$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec15a5a9-3318-3dd2-9e36-e6a359acf7ba.roa File: ec15a5a9-3318-3dd2-9e36-e6a359acf7ba.roa (raw, json) Hash identifier: JymekXrMF1R5Zb17TOMtSbtf73xNCWEJFppuefJh+3Q= Subject key identifier: D5:30:30:0E:33:A2:8D:2D:1C:1F:90:4B:70:F4:61:4F:11:25:01:9B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A2C2027947D407273821C3A00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec15a5a9-3318-3dd2-9e36-e6a359acf7ba.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 8069 IP address blocks: 20.33.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:27:94:7d:40:72:73:82:1c:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=8c76aa37-6602-4ba3-bca7-9cdeba118b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:88:e4:f3:b1:9c:9b:5e:4d:a3:4a:d3:bb:79: fe:26:b4:83:17:a5:9f:b5:f9:89:90:df:f5:d4:40: 7b:4e:45:d1:ea:87:8c:32:9d:76:44:ca:45:9d:e9: 09:fb:71:ad:14:97:42:37:34:a6:a7:f2:6d:64:ad: 54:45:0c:2b:e4:a8:2a:a1:26:9e:69:c1:f0:41:2c: 31:81:43:fc:2a:90:5f:07:b5:c0:40:60:fd:55:52: 32:66:ba:35:91:d1:5d:b3:c8:5e:55:e8:c9:94:bd: c2:a7:9a:78:32:51:c5:c9:cd:66:37:d9:05:7e:be: 26:36:6b:ce:9a:2b:69:c5:d6:ae:a9:d3:3d:2f:bd: 80:7e:70:72:ae:a6:7a:ba:67:22:7e:c4:9a:c9:c1: 78:b3:1f:c8:2b:a7:1d:98:08:58:94:42:2b:d3:ed: 7b:3b:72:c9:9d:cb:92:a4:1b:7b:3f:06:bb:a3:cb: bf:96:1a:1e:e5:0b:fd:92:59:98:11:27:d3:b2:89: 04:d9:96:98:b9:bd:81:fc:61:bd:ad:df:4e:17:6c: a2:6d:7e:9f:0d:68:f2:7a:bc:0c:f4:fd:b3:db:cc: 19:c1:4d:e1:a9:2a:c3:9d:95:e3:02:a5:e7:e3:a3: 4a:a1:e6:a9:cc:bb:2a:96:16:c5:a0:58:8f:6f:e2: b2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:30:30:0E:33:A2:8D:2D:1C:1F:90:4B:70:F4:61:4F:11:25:01:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec15a5a9-3318-3dd2-9e36-e6a359acf7ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:96:12:9f:ee:e0:83:42:e9:dc:60:f6:96:8b:32:ca:58:dd: a7:3c:cf:87:41:9b:21:e3:70:e5:a2:17:ac:4a:e4:93:d4:f9: 14:e6:d8:27:0e:d8:6b:ba:8a:10:a5:aa:5f:c5:8d:66:31:c8: cf:88:ee:3d:97:79:77:17:66:9e:34:7f:7e:ee:b1:d2:02:ec: 69:84:e0:c6:38:69:45:b5:62:3c:71:30:4c:52:ea:f0:c5:8b: 23:78:89:87:e3:4a:4c:d4:24:79:e2:15:10:70:e7:b9:63:72: 17:5b:fb:3c:1d:f9:89:fe:59:29:9c:42:87:c1:1d:bf:cd:73: fb:2a:56:e1:6b:e8:fd:5b:72:5b:76:22:bb:33:41:57:d5:84: 14:0b:74:48:4d:e0:66:20:7f:d0:cf:69:0d:48:c7:ba:2a:fe: 61:ce:1b:4b:59:2b:9a:ec:2b:f0:55:55:24:73:29:14:05:03: a4:70:20:04:ba:e8:86:5e:28:81:32:6b:31:20:3f:ec:98:53: 21:be:e8:c3:52:a9:b1:7d:eb:95:53:eb:49:70:da:81:51:da: 9d:31:63:68:4a:91:04:3f:f5:ff:f2:47:9f:7d:3a:2b:86:b3: 2a:7b:15:ef:54:7f:82:7a:1a:77:b3:36:40:f0:f0:e6:c6:2e: f3:ee:07:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosICeUfUByc4IcOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk OGM3NmFhMzctNjYwMi00YmEzLWJjYTctOWNkZWJhMTE4YjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuojk87Gcm15No0rTu3n+JrSDF6WftfmJkN/1 1EB7TkXR6oeMMp12RMpFnekJ+3GtFJdCNzSmp/JtZK1URQwr5KgqoSaeacHwQSwx gUP8KpBfB7XAQGD9VVIyZro1kdFds8heVejJlL3Cp5p4MlHFyc1mN9kFfr4mNmvO mitpxdauqdM9L72AfnByrqZ6umcifsSaycF4sx/IK6cdmAhYlEIr0+17O3LJncuS pBt7Pwa7o8u/lhoe5Qv9klmYESfTsokE2ZaYub2B/GG9rd9OF2yibX6fDWjyerwM 9P2z28wZwU3hqSrDnZXjAqXn46NKoeapzLsqlhbFoFiPb+KyCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUwMA4zoo0tHB+QS3D0YU8RJQGbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWMxNWE1YTktMzMxOC0z ZGQyLTllMzYtZTZhMzU5YWNmN2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCWEp/u4INC6dxg9paLMspY3ac8z4dBmyHjcOWiF6xK5JPU+RTm2CcO 2Gu6ihClql/FjWYxyM+I7j2XeXcXZp40f37usdIC7GmE4MY4aUW1YjxxMExS6vDF iyN4iYfjSkzUJHniFRBw57ljchdb+zwd+Yn+WSmcQofBHb/Nc/sqVuFr6P1bclt2 IrszQVfVhBQLdEhN4GYgf9DPaQ1Ix7oq/mHOG0tZK5rsK/BVVSRzKRQFA6RwIAS6 6IZeKIEyazEgP+yYUyG+6MNSqbF965VT60lw2oFR2p0xY2hKkQQ/9f/yR599OiuG syp7Fe9Uf4J6GnezNkDw8ObGLvPuB7U= -----END CERTIFICATE-----Generated at Sun Jun 15 15:34:27 2025 by rpki-client