$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0967e81b-028b-34cd-bdc0-bbf4748131ac.roa File: 0967e81b-028b-34cd-bdc0-bbf4748131ac.roa (raw, json) Hash identifier: hTtt4MreNPULJuO2hePx3R80JtgvnuA5z2pfuXroeX8= Subject key identifier: E7:36:C3:24:F1:C6:8E:F3:4F:BB:94:DB:86:8A:DA:38:35:4A:F1:7F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A5B95B4BD572873E0C6F49E80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0967e81b-028b-34cd-bdc0-bbf4748131ac.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:b4:bd:57:28:73:e0:c6:f4:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=db6a46e2-cd22-4286-aeae-1ffd12dc599a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b3:8e:11:e8:6c:23:19:6c:e8:a8:15:78:c2: 42:42:5d:84:8e:c4:8e:2e:bd:7e:ad:30:80:e5:4e: 29:33:60:be:86:c9:4c:92:d9:07:92:cb:41:8d:9b: 69:44:60:4d:66:b2:0e:a5:e9:25:5a:e4:fb:57:16: 81:b2:32:9e:44:5a:cf:9f:3e:7f:b2:f9:a9:41:bc: bd:f4:b0:10:e4:de:4b:5e:79:2a:f8:ef:31:5f:11: 7d:12:1f:59:6a:c2:ad:e0:18:73:69:96:68:b7:23: c7:00:85:b3:5e:c4:44:a5:39:7c:a7:97:0b:2b:16: c5:20:3f:d8:f8:55:c1:b5:3e:55:32:ba:85:b3:47: e8:7a:e2:03:90:e3:1f:47:6b:f6:92:1c:be:05:4f: e0:d3:10:f0:ef:bd:c8:0a:fa:64:7b:7e:94:70:dd: d6:e8:85:89:b0:74:81:ed:af:12:a6:46:18:34:3d: ef:66:b7:ed:0d:68:2b:a1:8e:21:01:20:e4:6b:74: ff:ed:06:8b:58:40:21:e5:5e:c3:12:7b:5c:5f:19: da:01:3c:26:50:df:27:2b:69:62:85:95:d0:6e:aa: e7:e8:a0:89:a4:03:34:ba:da:0e:de:f9:e2:da:96: 39:67:77:ce:6b:22:34:50:b8:ea:ae:2d:17:34:aa: bb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:36:C3:24:F1:C6:8E:F3:4F:BB:94:DB:86:8A:DA:38:35:4A:F1:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0967e81b-028b-34cd-bdc0-bbf4748131ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:87:ae:ac:89:de:05:d6:89:ee:52:45:8e:a8:22:e2:57:a7: ee:1e:89:45:b3:03:55:a1:b7:dd:b7:7a:20:fc:76:f1:f4:04: 01:07:c0:d8:e1:3b:2e:9a:79:34:2b:17:b9:84:d5:6a:05:90: 45:4d:6f:3f:30:14:12:14:36:de:33:36:11:a3:b7:55:41:6e: 88:c5:7f:f8:a2:78:b7:f7:90:44:b9:35:78:ef:e8:9f:ed:9c: 19:47:ec:05:01:67:00:b0:55:3e:64:dc:c4:be:ab:cd:09:fc: 9e:a1:c6:1e:2b:ec:ce:18:bf:1f:e1:88:69:de:79:d1:63:3e: 5d:cd:76:3e:4f:03:5d:65:6a:45:4b:2d:33:77:04:d0:b0:6f: ac:52:f6:86:74:c0:ff:0f:87:99:57:41:b0:fd:5c:7c:e6:cc: 3b:1b:2d:90:85:43:88:c3:99:eb:e1:b2:0a:0f:6d:9a:24:7b: 7e:ed:2d:fd:07:9d:9f:e3:79:ec:a3:4c:45:c0:e1:2e:e3:7f: 48:6d:f2:e1:69:b6:04:6b:c0:60:55:b7:e3:ee:9d:2c:03:ed: bc:ac:03:2f:98:40:c4:fd:cc:19:6d:c5:ed:4f:88:b7:13:0a: 5e:9a:7f:89:e1:0c:8a:e8:2d:58:60:1d:12:9c:24:bf:00:41: 1b:c5:27:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpblbS9Vyhz4Mb0noAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk ZGI2YTQ2ZTItY2QyMi00Mjg2LWFlYWUtMWZmZDEyZGM1OTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rOOEehsIxls6KgVeMJCQl2EjsSOLr1+rTCA 5U4pM2C+hslMktkHkstBjZtpRGBNZrIOpeklWuT7VxaBsjKeRFrPnz5/svmpQby9 9LAQ5N5LXnkq+O8xXxF9Eh9ZasKt4BhzaZZotyPHAIWzXsREpTl8p5cLKxbFID/Y +FXBtT5VMrqFs0foeuIDkOMfR2v2khy+BU/g0xDw773ICvpke36UcN3W6IWJsHSB 7a8SpkYYND3vZrftDWgroY4hASDka3T/7QaLWEAh5V7DEntcXxnaATwmUN8nK2li hZXQbqrn6KCJpAM0utoO3vni2pY5Z3fOayI0ULjqri0XNKq7FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOc2wyTxxo7zT7uU24aK2jg1SvF/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDk2N2U4MWItMDI4Yi0z NGNkLWJkYzAtYmJmNDc0ODEzMWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeHrqyJ3gXWie5SRY6oIuJXp+4eiUWzA1Wht923eiD8dvH0BAEHwNjh Oy6aeTQrF7mE1WoFkEVNbz8wFBIUNt4zNhGjt1VBbojFf/iieLf3kES5NXjv6J/t nBlH7AUBZwCwVT5k3MS+q80J/J6hxh4r7M4Yvx/hiGneedFjPl3Ndj5PA11lakVL LTN3BNCwb6xS9oZ0wP8Ph5lXQbD9XHzmzDsbLZCFQ4jDmevhsgoPbZoke37tLf0H nZ/jeeyjTEXA4S7jf0ht8uFptgRrwGBVt+PunSwD7bysAy+YQMT9zBltxe1PiLcT Cl6af4nhDIroLVhgHRKcJL8AQRvFJ04= -----END CERTIFICATE-----Generated at Mon Jun 30 08:29:30 2025 by rpki-client