$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fa08006f-9a60-33a6-9dd0-40387d6233af.roa File: fa08006f-9a60-33a6-9dd0-40387d6233af.roa (raw, json) Hash identifier: lJtXL3VkBoFG0+gv3f6WKZQkcB+hnL2DIYJxDLgAPWU= Subject key identifier: 53:F3:1F:25:F3:49:BE:D1:C3:71:17:8C:87:12:99:1A:0F:95:0D:0A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A49707513347B31A4BC95C480 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fa08006f-9a60-33a6-9dd0-40387d6233af.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 8069 IP address blocks: 20.33.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:75:13:34:7b:31:a4:bc:95:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=72a5042e-7e9f-4eec-8fb3-c3f0f7b7ff14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:00:77:17:00:16:2a:79:12:bd:02:d2:71:b6: 64:3d:ba:b4:e3:6f:d3:ba:8f:24:fe:63:74:b7:fc: ce:f7:bc:ea:7a:3f:9d:52:a1:46:03:6b:ce:d8:9f: ad:d7:cb:c4:33:e1:74:18:55:35:56:bb:d5:1c:9c: dd:db:e9:95:4d:de:87:50:96:5a:09:79:5b:a9:3e: 34:cf:9b:ee:12:5c:da:40:fa:b6:48:e2:47:c4:28: 10:61:44:ae:d9:44:a4:30:0e:f3:f6:29:db:de:90: 4f:6d:e8:f1:ae:2f:d8:5c:2f:79:93:85:a7:14:70: af:52:b9:f5:4e:f7:16:05:e6:ab:b0:1b:a7:0d:4f: 6f:fb:b6:b8:c3:ba:c3:48:96:d0:34:a2:1e:16:aa: 0a:9a:23:97:de:c3:c2:37:c6:7c:fe:8f:3c:72:46: 78:16:b7:70:ff:14:82:bc:cc:f9:cc:1f:31:05:3e: 4f:93:ff:d0:e0:2a:63:ad:33:3d:db:af:f0:59:88: 55:45:c9:a8:cc:e0:17:f1:f6:14:5e:52:ab:15:39: 81:c6:7d:a6:2d:71:e3:86:56:8c:3e:26:b3:40:87: 36:da:8a:bf:cd:f4:bf:4d:7b:78:74:c6:80:68:62: 3b:3d:7f:df:93:e3:22:62:a9:1e:a4:9f:bc:99:7e: c8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F3:1F:25:F3:49:BE:D1:C3:71:17:8C:87:12:99:1A:0F:95:0D:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fa08006f-9a60-33a6-9dd0-40387d6233af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:4a:8a:90:55:2e:f6:f9:98:ae:4d:73:e4:f4:89:c2:d4:ac: c4:8c:b6:5a:bb:4c:ad:15:1b:3b:97:bd:e4:57:7a:ef:32:fc: 30:16:db:a7:91:44:bd:6b:e7:76:a5:33:f0:05:80:89:d3:ad: f4:17:0f:25:de:67:1d:0f:8a:aa:8b:b7:8e:f5:ea:75:0a:fd: 1f:64:25:24:04:71:b1:2f:ad:42:a8:5c:73:a0:4c:25:c6:dc: 5b:92:6d:24:eb:61:ce:cc:6c:26:43:15:5f:13:4f:f2:dc:08: 96:30:81:2f:8e:ed:3d:09:49:42:ea:67:ef:cc:d3:79:21:88: f1:77:6c:79:ea:72:5b:20:6f:57:f9:04:37:b9:a2:5f:d1:82: 47:09:93:ef:68:d3:53:cf:dc:a6:4e:6c:ce:8c:5d:1b:f6:dd: 29:f4:ff:03:90:12:ad:9a:c5:a6:ef:f2:76:8d:9a:a6:5a:42: 50:e5:10:83:b3:15:9c:d8:a7:c2:5a:ac:b7:2e:a8:95:6f:85: 1b:19:bf:dd:51:74:d4:25:0c:30:49:bd:21:31:c4:ef:71:5f: 39:69:d2:eb:52:86:92:cf:e4:01:92:cc:24:c6:d7:1c:87:de: eb:21:47:01:1e:de:ca:7d:d1:32:32:f4:56:6f:14:ba:ad:86: 38:4d:fc:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHUTNHsxpLyVxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk NzJhNTA0MmUtN2U5Zi00ZWVjLThmYjMtYzNmMGY3YjdmZjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQB3FwAWKnkSvQLScbZkPbq042/Tuo8k/mN0 t/zO97zqej+dUqFGA2vO2J+t18vEM+F0GFU1VrvVHJzd2+mVTd6HUJZaCXlbqT40 z5vuElzaQPq2SOJHxCgQYUSu2USkMA7z9inb3pBPbejxri/YXC95k4WnFHCvUrn1 TvcWBearsBunDU9v+7a4w7rDSJbQNKIeFqoKmiOX3sPCN8Z8/o88ckZ4Frdw/xSC vMz5zB8xBT5Pk//Q4CpjrTM926/wWYhVRcmozOAX8fYUXlKrFTmBxn2mLXHjhlaM PiazQIc22oq/zfS/TXt4dMaAaGI7PX/fk+MiYqkepJ+8mX7IjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPzHyXzSb7Rw3EXjIcSmRoPlQ0KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZmEwODAwNmYtOWE2MC0z M2E2LTlkZDAtNDAzODdkNjIzM2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1KipBVLvb5mK5Nc+T0icLUrMSMtlq7TK0VGzuXveRXeu8y/DAW26eR RL1r53alM/AFgInTrfQXDyXeZx0PiqqLt4716nUK/R9kJSQEcbEvrUKoXHOgTCXG 3FuSbSTrYc7MbCZDFV8TT/LcCJYwgS+O7T0JSULqZ+/M03khiPF3bHnqclsgb1f5 BDe5ol/RgkcJk+9o01PP3KZObM6MXRv23Sn0/wOQEq2axabv8naNmqZaQlDlEIOz FZzYp8JarLcuqJVvhRsZv91RdNQlDDBJvSExxO9xXzlp0utShpLP5AGSzCTG1xyH 3ushRwEe3sp90TIy9FZvFLqthjhN/G8= -----END CERTIFICATE-----Generated at Mon Jun 30 09:02:34 2025 by rpki-client