$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/871537b1-1a3c-3d03-9ef9-2a8e3f5aa9e9.roa File: 871537b1-1a3c-3d03-9ef9-2a8e3f5aa9e9.roa (raw, json) Hash identifier: uxTKPmMWUpwUz9IL/uSoo7zdaNy3PoyL9nxLw6nKpw4= Subject key identifier: 0B:55:B9:EB:AB:51:6E:70:82:3D:CB:D3:4D:8A:B8:CB:40:06:D5:01 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A49707482FA9368195ACDE800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/871537b1-1a3c-3d03-9ef9-2a8e3f5aa9e9.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 8069 IP address blocks: 20.33.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:74:82:fa:93:68:19:5a:cd:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=4461e0f3-335d-474c-b8af-76f4ee66e010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f0:45:d9:f4:7a:19:5c:ca:6b:e9:dd:28:d0: 0b:10:bf:da:0f:66:b6:b5:34:3f:a1:64:26:7a:b8: 39:bb:aa:07:4b:2e:2d:30:29:1f:18:26:14:bf:99: e6:29:4b:26:11:42:2c:02:1d:0e:1c:20:6d:71:00: ec:11:25:c2:01:fa:79:b6:53:74:cb:49:b9:d4:09: 55:9f:86:aa:c0:b4:f8:60:a1:76:83:d7:b1:6e:cb: 55:2d:29:11:8b:79:a9:aa:c2:ce:3b:fe:c3:86:6e: 2c:2b:d0:9f:fa:bb:1d:6b:95:87:a6:3b:0e:e0:fd: f9:62:13:97:a1:5b:d4:35:3a:bb:3d:91:30:35:a7: b8:8e:ba:65:0b:45:eb:54:8d:3f:20:a7:55:d1:c2: 45:9b:fc:6a:40:19:94:55:8a:59:fb:d7:ad:38:5d: e5:7a:03:c4:92:98:9e:c6:01:c6:0c:9b:02:2f:44: 38:d2:5e:ba:4a:ff:5b:90:35:7f:d3:eb:a0:99:19: c7:56:35:05:30:2a:5a:eb:cc:eb:fe:99:01:d8:99: eb:db:82:28:43:20:dc:f6:6d:7b:f9:a9:63:95:72: 33:11:a5:36:29:21:e6:bc:38:79:a7:e2:89:98:63: b0:96:5d:86:8b:3e:ba:e9:15:57:18:25:65:0f:07: 54:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:55:B9:EB:AB:51:6E:70:82:3D:CB:D3:4D:8A:B8:CB:40:06:D5:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/871537b1-1a3c-3d03-9ef9-2a8e3f5aa9e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:b9:b8:89:f3:6b:ae:e4:7b:0d:dd:4f:6f:ad:b5:ed:7d:b3: a2:97:9c:83:5d:c1:27:0c:fc:c0:92:38:58:b0:7a:86:71:7a: cb:7f:1f:f5:7e:52:4f:02:8f:1c:42:74:5e:9c:c8:f5:4a:54: 02:ad:45:de:ec:29:38:94:b3:c7:97:ec:de:25:0c:4b:e0:93: 1c:56:c3:82:32:f1:c6:02:2b:77:65:84:5e:cc:42:32:4e:44: 81:28:9c:c0:c7:2d:df:22:8a:af:1a:80:dc:5e:af:cb:d1:f9: d1:3b:1d:fb:2b:6f:0c:5f:e0:0a:fd:73:63:c3:7a:00:0d:60: 86:40:77:75:44:8c:4f:fd:01:86:61:34:2a:96:59:d7:c1:0e: c6:94:cb:11:04:69:dc:dc:c9:6f:c2:53:06:4d:aa:f2:ee:d4: ba:b0:27:3e:9c:03:c2:46:59:58:60:ed:e5:28:e1:b0:7b:69: d0:ac:e5:05:fd:e7:6f:bd:2a:5b:5b:4b:e3:a5:41:ca:98:67: 0c:94:6e:d6:8f:ce:86:4c:8d:3c:34:59:a0:54:50:1f:8c:ea: f4:c9:9e:72:e1:66:34:48:13:c0:49:9e:e5:c7:1b:a5:11:80: 50:ab:e9:4e:b4:df:46:ae:1c:f6:ee:1a:27:6d:22:02:42:e3: 1b:68:e1:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHSC+pNoGVrN6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk NDQ2MWUwZjMtMzM1ZC00NzRjLWI4YWYtNzZmNGVlNjZlMDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPBF2fR6GVzKa+ndKNALEL/aD2a2tTQ/oWQm erg5u6oHSy4tMCkfGCYUv5nmKUsmEUIsAh0OHCBtcQDsESXCAfp5tlN0y0m51AlV n4aqwLT4YKF2g9exbstVLSkRi3mpqsLOO/7Dhm4sK9Cf+rsda5WHpjsO4P35YhOX oVvUNTq7PZEwNae4jrplC0XrVI0/IKdV0cJFm/xqQBmUVYpZ+9etOF3legPEkpie xgHGDJsCL0Q40l66Sv9bkDV/0+ugmRnHVjUFMCpa68zr/pkB2Jnr24IoQyDc9m17 +aljlXIzEaU2KSHmvDh5p+KJmGOwll2Giz666RVXGCVlDwdURQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtVueurUW5wgj3L002KuMtABtUBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODcxNTM3YjEtMWEzYy0z ZDAzLTllZjktMmE4ZTNmNWFhOWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ65uInza67kew3dT2+tte19s6KXnINdwScM/MCSOFiweoZxest/H/V+ Uk8CjxxCdF6cyPVKVAKtRd7sKTiUs8eX7N4lDEvgkxxWw4Iy8cYCK3dlhF7MQjJO RIEonMDHLd8iiq8agNxer8vR+dE7Hfsrbwxf4Ar9c2PDegANYIZAd3VEjE/9AYZh NCqWWdfBDsaUyxEEadzcyW/CUwZNqvLu1LqwJz6cA8JGWVhg7eUo4bB7adCs5QX9 52+9KltbS+OlQcqYZwyUbtaPzoZMjTw0WaBUUB+M6vTJnnLhZjRIE8BJnuXHG6UR gFCr6U6030auHPbuGidtIgJC4xto4Zc= -----END CERTIFICATE-----Generated at Mon Jun 30 01:00:52 2025 by rpki-client