$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d720d3d4-588b-310b-9b5e-0b5376deda30.roa File: d720d3d4-588b-310b-9b5e-0b5376deda30.roa (raw, json) Hash identifier: xmGp1mUXuNxqquRLRRLdGT+EgnOe+HEJ53wsDa1bJv4= Subject key identifier: F2:47:DF:C1:E0:6C:34:88:98:3F:12:EB:7C:73:2F:6E:75:56:17:A6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A4970753E92FEA83F5C8C4880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d720d3d4-588b-310b-9b5e-0b5376deda30.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 8069 IP address blocks: 20.33.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:75:3e:92:fe:a8:3f:5c:8c:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=374434a1-6944-43a0-a220-09d976c6dd42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1e:60:4c:46:e7:92:6e:f7:ee:e1:d2:aa:83: 6d:c4:3d:4d:c6:e3:23:a0:d9:2d:8c:7c:b1:af:3b: de:30:a2:20:aa:cc:17:b6:cc:86:4f:09:fb:5b:c8: 85:9c:34:ee:5d:6b:08:9c:fb:9d:08:32:75:ea:8b: 16:63:81:7e:c5:5b:7b:09:57:4e:b3:5e:14:36:6a: 90:35:c3:1a:d6:a5:5e:dc:53:d9:e1:95:9a:b7:09: 33:e5:55:07:93:02:d5:5c:c9:1e:0d:83:7c:60:33: 8c:39:4d:ab:3b:de:97:37:02:56:91:54:f6:49:b1: dd:5a:1e:30:d9:07:d2:f6:13:77:ef:9a:b1:0e:96: bc:a6:52:50:70:c5:67:a7:db:a1:c3:2b:eb:ae:0f: 01:27:c0:d1:3e:d4:8e:49:c1:a5:5c:c3:4c:8c:f6: 07:f3:bb:ed:e6:cb:4a:43:32:15:67:a9:47:ba:5b: 4f:91:09:6a:bb:18:ce:14:ec:5a:1f:5c:d5:d4:39: 14:76:b3:fb:c8:1c:b2:77:dc:78:6a:f3:c0:91:a4: d0:c7:c3:e9:3e:4c:68:f0:15:d6:63:7e:26:87:9c: fc:f1:0f:03:43:71:4e:4e:96:94:7c:f0:83:44:3e: 3b:7d:72:71:50:1c:5d:74:ec:43:34:fc:72:dc:0b: 5f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:47:DF:C1:E0:6C:34:88:98:3F:12:EB:7C:73:2F:6E:75:56:17:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d720d3d4-588b-310b-9b5e-0b5376deda30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:be:9e:8c:84:6b:26:75:75:0d:cc:ea:43:db:77:24:ad:a6: c8:0c:c4:99:08:ee:35:c5:62:6b:84:91:54:46:17:ad:d1:0b: f4:50:30:2f:ce:8a:5d:a7:37:c1:90:53:67:24:23:f6:17:d7: 69:1a:63:c2:25:cf:38:48:91:44:64:44:30:42:ba:0e:5c:af: 55:8b:f5:68:c5:8a:68:af:92:86:bc:f4:83:50:93:3f:bc:59: 92:a8:1f:91:9d:99:66:48:43:0e:bf:37:ce:2f:4d:91:43:50: 94:4b:a2:55:c0:38:40:f7:37:2b:4f:5e:98:58:94:eb:12:86: c0:95:00:94:f5:79:16:07:a8:8d:14:b6:62:e9:5f:bd:d9:10: 50:44:bc:6d:dd:1f:b3:fc:7c:f8:ba:3b:57:77:2e:c9:a8:62: 49:0a:e7:90:8d:16:17:2f:83:76:26:93:31:d5:c1:71:8c:79: c5:7d:68:97:77:d0:92:50:c5:2c:6c:ca:8b:8e:02:01:42:51: 9e:93:d7:38:9a:fb:36:6d:18:cf:a9:f1:0c:73:0d:d4:71:f2: 70:d5:68:b8:61:05:2b:75:e1:b4:94:6a:aa:70:55:7b:cc:7b: 54:dc:5b:7c:bf:cb:3b:06:15:43:0d:ae:7e:a7:81:68:aa:e1: 29:d8:cd:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHU+kv6oP1yMSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk Mzc0NDM0YTEtNjk0NC00M2EwLWEyMjAtMDlkOTc2YzZkZDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB5gTEbnkm737uHSqoNtxD1NxuMjoNktjHyx rzveMKIgqswXtsyGTwn7W8iFnDTuXWsInPudCDJ16osWY4F+xVt7CVdOs14UNmqQ NcMa1qVe3FPZ4ZWatwkz5VUHkwLVXMkeDYN8YDOMOU2rO96XNwJWkVT2SbHdWh4w 2QfS9hN375qxDpa8plJQcMVnp9uhwyvrrg8BJ8DRPtSOScGlXMNMjPYH87vt5stK QzIVZ6lHultPkQlquxjOFOxaH1zV1DkUdrP7yByyd9x4avPAkaTQx8PpPkxo8BXW Y34mh5z88Q8DQ3FOTpaUfPCDRD47fXJxUBxddOxDNPxy3AtfCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJH38HgbDSImD8S63xzL251VhemMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDcyMGQzZDQtNTg4Yi0z MTBiLTliNWUtMGI1Mzc2ZGVkYTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKG+noyEayZ1dQ3M6kPbdyStpsgMxJkI7jXFYmuEkVRGF63RC/RQMC/O il2nN8GQU2ckI/YX12kaY8IlzzhIkURkRDBCug5cr1WL9WjFimivkoa89INQkz+8 WZKoH5GdmWZIQw6/N84vTZFDUJRLolXAOED3NytPXphYlOsShsCVAJT1eRYHqI0U tmLpX73ZEFBEvG3dH7P8fPi6O1d3LsmoYkkK55CNFhcvg3YmkzHVwXGMecV9aJd3 0JJQxSxsyouOAgFCUZ6T1zia+zZtGM+p8QxzDdRx8nDVaLhhBSt14bSUaqpwVXvM e1TcW3y/yzsGFUMNrn6ngWiq4SnYzRc= -----END CERTIFICATE-----Generated at Mon Jun 30 01:15:29 2025 by rpki-client