$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d31bb3df-dc29-3abb-89db-3bdc50d24026.roa File: d31bb3df-dc29-3abb-89db-3bdc50d24026.roa (raw, json) Hash identifier: LhINz9OXocadGXw0jFwj/e9o8TtCuWt5EqR+30wYlOc= Subject key identifier: BD:D7:1A:F7:D4:84:AA:EF:F1:FD:0D:D0:67:30:BE:96:BE:25:96:B0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A3B7B050C1141AE0305D5B900 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d31bb3df-dc29-3abb-89db-3bdc50d24026.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 8069 IP address blocks: 20.33.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:05:0c:11:41:ae:03:05:d5:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=8cae3791-f5da-4ab0-a955-6e0055a93625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:41:95:07:ec:c4:01:4d:cf:b7:66:4f:6e:8d: 8e:79:79:68:5f:d1:04:3a:2a:30:e0:ee:b4:d4:3a: 2c:ea:51:ad:1d:95:25:e9:37:16:26:91:c9:82:8f: d9:bb:af:c4:46:86:2b:56:bb:3a:95:75:d5:ae:26: fa:07:df:85:fd:38:92:80:c5:cf:db:90:b6:be:c2: 1c:74:ae:85:17:df:71:21:d1:e1:78:b4:89:ac:10: aa:12:00:09:e8:b7:05:74:8f:a5:b7:36:dc:6a:60: e5:77:10:38:a8:bb:f7:53:5c:e8:e6:3d:b3:a7:4a: c8:59:51:ac:2d:ad:5b:86:5e:a3:f5:3a:a4:8c:67: 74:b4:52:5e:c5:ff:3a:47:b3:6b:a9:42:ea:f6:5c: 39:ad:49:82:12:14:27:57:5d:ee:34:de:09:22:d3: be:0b:cf:b8:c7:1d:fd:fb:3e:71:be:48:10:27:83: b4:3b:b7:f3:60:bd:52:ea:ff:04:27:c3:c0:1f:90: 77:a0:7c:26:2b:37:cb:71:a6:66:83:1c:40:60:18: d5:3c:28:a0:8e:6e:5a:bb:0f:25:b9:4f:4e:90:b2: d8:45:4a:ed:f9:9f:3e:be:d1:c8:99:a9:24:5c:3e: 99:f7:d4:59:8b:b4:5a:b9:7c:9f:c8:62:ca:23:05: aa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D7:1A:F7:D4:84:AA:EF:F1:FD:0D:D0:67:30:BE:96:BE:25:96:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d31bb3df-dc29-3abb-89db-3bdc50d24026.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:ae:63:2f:c0:7a:d6:99:d3:20:c7:af:9e:5f:35:fa:af:83: 0b:16:f3:dc:20:76:85:1b:a2:b4:38:32:92:fe:98:c5:75:34: 11:7e:c3:88:50:3f:d7:27:35:9f:82:29:32:3a:a6:98:de:86: 14:67:c9:cd:14:dd:41:a3:c4:d4:0a:ae:1e:ba:d7:7d:00:0c: c5:60:ce:34:b0:5a:94:dc:ef:65:f5:d7:0a:2a:ef:c4:d5:de: f4:92:5d:80:f6:fd:66:63:2f:e5:73:7f:db:18:a6:db:25:e4: f9:ae:93:7c:65:d8:ea:3b:e0:9c:28:cc:07:80:18:75:3b:94: 0b:44:4c:29:be:77:6b:0b:c7:51:63:8e:0d:b7:4f:29:04:1f: e2:5c:e2:eb:02:83:b3:61:6c:55:36:32:e1:fb:7b:37:d0:15: 5e:87:eb:a8:8d:e0:d1:e1:92:f9:1e:0f:0b:5f:c3:8c:a3:a7: b6:55:1e:96:89:83:9f:ef:67:04:fb:49:75:85:d5:8c:5d:e3: 3d:b3:72:05:b4:34:68:df:e4:b4:3a:75:cc:35:98:e4:e4:a3: c5:52:63:2a:fa:0b:5f:45:b1:26:22:62:79:1d:df:21:55:69: fb:2b:3a:88:b6:06:22:3a:de:d4:54:d8:80:ce:45:e8:90:5b: 8a:87:c2:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ewUMEUGuAwXVuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk OGNhZTM3OTEtZjVkYS00YWIwLWE5NTUtNmUwMDU1YTkzNjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUGVB+zEAU3Pt2ZPbo2OeXloX9EEOiow4O60 1Dos6lGtHZUl6TcWJpHJgo/Zu6/ERoYrVrs6lXXVrib6B9+F/TiSgMXP25C2vsIc dK6FF99xIdHheLSJrBCqEgAJ6LcFdI+ltzbcamDldxA4qLv3U1zo5j2zp0rIWVGs La1bhl6j9TqkjGd0tFJexf86R7NrqULq9lw5rUmCEhQnV13uNN4JItO+C8+4xx39 +z5xvkgQJ4O0O7fzYL1S6v8EJ8PAH5B3oHwmKzfLcaZmgxxAYBjVPCigjm5auw8l uU9OkLLYRUrt+Z8+vtHImakkXD6Z99RZi7RauXyfyGLKIwWqdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3XGvfUhKrv8f0N0Gcwvpa+JZawMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDMxYmIzZGYtZGMyOS0z YWJiLTg5ZGItM2JkYzUwZDI0MDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGauYy/AetaZ0yDHr55fNfqvgwsW89wgdoUborQ4MpL+mMV1NBF+w4hQ P9cnNZ+CKTI6ppjehhRnyc0U3UGjxNQKrh66130ADMVgzjSwWpTc72X11woq78TV 3vSSXYD2/WZjL+Vzf9sYptsl5Pmuk3xl2Oo74JwozAeAGHU7lAtETCm+d2sLx1Fj jg23TykEH+Jc4usCg7NhbFU2MuH7ezfQFV6H66iN4NHhkvkeDwtfw4yjp7ZVHpaJ g5/vZwT7SXWF1Yxd4z2zcgW0NGjf5LQ6dcw1mOTko8VSYyr6C19FsSYiYnkd3yFV afsrOoi2BiI63tRU2IDOReiQW4qHwqU= -----END CERTIFICATE-----Generated at Mon Jun 30 02:28:11 2025 by rpki-client