$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/db7d766b-51b9-32a6-aae1-08e7427132fc.roa File: db7d766b-51b9-32a6-aae1-08e7427132fc.roa (raw, json) Hash identifier: 2//2lJf+ep9l2w8a/Po65me4excA9fzFOcjv0DCjaFI= Subject key identifier: 45:79:E3:18:AD:EC:E3:E6:15:83:67:8B:BE:3C:BA:36:82:58:89:25 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A268AC8DC9BEEEBDDC7003DC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/db7d766b-51b9-32a6-aae1-08e7427132fc.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:c8:dc:9b:ee:eb:dd:c7:00:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=0c12461a-870a-48ac-8616-6caa08883759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fe:aa:75:e0:4d:19:c8:68:ef:af:79:56:6f: 28:b6:76:9d:1a:68:78:21:3d:b2:46:03:f7:a3:df: a0:12:6e:8a:cd:12:39:2f:8a:a7:7e:0a:48:bd:b9: e8:ed:b3:d2:3c:5c:ce:de:94:9d:2c:97:44:ad:d5: df:36:41:bb:b6:97:5c:af:97:f1:41:11:4f:0e:bc: 76:c6:fc:a2:d2:8d:01:e0:b8:7b:2f:1c:29:1a:e6: f4:c2:41:14:eb:2f:96:da:7f:f7:33:a7:e8:5a:7e: 23:ed:f5:31:a6:e4:db:71:b8:44:08:16:4c:0d:1c: 5a:91:47:92:c4:23:a9:85:fa:1d:0d:e5:d1:93:c4: 6e:c4:55:90:eb:35:5a:55:52:e1:f5:3d:b6:c6:8d: bd:3c:2b:52:f9:3b:d8:90:8a:eb:3d:c3:d5:e5:fd: 5d:be:50:89:70:6c:f1:a4:4a:b5:ca:10:c8:c1:1b: 9d:dc:91:1b:38:38:b0:dd:31:3a:f2:7d:ad:d7:ff: 5a:cb:af:06:b0:58:18:62:6b:4b:81:7a:9f:06:7c: 9d:67:99:48:88:c9:fb:53:ce:33:a4:4c:b7:98:be: 7b:b8:4f:5c:33:9f:51:6d:81:52:c0:4f:24:4b:78: db:67:32:b3:d8:21:1f:01:31:c0:2d:a5:47:a8:92: 68:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:79:E3:18:AD:EC:E3:E6:15:83:67:8B:BE:3C:BA:36:82:58:89:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/db7d766b-51b9-32a6-aae1-08e7427132fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:6e:bd:02:02:c1:63:e6:a1:42:cc:70:19:f3:e6:52:7c:54: 42:19:03:a1:fe:4e:4f:90:45:f8:26:7f:45:b5:70:89:13:93: 6c:54:79:6e:cf:56:11:64:16:22:ee:48:29:83:3f:1a:54:07: 8a:fc:a7:fe:00:48:46:b0:92:78:22:0e:b7:e9:24:35:27:07: 6b:55:98:e5:6d:f1:66:ff:fa:11:1c:f9:5d:d0:a6:c2:bc:11: 28:bc:02:95:26:b5:87:e0:2d:af:f6:e0:8b:32:60:3d:81:28: 1f:f8:66:b4:c7:ab:c1:96:3d:b6:cc:a8:ea:a3:1c:fb:13:6e: d4:a4:e2:82:66:e3:b9:cd:ea:77:25:17:a2:0c:cc:e8:49:25: e6:d3:27:36:0d:43:91:67:f1:e8:e5:53:f1:2d:de:cb:bd:c0: 78:20:53:ee:61:7b:da:cd:df:bf:ea:39:4e:9b:97:4d:fc:c2: f0:e2:ed:64:dd:89:b8:7e:12:fd:36:d4:fb:4c:1a:5f:21:ba: 19:c1:5b:3c:5b:89:30:90:c6:d5:7f:a9:b1:5b:a3:d1:e6:3a: 1c:d0:1d:cc:0d:2a:88:53:7b:14:67:c5:a4:4d:4d:fb:14:fc: cf:e0:05:25:9e:44:30:a5:ee:c1:c0:9a:8e:6a:c2:a4:c9:e0: 37:09:73:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomisjcm+7r3ccAPcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk MGMxMjQ2MWEtODcwYS00OGFjLTg2MTYtNmNhYTA4ODgzNzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv6qdeBNGcho7695Vm8otnadGmh4IT2yRgP3 o9+gEm6KzRI5L4qnfgpIvbno7bPSPFzO3pSdLJdErdXfNkG7tpdcr5fxQRFPDrx2 xvyi0o0B4Lh7LxwpGub0wkEU6y+W2n/3M6foWn4j7fUxpuTbcbhECBZMDRxakUeS xCOphfodDeXRk8RuxFWQ6zVaVVLh9T22xo29PCtS+TvYkIrrPcPV5f1dvlCJcGzx pEq1yhDIwRud3JEbODiw3TE68n2t1/9ay68GsFgYYmtLgXqfBnydZ5lIiMn7U84z pEy3mL57uE9cM59RbYFSwE8kS3jbZzKz2CEfATHALaVHqJJoqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEV54xit7OPmFYNni748ujaCWIklMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGI3ZDc2NmItNTFiOS0z MmE2LWFhZTEtMDhlNzQyNzEzMmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxuvQICwWPmoULMcBnz5lJ8VEIZA6H+Tk+QRfgmf0W1cIkTk2xUeW7P VhFkFiLuSCmDPxpUB4r8p/4ASEawkngiDrfpJDUnB2tVmOVt8Wb/+hEc+V3QpsK8 ESi8ApUmtYfgLa/24IsyYD2BKB/4ZrTHq8GWPbbMqOqjHPsTbtSk4oJm47nN6ncl F6IMzOhJJebTJzYNQ5Fn8ejlU/Et3su9wHggU+5he9rN37/qOU6bl038wvDi7WTd ibh+Ev021PtMGl8huhnBWzxbiTCQxtV/qbFbo9HmOhzQHcwNKohTexRnxaRNTfsU /M/gBSWeRDCl7sHAmo5qwqTJ4DcJc98= -----END CERTIFICATE-----Generated at Sun Jun 15 15:38:18 2025 by rpki-client