$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01affdc8-cfde-39b2-92d1-54dc8e367c0e.roa File: 01affdc8-cfde-39b2-92d1-54dc8e367c0e.roa (raw, json) Hash identifier: S9AqrCz94TO955i4D4KlDkgk7eARiw7pDgtAMXw9P8A= Subject key identifier: 3B:22:65:3C:3C:F8:69:B7:E5:8D:20:47:9F:50:30:E1:DC:21:29:EF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849C4D4CF7FA69DADCCDA61DE98 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01affdc8-cfde-39b2-92d1-54dc8e367c0e.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 8069 IP address blocks: 20.33.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:cf:7f:a6:9d:ad:cc:da:61:de:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=1e0a3366-beaf-4ffe-b018-012c04dfc5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:bc:94:7c:86:63:df:6c:c1:7e:03:d3:7b:b2: 53:fb:f6:7d:76:c6:e0:f5:12:7e:02:25:6d:88:dc: ce:b0:a1:95:15:96:c4:28:49:07:f0:b0:c9:8a:b9: 2e:e1:7d:5c:e4:94:49:45:c0:5b:71:1a:2c:42:7d: a0:de:6f:cf:fe:fc:17:2b:61:b8:ff:9d:f7:52:82: e1:25:91:89:a5:ad:25:b5:74:b1:28:fa:d9:fc:07: 6a:c1:f2:5d:a2:a3:7d:fc:23:2a:40:6e:bd:38:f3: 3f:b2:3d:1f:5e:79:04:73:67:29:60:a5:ee:02:9e: be:fc:6b:20:fc:26:f6:35:e9:36:e4:6a:93:72:28: 49:99:c4:9d:7b:28:57:60:28:b3:8b:35:1c:87:19: e6:93:d5:01:3e:90:25:ac:cb:c7:9f:1c:fc:73:33: c5:fc:27:96:d6:1e:9a:5e:1a:22:26:53:07:7e:79: 43:12:e7:16:d3:19:ff:45:5e:b5:f9:e9:6f:cf:d5: 84:8c:2a:33:56:60:ce:45:a5:7d:76:b0:57:94:d5: b0:a3:c8:2d:0e:93:cb:92:44:3b:aa:8d:2b:4c:47: ea:f0:77:e9:95:3b:d4:57:79:75:f2:38:65:d6:70: 40:5d:e6:93:9a:49:8f:46:28:86:fc:bf:f5:05:ca: 99:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:22:65:3C:3C:F8:69:B7:E5:8D:20:47:9F:50:30:E1:DC:21:29:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01affdc8-cfde-39b2-92d1-54dc8e367c0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:d9:b5:94:3b:0a:d3:12:d0:b2:d1:b9:9c:00:85:5a:d0:16: 1c:5b:26:90:99:3b:45:b8:d1:85:f0:73:ca:60:86:f7:a6:17: 66:f1:b3:35:f5:02:7c:0a:e8:42:56:e9:2c:50:99:8a:12:d0: 76:3b:4c:5e:bf:37:f9:95:27:f6:2f:b9:9c:f8:a4:e4:b7:b0: c2:de:14:0a:01:1a:7b:fe:61:41:38:67:ad:47:8a:86:3c:49: 32:80:d9:38:3d:c7:37:25:70:db:3e:bc:7a:2d:cd:7d:be:9c: 1b:19:58:8f:76:d9:5e:e2:17:1b:81:c6:08:01:11:93:1a:5b: 29:ee:b4:22:f7:ca:54:a1:c5:41:5e:f4:72:7b:82:98:12:32: 2f:ac:5c:0e:fd:bf:7b:8d:7f:b7:97:31:0e:e0:29:07:f6:43: 19:08:48:e0:cf:bb:ac:ac:ac:b9:0a:0d:9e:94:88:51:b4:a1: db:53:1f:14:7a:f0:a0:bd:9d:f9:a9:a1:2b:a3:95:22:9d:e5: 5d:2a:fe:02:86:cf:fc:30:f2:52:98:30:03:5c:2a:3c:e6:1d: f8:7e:13:6b:18:a8:b3:c2:a2:66:7e:12:a5:37:6b:18:a7:19: 8b:2c:95:c2:39:af:52:a4:23:1e:05:8e:ae:b1:29:a5:39:5e: da:74:70:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1M9/pp2tzNph3pgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk MWUwYTMzNjYtYmVhZi00ZmZlLWIwMTgtMDEyYzA0ZGZjNWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8byUfIZj32zBfgPTe7JT+/Z9dsbg9RJ+AiVt iNzOsKGVFZbEKEkH8LDJirku4X1c5JRJRcBbcRosQn2g3m/P/vwXK2G4/533UoLh JZGJpa0ltXSxKPrZ/AdqwfJdoqN9/CMqQG69OPM/sj0fXnkEc2cpYKXuAp6+/Gsg /Cb2Nek25GqTcihJmcSdeyhXYCizizUchxnmk9UBPpAlrMvHnxz8czPF/CeW1h6a XhoiJlMHfnlDEucW0xn/RV61+elvz9WEjCozVmDORaV9drBXlNWwo8gtDpPLkkQ7 qo0rTEfq8HfplTvUV3l18jhl1nBAXeaTmkmPRiiG/L/1BcqZ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsiZTw8+Gm35Y0gR59QMOHcISnvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDFhZmZkYzgtY2ZkZS0z OWIyLTkyZDEtNTRkYzhlMzY3YzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzZtZQ7CtMS0LLRuZwAhVrQFhxbJpCZO0W40YXwc8pghvemF2bxszX1 AnwK6EJW6SxQmYoS0HY7TF6/N/mVJ/YvuZz4pOS3sMLeFAoBGnv+YUE4Z61HioY8 STKA2Tg9xzclcNs+vHotzX2+nBsZWI922V7iFxuBxggBEZMaWynutCL3ylShxUFe 9HJ7gpgSMi+sXA79v3uNf7eXMQ7gKQf2QxkISODPu6ysrLkKDZ6UiFG0odtTHxR6 8KC9nfmpoSujlSKd5V0q/gKGz/ww8lKYMANcKjzmHfh+E2sYqLPComZ+EqU3axin GYsslcI5r1KkIx4Fjq6xKaU5Xtp0cA0= -----END CERTIFICATE-----Generated at Sun Jun 15 15:23:51 2025 by rpki-client