$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/df8b7abc-0a4f-3be9-b3e3-c5086883b738.roa File: df8b7abc-0a4f-3be9-b3e3-c5086883b738.roa (raw, json) Hash identifier: 25PNuKDaJz4F7utb+lYj/tI0EwLV+bbgbA+j8gD8dHA= Subject key identifier: 61:BA:67:88:C5:1D:11:95:2D:07:F4:DD:26:63:C9:5F:8C:D7:E2:3F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A497074E492DBE93817788200 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/df8b7abc-0a4f-3be9-b3e3-c5086883b738.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 8069 IP address blocks: 20.33.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:74:e4:92:db:e9:38:17:78:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=cbccb70d-e42d-41b0-b300-ca95ba1e76ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:eb:8e:8b:77:2f:5f:cc:5a:5d:e7:c1:b0:e6: fd:6b:f6:1d:3a:b6:4e:4d:5c:ef:86:61:2f:2a:fc: 65:7f:a3:9f:ec:b0:9d:31:c2:62:c0:b7:21:5a:3d: 02:0f:1e:d6:9e:54:98:4a:70:38:78:04:28:59:f2: 76:f9:c6:9f:61:d4:bf:77:80:33:3f:24:d6:5e:48: 4b:cc:fd:f5:8d:1d:20:dc:24:a1:69:99:d6:cf:76: 92:a9:87:d9:15:ff:78:c7:95:ab:4a:5e:e3:3e:27: 7f:72:47:f0:f3:52:3b:f4:a4:2e:cc:f6:c7:13:0c: 8f:64:dd:c9:f2:c0:c3:4e:2d:45:db:ea:6e:77:40: 9b:6b:4a:e0:92:fb:e3:76:51:bf:01:1f:b0:28:8a: c2:e4:17:88:19:2d:4a:87:04:2e:d3:d6:3f:ee:24: 0e:d9:6a:8c:c0:35:aa:3c:e0:b3:9f:aa:64:68:4f: 7e:ac:1c:3f:fc:ec:db:cc:24:f1:c8:1e:32:21:2b: 7e:9b:12:ed:ce:d6:46:32:1e:8d:47:57:b6:8a:1a: 3c:8e:80:2e:f1:03:c9:25:4e:96:66:78:6a:b5:97: 5e:7d:21:a6:51:5e:da:d0:45:c1:21:7f:1d:95:3a: a4:2c:8a:a0:8c:88:96:fd:02:eb:e3:95:36:86:d2: d1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:BA:67:88:C5:1D:11:95:2D:07:F4:DD:26:63:C9:5F:8C:D7:E2:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/df8b7abc-0a4f-3be9-b3e3-c5086883b738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:42:88:da:66:9f:f6:f2:76:82:d8:70:d2:cd:e0:f4:91:43: 94:4e:89:66:df:e2:cc:9b:28:2d:4a:c6:f4:38:63:38:b3:cd: a9:f3:78:98:97:83:28:4a:6e:d9:43:2d:a5:06:fd:1e:85:10: c3:44:a8:48:c0:ea:01:ea:e4:3c:6c:2d:95:01:76:de:9c:6a: 7b:90:b0:0b:50:32:e8:3c:84:a9:88:ca:76:d8:6d:43:3b:83: 67:c2:ba:eb:71:b1:76:b7:b0:27:f7:4b:ec:de:10:f9:1f:1a: 51:e5:39:db:f8:12:31:dc:24:5f:37:b4:b9:a0:3e:bd:07:24: f3:ff:25:b5:12:cb:0c:2d:38:11:e2:ec:d5:42:38:ff:6d:46: 55:f7:9b:a9:6d:3d:2c:7a:49:5e:17:08:48:f0:5e:20:58:23: d7:3f:92:66:10:f0:41:bf:3d:c5:4e:ce:a2:c8:10:aa:a1:30: 41:40:74:5a:82:de:5a:ba:c4:5d:66:b0:c4:c1:de:c8:00:cc: bf:13:06:fb:e4:a9:e6:6a:44:8a:93:9f:91:90:2b:72:1c:6a: aa:87:cb:0a:55:45:64:e3:51:78:49:a2:34:dd:d1:3d:a9:ba: 5f:e7:c3:dc:2e:73:7e:11:cf:e9:75:11:b2:6a:01:d4:db:e8: f5:39:0e:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHTkktvpOBd4ggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk Y2JjY2I3MGQtZTQyZC00MWIwLWIzMDAtY2E5NWJhMWU3NmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuuOi3cvX8xaXefBsOb9a/YdOrZOTVzvhmEv Kvxlf6Of7LCdMcJiwLchWj0CDx7WnlSYSnA4eAQoWfJ2+cafYdS/d4AzPyTWXkhL zP31jR0g3CShaZnWz3aSqYfZFf94x5WrSl7jPid/ckfw81I79KQuzPbHEwyPZN3J 8sDDTi1F2+pud0Cba0rgkvvjdlG/AR+wKIrC5BeIGS1KhwQu09Y/7iQO2WqMwDWq POCzn6pkaE9+rBw//OzbzCTxyB4yISt+mxLtztZGMh6NR1e2iho8joAu8QPJJU6W ZnhqtZdefSGmUV7a0EXBIX8dlTqkLIqgjIiW/QLr45U2htLR0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGG6Z4jFHRGVLQf03SZjyV+M1+I/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGY4YjdhYmMtMGE0Zi0z YmU5LWIzZTMtYzUwODY4ODNiNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhCiNpmn/bydoLYcNLN4PSRQ5ROiWbf4sybKC1KxvQ4YzizzanzeJiX gyhKbtlDLaUG/R6FEMNEqEjA6gHq5DxsLZUBdt6canuQsAtQMug8hKmIynbYbUM7 g2fCuutxsXa3sCf3S+zeEPkfGlHlOdv4EjHcJF83tLmgPr0HJPP/JbUSywwtOBHi 7NVCOP9tRlX3m6ltPSx6SV4XCEjwXiBYI9c/kmYQ8EG/PcVOzqLIEKqhMEFAdFqC 3lq6xF1msMTB3sgAzL8TBvvkqeZqRIqTn5GQK3IcaqqHywpVRWTjUXhJojTd0T2p ul/nw9wuc34Rz+l1EbJqAdTb6PU5Dps= -----END CERTIFICATE-----Generated at Mon Jun 30 01:10:49 2025 by rpki-client