$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/db4e4f6a-d694-32a7-b2e1-f4d4ee97c262.roa File: db4e4f6a-d694-32a7-b2e1-f4d4ee97c262.roa (raw, json) Hash identifier: Tarc0n99U2SwbYHlKjH1AFEMCVdyNg2fp+pp9yzMPi4= Subject key identifier: 62:F4:59:6B:B2:61:5F:7F:DB:BB:44:2F:93:8A:B1:8D:81:4E:CF:FA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A23C01E40E43D93D634FCE080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/db4e4f6a-d694-32a7-b2e1-f4d4ee97c262.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:1e:40:e4:3d:93:d6:34:fc:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=342b57f9-8cd3-4580-ba3f-8d18650ba262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:34:d0:2e:93:bf:2f:d5:29:83:18:7f:40:07: 6c:31:67:67:4c:c5:40:89:49:f2:14:2a:26:36:48: 2d:db:64:4c:03:7b:f9:c8:dd:16:d5:3d:39:28:0e: 56:09:63:b9:ae:28:37:2f:7f:bd:a0:d2:ac:7d:49: bb:e8:cf:16:3a:dd:03:b6:87:81:78:ad:95:1a:4f: 49:90:8c:a1:00:62:ce:7a:db:98:ae:c9:44:b2:80: fc:29:e6:13:37:2b:9b:9d:91:39:f8:d6:0b:af:a7: a7:23:8a:eb:bf:94:e7:a3:32:2e:83:c7:89:ac:14: dc:06:48:94:af:7e:66:a6:0e:f3:c1:cf:fe:06:07: 3a:9e:e6:9f:cc:15:9e:06:c2:50:e4:fa:e8:e9:f7: cc:3e:a8:d5:76:61:b6:4d:e7:18:f2:ca:e9:8a:07: 5e:13:c0:da:e0:7f:c7:2b:ae:85:87:d8:df:4f:da: f8:58:df:50:52:c5:cb:b0:55:cb:7c:d6:1a:6a:3d: 17:6c:9f:95:4e:ed:15:64:51:7c:cf:88:63:b5:84: f7:14:d3:92:b0:bf:08:2c:9d:9c:b2:97:4f:0a:68: 4c:26:00:9b:6f:e9:93:e0:7b:98:8f:6b:06:8a:fa: 9b:52:38:d3:1f:99:3c:f5:02:65:42:fd:14:b9:87: 98:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F4:59:6B:B2:61:5F:7F:DB:BB:44:2F:93:8A:B1:8D:81:4E:CF:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/db4e4f6a-d694-32a7-b2e1-f4d4ee97c262.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ee:8b:e7:f8:ae:d8:3f:d6:94:75:59:78:4e:a9:cf:38:13: b4:e9:eb:52:fa:d9:89:5f:45:db:25:99:05:88:7c:e0:75:62: ec:75:f8:cc:c3:74:29:70:e7:85:55:b6:cd:d7:f7:41:e5:30: db:d3:b2:e7:6a:52:04:2f:b9:d6:c0:44:e2:29:57:5a:3c:d7: 3e:b5:d0:dd:02:47:4e:0c:07:4e:fe:29:de:d0:d7:2d:3a:14: 88:6b:55:4c:c9:7d:e4:c5:11:a3:c3:74:07:fe:b0:44:9d:57: f9:a5:c3:08:c0:51:ec:45:3a:56:7d:28:30:be:2e:1e:da:cf: 09:55:2b:de:1b:c6:07:d9:35:67:35:02:3a:0d:9e:60:32:fb: 74:9d:15:2c:1b:37:05:ba:3e:c6:8c:4c:11:91:68:8e:3f:f7: d6:b4:1a:96:5a:9e:6e:6b:ff:a7:78:b5:b5:eb:87:a9:f0:d6: 4b:48:8e:60:a8:81:5b:db:9c:45:77:8a:1d:eb:dd:bf:6b:57: bb:ed:84:1e:f2:e1:49:ea:81:7e:31:2d:d5:37:a1:e7:1f:31: c6:6b:aa:27:76:cf:4a:06:81:7f:68:f1:99:ee:cb:22:4a:87: 26:b7:6e:6c:ba:c4:58:e4:79:c1:ea:5d:26:42:60:e6:22:2e: 27:d9:13:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwB5A5D2T1jT84IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk MzQyYjU3ZjktOGNkMy00NTgwLWJhM2YtOGQxODY1MGJhMjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDTQLpO/L9Upgxh/QAdsMWdnTMVAiUnyFCom Nkgt22RMA3v5yN0W1T05KA5WCWO5rig3L3+9oNKsfUm76M8WOt0DtoeBeK2VGk9J kIyhAGLOetuYrslEsoD8KeYTNyubnZE5+NYLr6enI4rrv5TnozIug8eJrBTcBkiU r35mpg7zwc/+Bgc6nuafzBWeBsJQ5Pro6ffMPqjVdmG2TecY8srpigdeE8Da4H/H K66Fh9jfT9r4WN9QUsXLsFXLfNYaaj0XbJ+VTu0VZFF8z4hjtYT3FNOSsL8ILJ2c spdPCmhMJgCbb+mT4HuYj2sGivqbUjjTH5k89QJlQv0UuYeYSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGL0WWuyYV9/27tEL5OKsY2BTs/6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGI0ZTRmNmEtZDY5NC0z MmE3LWIyZTEtZjRkNGVlOTdjMjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXui+f4rtg/1pR1WXhOqc84E7Tp61L62YlfRdslmQWIfOB1Yux1+MzD dClw54VVts3X90HlMNvTsudqUgQvudbAROIpV1o81z610N0CR04MB07+Kd7Q1y06 FIhrVUzJfeTFEaPDdAf+sESdV/mlwwjAUexFOlZ9KDC+Lh7azwlVK94bxgfZNWc1 AjoNnmAy+3SdFSwbNwW6PsaMTBGRaI4/99a0GpZanm5r/6d4tbXrh6nw1ktIjmCo gVvbnEV3ih3r3b9rV7vthB7y4UnqgX4xLdU3oecfMcZrqid2z0oGgX9o8ZnuyyJK hya3bmy6xFjkecHqXSZCYOYiLifZEwE= -----END CERTIFICATE-----Generated at Sun Jun 15 15:30:48 2025 by rpki-client