$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25993c8f-1295-3237-87f5-6f89f9180d01.roa File: 25993c8f-1295-3237-87f5-6f89f9180d01.roa (raw, json) Hash identifier: 5rBpFbkwkyivYYzPQZj8MbqI81RMwxGpLscLmBD3bNo= Subject key identifier: 63:FF:1C:41:CB:62:2D:1A:C4:48:91:FF:8E:4D:C7:47:5C:69:52:0C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A23C01EBEA7C3F81C30070A54 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25993c8f-1295-3237-87f5-6f89f9180d01.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:1e:be:a7:c3:f8:1c:30:07:0a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=218de121-d445-400b-8ca0-b7a029a62d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:66:36:b3:39:16:fe:4a:7f:f2:69:a7:96:48: 0d:77:40:5e:31:a1:6d:a1:18:46:49:f4:80:9d:d0: e5:6b:d8:62:79:ff:9b:32:15:52:51:06:c5:5b:83: 98:e6:38:f3:4c:67:44:4b:30:8d:7a:80:2e:ef:f9: 8d:ea:ba:1c:bc:b2:c0:bd:f5:12:44:5b:a9:7a:12: 30:e2:21:63:43:58:20:b6:d8:76:16:b6:26:b4:c4: f7:36:c1:27:b5:69:95:16:47:f9:2f:0e:60:04:32: 03:cc:1f:35:6d:01:c3:f2:4b:77:08:a9:22:42:41: a3:15:13:9f:1e:b4:4b:39:40:3f:7a:04:ac:d4:08: 38:27:78:f2:0f:e4:af:88:53:f6:9c:61:09:53:49: b9:14:d4:51:df:fa:ff:9d:23:13:51:58:59:e8:47: 24:5f:bd:21:c7:7a:1e:50:83:40:98:b1:34:a7:c6: d6:b7:7b:b6:55:2f:28:19:67:88:87:e4:ce:ba:61: 1e:bf:f8:ef:4a:c9:0f:7e:46:79:77:83:03:79:d2: 61:cd:00:6a:28:16:8d:b1:4b:d8:bd:91:58:29:a8: aa:ee:5e:3a:93:16:ac:47:6b:5c:5c:d2:6f:32:47: d3:44:e9:76:d9:5f:35:7d:a3:e1:42:88:db:f8:e8: 51:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FF:1C:41:CB:62:2D:1A:C4:48:91:FF:8E:4D:C7:47:5C:69:52:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25993c8f-1295-3237-87f5-6f89f9180d01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:c9:7e:e8:20:72:23:b5:b0:52:bb:cb:95:24:c5:d3:49:7e: dd:b4:ac:c8:52:1f:f7:fd:53:62:7d:b1:cd:3c:84:bd:18:ca: de:6a:5e:51:74:08:6a:91:11:3b:e3:14:d4:53:00:68:c9:94: a9:cd:a1:b8:ec:79:b1:cc:bf:bb:2e:74:b7:76:1c:ff:12:eb: 4e:dd:e9:b6:4a:b7:98:78:04:b6:e8:d0:c9:48:26:e8:a5:8b: 54:06:be:c1:2e:a7:fd:22:f5:a0:d6:b6:6c:a4:3f:44:0a:d0: 79:a5:e7:d5:b0:95:e0:89:3e:27:6e:5b:07:9d:10:a8:bb:10: d7:7d:59:96:59:e4:80:48:37:25:11:81:89:6a:8c:0f:ef:1c: eb:ea:f3:b8:55:0c:b1:ee:68:78:f7:80:2c:66:17:ee:51:a0: 2f:93:31:72:ce:eb:6a:c0:9a:4e:60:8d:a2:19:aa:1a:a3:78: 03:73:a1:5c:42:63:a0:1f:f5:25:d5:25:7f:c9:20:98:cb:3c: f6:2b:f3:ab:c9:f9:0e:69:95:e3:d1:dc:b4:30:62:0b:d6:1c: 04:dd:8b:f4:b5:67:09:83:16:2f:64:94:1b:fd:d4:9e:34:50: 2f:2a:b5:86:14:4c:68:c4:ac:68:60:e2:aa:a8:9d:53:fe:4a: bb:7a:d4:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwB6+p8P4HDAHClQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk MjE4ZGUxMjEtZDQ0NS00MDBiLThjYTAtYjdhMDI5YTYyZDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGY2szkW/kp/8mmnlkgNd0BeMaFtoRhGSfSA ndDla9hief+bMhVSUQbFW4OY5jjzTGdESzCNeoAu7/mN6rocvLLAvfUSRFupehIw 4iFjQ1ggtth2FrYmtMT3NsEntWmVFkf5Lw5gBDIDzB81bQHD8kt3CKkiQkGjFROf HrRLOUA/egSs1Ag4J3jyD+SviFP2nGEJU0m5FNRR3/r/nSMTUVhZ6EckX70hx3oe UINAmLE0p8bWt3u2VS8oGWeIh+TOumEev/jvSskPfkZ5d4MDedJhzQBqKBaNsUvY vZFYKaiq7l46kxasR2tcXNJvMkfTROl22V81faPhQojb+OhRFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGP/HEHLYi0axEiR/45Nx0dcaVIMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjU5OTNjOGYtMTI5NS0z MjM3LTg3ZjUtNmY4OWY5MTgwZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHJfuggciO1sFK7y5UkxdNJft20rMhSH/f9U2J9sc08hL0Yyt5qXlF0 CGqRETvjFNRTAGjJlKnNobjsebHMv7sudLd2HP8S607d6bZKt5h4BLbo0MlIJuil i1QGvsEup/0i9aDWtmykP0QK0Hml59WwleCJPiduWwedEKi7ENd9WZZZ5IBINyUR gYlqjA/vHOvq87hVDLHuaHj3gCxmF+5RoC+TMXLO62rAmk5gjaIZqhqjeANzoVxC Y6Af9SXVJX/JIJjLPPYr86vJ+Q5plePR3LQwYgvWHATdi/S1ZwmDFi9klBv91J40 UC8qtYYUTGjErGhg4qqonVP+Srt61Eo= -----END CERTIFICATE-----Generated at Mon Jun 16 12:01:02 2025 by rpki-client