$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/15b8ea23-07fb-3a03-8985-782f3956608b.roa File: 15b8ea23-07fb-3a03-8985-782f3956608b.roa (raw, json) Hash identifier: o2fA76lwFHFhdjtYMK97xCmRKX9w+S0GlLUcGl2ohE4= Subject key identifier: D4:F7:57:C4:18:28:99:65:AD:A4:B9:D6:9F:A1:A3:5A:C5:29:16:72 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A42758A6D2E1EE338EB821300 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/15b8ea23-07fb-3a03-8985-782f3956608b.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 8069 IP address blocks: 20.33.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:8a:6d:2e:1e:e3:38:eb:82:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=95f0b84d-bad9-4214-937e-c0df968da6be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:de:a8:01:bd:92:1f:15:24:05:c7:dc:93:f2: 44:da:63:26:c2:d9:16:b4:1c:79:d1:7f:c4:b7:99: 20:08:d4:ca:91:b0:8a:00:78:1c:ea:ae:95:b4:3b: 59:bf:26:fd:5d:4d:ae:62:9e:e8:28:e7:53:06:1b: 96:85:43:a3:f1:ce:ed:f8:6a:f3:f9:2a:0c:ab:dd: 99:cd:46:a5:0e:51:3a:28:eb:b6:54:28:c5:51:68: 76:5f:43:4e:8d:40:b6:dd:ff:11:19:75:43:a5:2d: d2:41:af:85:33:ea:b2:2c:49:0c:30:25:8f:68:1e: 94:88:74:41:4a:06:41:71:73:f5:82:1a:b9:4d:8a: b4:24:fb:4e:44:11:14:cb:73:4c:d9:d2:07:b5:4e: cf:8e:a4:ca:2c:7f:69:93:fb:00:bc:d4:fb:b2:34: dd:b7:e3:bf:18:50:9e:72:41:a3:34:78:9b:d7:f2: c4:e5:68:27:53:53:78:fa:75:7a:b4:90:70:dc:86: 3b:00:8a:05:5b:87:f3:24:65:0f:86:63:d8:e4:c8: 0d:5f:29:9a:23:b3:54:86:30:94:d3:c9:8f:1e:b6: 85:87:c4:e7:cf:4c:c4:77:4a:0d:0e:32:f8:9f:e2: 32:59:e5:2f:0b:06:48:87:8a:69:e1:0c:67:86:fe: 20:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F7:57:C4:18:28:99:65:AD:A4:B9:D6:9F:A1:A3:5A:C5:29:16:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/15b8ea23-07fb-3a03-8985-782f3956608b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:3b:30:ad:99:e4:90:35:53:3d:01:60:8b:65:df:b8:85:a6: 63:47:5b:05:cc:0f:43:30:72:ed:81:08:6b:02:d4:c7:61:6a: 2b:5c:34:d0:3a:42:6f:62:7c:45:75:06:14:46:d6:62:74:5b: 37:8c:f5:34:62:41:19:b8:a0:83:fa:f5:1a:10:cd:39:cd:7a: 2a:0b:6b:d6:52:6b:f4:fd:31:f5:5a:31:b9:11:6d:a9:f9:ce: e4:c5:78:ad:c6:1d:4e:45:1f:eb:c9:de:f3:be:91:dc:2b:ce: 18:ba:5e:5c:4c:41:cd:41:40:50:a9:c3:0d:a8:7b:2e:91:7b: 02:c3:01:15:b5:ad:70:50:a5:cd:96:ff:4d:88:c5:4e:9a:b9: 8b:64:5d:51:e9:2a:ba:cc:74:ad:f6:c4:46:70:fa:17:96:0d: 87:50:6b:fc:19:e1:ef:1b:65:5f:80:d2:7d:28:72:e0:21:b2: 8b:ee:cd:21:e3:13:98:6d:15:cb:27:43:64:50:ad:6d:e5:9a: 51:bf:cf:d2:ec:63:dd:7e:a1:e2:92:06:65:6a:91:1a:f5:2d: 4e:4b:0b:a8:43:f1:7c:f3:48:1c:d6:2e:db:00:23:6f:96:59: 2b:2b:5e:a4:6f:7d:6b:0f:a7:58:a0:b8:99:37:ff:cc:7d:07: a5:8b:db:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdYptLh7jOOuCEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk OTVmMGI4NGQtYmFkOS00MjE0LTkzN2UtYzBkZjk2OGRhNmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi96oAb2SHxUkBcfck/JE2mMmwtkWtBx50X/E t5kgCNTKkbCKAHgc6q6VtDtZvyb9XU2uYp7oKOdTBhuWhUOj8c7t+Grz+SoMq92Z zUalDlE6KOu2VCjFUWh2X0NOjUC23f8RGXVDpS3SQa+FM+qyLEkMMCWPaB6UiHRB SgZBcXP1ghq5TYq0JPtORBEUy3NM2dIHtU7PjqTKLH9pk/sAvNT7sjTdt+O/GFCe ckGjNHib1/LE5WgnU1N4+nV6tJBw3IY7AIoFW4fzJGUPhmPY5MgNXymaI7NUhjCU 08mPHraFh8Tnz0zEd0oNDjL4n+IyWeUvCwZIh4pp4Qxnhv4gXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNT3V8QYKJllraS51p+ho1rFKRZyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTViOGVhMjMtMDdmYi0z YTAzLTg5ODUtNzgyZjM5NTY2MDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKE7MK2Z5JA1Uz0BYItl37iFpmNHWwXMD0Mwcu2BCGsC1MdhaitcNNA6 Qm9ifEV1BhRG1mJ0WzeM9TRiQRm4oIP69RoQzTnNeioLa9ZSa/T9MfVaMbkRban5 zuTFeK3GHU5FH+vJ3vO+kdwrzhi6XlxMQc1BQFCpww2oey6RewLDARW1rXBQpc2W /02IxU6auYtkXVHpKrrMdK32xEZw+heWDYdQa/wZ4e8bZV+A0n0ocuAhsovuzSHj E5htFcsnQ2RQrW3lmlG/z9LsY91+oeKSBmVqkRr1LU5LC6hD8XzzSBzWLtsAI2+W WSsrXqRvfWsPp1iguJk3/8x9B6WL20Q= -----END CERTIFICATE-----Generated at Mon Jun 30 01:16:37 2025 by rpki-client