e:00:45: 1c:37:80:7f:ac:86:7e:3e:73:b9:41:ac:d1:0f:a4: 53:15:69:c8:73:ee:c0:c9:94:50:25:20:21:c4:01: e5:f9:7d:2d:cc:02:26:cc:41:5d:45:c7:e1:ea:3b: c0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B3:E5:C6:E7:31:34:F8:8C:72:AF:5A:A9:D3:6F:B1:2B:46:1E:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/70cbfac7-7845-3c22-8003-b419f184ca4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:e5:e2:45:a5:99:7a:7f:ca:da:fd:18:75:09:6c:26:d3:4b: 48:6c:ff:81:f1:c8:53:13:c1:8b:46:1f:9f:7a:50:c5:68:cf: 20:56:6d:5e:ac:f2:7c:fa:42:6d:30:eb:c2:ef:7c:4f:30:e4: 9d:f5:5b:18:c6:00:3d:5f:a6:e6:db:72:ae:71:8f:4f:d8:c3: 95:90:b2:90:d4:a6:bd:d9:5d:38:85:73:4f:69:2a:bc:b5:83: 35:a5:23:48:92:04:34:ba:a7:24:ee:0f:54:02:1a:00:67:55: 21:ea:b7:0d:46:ea:bb:f7:00:a5:d8:0e:15:55:69:db:d0:be: 68:7a:d9:da:81:cc:a1:f8:8a:bf:f9:6a:f9:99:54:49:1a:f3: 43:90:e8:5e:eb:63:7c:ee:5f:60:61:f0:d6:56:19:95:c3:7b: 4d:e2:ce:b5:18:0b:eb:5b:b7:cf:48:43:ac:95:f0:1a:4f:a2: 67:81:3a:8d:94:8f:af:3c:e1:eb:b1:bd:92:5d:8a:93:c4:00: 3c:aa:3e:9a:ff:94:ae:8f:2e:36:e9:4a:12:9d:a7:20:27:00: b4:49:db:16:b6:76:3a:86:2a:b6:fe:78:05:3f:93:71:95:ee: cc:22:39:cf:f3:b0:30:4c:66:9a:68:61:58:fc:32:ce:0d:65: a0:38:fc:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwB6szHs76W//6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk NzZkNDM1MTYtZDZlNi00NTZiLWFkZDItYTBlNTYyNzZjZjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzm9BYp6MmymkIRVflyrJ9xa3tUZTm1vJTbg s1Z5c22QmsSWJUGhgSGBgpvluygWRHt5UTy/8wclaRicu0pIoVfgcrFKFZpDy9C/ 8gI4+9M2f0zSKJelnAQFD58biHCHbBFLmJs2Th1JgKQrOgImQhUjkLuyYoh1ITgi 8kqxOd6K3rWCecyCpC6SgxrLHqqjnP+j/1/ZGyeoJZsHFjq3/1mzw93yJCbsX8kp yrurc1d9KjGFbsLemkw4emoN7xE5GvlKcM0TMYZvNgPzTFleAEUcN4B/rIZ+PnO5 QazRD6RTFWnIc+7AyZRQJSAhxAHl+X0tzAImzEFdRcfh6jvArwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmz5cbnMTT4jHKvWqnTb7ErRh46MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzBjYmZhYzctNzg0NS0z YzIyLTgwMDMtYjQxOWYxODRjYTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCExMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbl4kWlmXp/ytr9GHUJbCbTS0hs/4HxyFMTwYtGH596UMVozyBWbV6s 8nz6Qm0w68LvfE8w5J31WxjGAD1fpubbcq5xj0/Yw5WQspDUpr3ZXTiFc09pKry1 gzWlI0iSBDS6pyTuD1QCGgBnVSHqtw1G6rv3AKXYDhVVadvQvmh62dqBzKH4ir/5 avmZVEka80OQ6F7rY3zuX2Bh8NZWGZXDe03izrUYC+tbt89IQ6yV8BpPomeBOo2U j6884euxvZJdipPEADyqPpr/lK6PLjbpShKdpyAnALRJ2xa2djqGKrb+eAU/k3GV 7swiOc/zsDBMZppoYVj8Ms4NZaA4/HA= -----END CERTIFICATE-----Generated at Sun Jun 15 17:48:15 2025 by rpki-client