$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5372288-b2a4-3d59-81bc-41226acf8120.roa File: b5372288-b2a4-3d59-81bc-41226acf8120.roa (raw, json) Hash identifier: Pnr5n66FMeWSk0AnhP7Q1qgnl+hkUfrPg/vGvvB1VnA= Subject key identifier: 72:F6:F9:E3:E3:E3:CE:3B:79:78:C9:93:CE:36:99:67:67:07:E7:4E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849B9AA0AD99238CFEBF3035AB0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5372288-b2a4-3d59-81bc-41226acf8120.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 8069 IP address blocks: 20.33.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:0a:d9:92:38:cf:eb:f3:03:5a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=9ccb236c-2937-461d-85d7-3b38ca4815f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e5:eb:79:3a:2d:b6:db:63:72:45:b0:83:26: a7:95:73:fb:3b:d3:b7:30:b0:73:a4:09:51:c1:66: c7:7a:fc:17:12:88:bd:fc:01:7e:9f:f2:fe:2a:b8: 99:c8:3c:1b:fd:87:9e:c3:f0:6b:42:80:ab:b5:be: 9e:53:08:93:4d:aa:b7:8e:86:95:6c:14:13:6c:03: 70:56:38:e3:75:90:c7:cf:18:6e:65:b8:c4:a4:36: ac:9b:f1:79:bc:86:27:c2:c4:e3:ef:b0:18:c8:bd: e5:b7:01:df:50:c7:ee:9f:a4:0b:3b:36:c6:97:86: 02:7a:0c:2a:a0:bd:49:ce:4f:75:cd:48:38:f7:a8: 63:0a:51:d1:e8:c2:ae:bb:66:c7:40:b5:bc:37:1d: f1:64:f4:e3:1f:51:27:44:e8:a0:73:bf:f6:58:17: 72:24:31:23:7a:8c:be:89:3f:81:69:f4:2d:3b:de: 1f:d4:60:16:8f:e2:a5:ae:00:ea:a8:6d:d8:cf:8a: 75:b2:0a:00:99:f9:fe:ca:83:c9:63:28:2a:bd:c5: cb:e6:12:c7:d8:4b:f9:75:5d:a1:69:4a:19:d9:15: c1:d8:2c:02:ac:b4:9a:16:d1:95:c8:8a:f6:51:55: 4b:f4:b9:0c:6b:b3:2e:c7:63:6f:fa:bb:c0:2a:d7: ba:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F6:F9:E3:E3:E3:CE:3B:79:78:C9:93:CE:36:99:67:67:07:E7:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5372288-b2a4-3d59-81bc-41226acf8120.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:df:2e:47:52:c7:94:65:7a:a8:4f:0e:11:c4:aa:87:c2:ea: 53:0a:4a:02:52:2a:f4:e7:a7:d3:4b:45:43:51:62:9b:76:e0: 01:23:36:3e:e8:d3:45:93:76:b7:27:71:85:22:67:99:18:1d: a5:44:58:4d:e4:0b:5e:3b:49:06:b8:d2:f6:d5:3e:d9:12:ea: 10:b6:71:c7:c8:72:75:b4:71:e4:13:31:d2:5c:ea:79:4d:4e: a2:98:f5:b7:34:14:95:8d:5a:81:43:4a:e4:0d:c6:35:96:34: 4a:cf:b0:69:66:31:98:e0:5b:04:f1:81:6c:e5:dd:1e:98:9c: 43:41:b3:a1:b0:4a:df:50:4f:9f:26:78:fd:a9:cb:a4:49:95: 93:35:67:7e:c0:85:73:3b:a8:b8:6d:e4:40:b5:3e:1b:3d:87: 11:2a:2b:d4:05:4d:0c:74:35:b3:a4:9c:8d:39:b4:e0:b7:77: db:41:86:9c:50:35:e5:98:3c:79:6e:6b:81:e2:1d:55:f1:5e: f2:97:3b:d3:59:21:e2:cd:b6:81:00:96:30:06:64:9f:4c:2a: 10:3f:bb:b5:8a:3e:ef:1c:fc:b8:1f:f4:c3:ba:7c:09:12:b0: f8:10:4a:3d:ef:c8:7e:5e:1f:fb:c7:e5:73:ce:56:a0:5c:9c: ce:d2:d1:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgrZkjjP6/MDWrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk OWNjYjIzNmMtMjkzNy00NjFkLTg1ZDctM2IzOGNhNDgxNWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+XreTottttjckWwgyanlXP7O9O3MLBzpAlR wWbHevwXEoi9/AF+n/L+KriZyDwb/Yeew/BrQoCrtb6eUwiTTaq3joaVbBQTbANw VjjjdZDHzxhuZbjEpDasm/F5vIYnwsTj77AYyL3ltwHfUMfun6QLOzbGl4YCegwq oL1Jzk91zUg496hjClHR6MKuu2bHQLW8Nx3xZPTjH1EnROigc7/2WBdyJDEjeoy+ iT+BafQtO94f1GAWj+KlrgDqqG3Yz4p1sgoAmfn+yoPJYygqvcXL5hLH2Ev5dV2h aUoZ2RXB2CwCrLSaFtGVyIr2UVVL9LkMa7Mux2Nv+rvAKte6tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHL2+ePj4847eXjJk842mWdnB+dOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjUzNzIyODgtYjJhNC0z ZDU5LTgxYmMtNDEyMjZhY2Y4MTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDfLkdSx5RleqhPDhHEqofC6lMKSgJSKvTnp9NLRUNRYpt24AEjNj7o 00WTdrcncYUiZ5kYHaVEWE3kC147SQa40vbVPtkS6hC2ccfIcnW0ceQTMdJc6nlN TqKY9bc0FJWNWoFDSuQNxjWWNErPsGlmMZjgWwTxgWzl3R6YnENBs6GwSt9QT58m eP2py6RJlZM1Z37AhXM7qLht5EC1Phs9hxEqK9QFTQx0NbOknI05tOC3d9tBhpxQ NeWYPHlua4HiHVXxXvKXO9NZIeLNtoEAljAGZJ9MKhA/u7WKPu8c/Lgf9MO6fAkS sPgQSj3vyH5eH/vH5XPOVqBcnM7S0SI= -----END CERTIFICATE-----Generated at Tue Jul 1 06:03:52 2025 by rpki-client