$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/294e9347-de22-31e7-bfc5-75bd383b4a41.roa File: 294e9347-de22-31e7-bfc5-75bd383b4a41.roa (raw, json) Hash identifier: +i2FZiLsi/nqp0nvSdJAblw02D5ZuG2TpA3G4SnUeEg= Subject key identifier: 44:71:17:CF:8A:99:9C:23:9F:FA:E3:1E:62:E0:D6:FA:43:08:08:6E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A19FABD8EAADF11EAA2C39BC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/294e9347-de22-31e7-bfc5-75bd383b4a41.roa Signing time: Fri 06 Jun 2025 13:01:04 +0000 ROA not before: Fri 06 Jun 2025 13:01:04 +0000 ROA not after: Thu 04 Sep 2025 13:01:04 +0000 asID: 8069 IP address blocks: 20.33.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:19:fa:bd:8e:aa:df:11:ea:a2:c3:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 6 13:01:04 2025 GMT Not After : Sep 4 13:01:04 2025 GMT Subject: CN=960b81fb-ce32-4b30-9f59-4ed6451358c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cd:17:02:f9:8f:47:bc:db:02:ea:c8:23:52: 0c:8c:ed:54:46:1e:ca:44:cb:1c:e9:dd:6b:8e:15: 22:3d:08:41:41:46:92:ed:ca:f2:f8:82:97:8f:d2: 75:ef:e8:5b:57:e1:6f:ab:c3:a5:25:4d:47:02:ab: c8:f6:33:46:25:a5:39:9e:b7:f2:7f:25:8f:a4:5e: 73:3f:06:a4:5a:01:b1:74:14:da:4f:98:bc:9d:53: f1:66:ef:11:ce:f2:4a:36:45:d7:4b:b8:7a:16:b7: 45:6f:18:3f:11:2d:2a:e9:b6:f9:c9:ba:73:10:f0: d4:f0:32:42:31:72:5d:0a:90:e0:5c:0d:4a:b3:65: 62:68:c2:ad:6d:ea:c9:03:d5:57:b3:00:19:e9:ce: c1:9d:90:4c:ac:35:78:80:72:0d:3f:2d:a9:ef:1a: e6:7c:1e:c6:98:6a:1f:9f:0a:23:a5:25:9c:43:07: 1d:2c:b3:25:7d:37:a0:70:ec:29:bb:c1:35:fb:15: 40:9c:ea:99:4e:fb:d4:e7:4d:05:66:8c:15:9a:dd: a3:a0:19:77:2f:26:f5:c2:75:3f:76:d7:47:72:d7: 80:8c:f6:a0:79:74:aa:00:25:21:cf:07:99:c2:a4: 6c:97:43:fa:da:44:f2:b7:34:9e:84:9a:cf:1d:34: 1b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:71:17:CF:8A:99:9C:23:9F:FA:E3:1E:62:E0:D6:FA:43:08:08:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/294e9347-de22-31e7-bfc5-75bd383b4a41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:7a:1e:87:5c:e8:9f:c8:ca:6a:f9:dd:48:29:20:6a:69:49: 88:2a:7c:91:c1:47:e8:d1:02:d3:0f:9b:a9:43:ab:3c:05:d0: 7d:0e:25:94:9f:8d:69:56:5e:37:43:20:c2:a0:8a:bf:78:55: 19:f4:b8:2a:c0:38:df:06:a6:43:3d:bf:d5:89:8d:47:96:b7: e0:a4:4d:7b:6c:7e:c7:2e:25:74:1a:ee:37:db:76:17:08:1d: 16:1b:92:46:f8:bf:d7:c2:9d:b5:10:7b:51:b7:07:d7:6e:cd: e9:72:08:f7:40:10:8a:d0:de:f1:42:89:31:00:3b:53:cd:87: 98:0e:11:a9:60:a3:98:70:56:f4:0e:81:10:02:77:9a:20:b0: ec:ba:e0:b4:69:55:e2:e7:c3:0a:b1:37:05:23:c9:75:12:66: 4e:ff:a2:04:a0:eb:c8:b9:6a:be:95:a0:09:02:14:2c:9d:c3: ad:d8:6f:0b:61:17:64:78:37:ff:34:19:81:bc:b1:76:e5:54: 11:ca:7b:10:ab:8b:aa:89:e0:31:ce:24:61:6e:a3:8d:65:c2: 22:59:e4:30:c5:a8:7f:ff:0c:ef:6e:6a:45:9e:1a:05:2f:13: b6:f4:6c:e0:e9:00:16:a9:09:b0:39:e3:1f:e5:11:6e:3a:c0: 8c:e4:b6:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoZ+r2Oqt8R6qLDm8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNjEzMDEwNFoXDTI1MDkwNDEzMDEwNFowLzEtMCsGA1UEAxMk OTYwYjgxZmItY2UzMi00YjMwLTlmNTktNGVkNjQ1MTM1OGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm80XAvmPR7zbAurII1IMjO1URh7KRMsc6d1r jhUiPQhBQUaS7cry+IKXj9J17+hbV+Fvq8OlJU1HAqvI9jNGJaU5nrfyfyWPpF5z PwakWgGxdBTaT5i8nVPxZu8RzvJKNkXXS7h6FrdFbxg/ES0q6bb5ybpzEPDU8DJC MXJdCpDgXA1Ks2ViaMKtberJA9VXswAZ6c7BnZBMrDV4gHINPy2p7xrmfB7GmGof nwojpSWcQwcdLLMlfTegcOwpu8E1+xVAnOqZTvvU500FZowVmt2joBl3Lyb1wnU/ dtdHcteAjPageXSqACUhzweZwqRsl0P62kTytzSehJrPHTQbcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERxF8+KmZwjn/rjHmLg1vpDCAhuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjk0ZTkzNDctZGUyMi0z MWU3LWJmYzUtNzViZDM4M2I0YTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZ6Hodc6J/Iymr53UgpIGppSYgqfJHBR+jRAtMPm6lDqzwF0H0OJZSf jWlWXjdDIMKgir94VRn0uCrAON8GpkM9v9WJjUeWt+CkTXtsfscuJXQa7jfbdhcI HRYbkkb4v9fCnbUQe1G3B9duzelyCPdAEIrQ3vFCiTEAO1PNh5gOEalgo5hwVvQO gRACd5ogsOy64LRpVeLnwwqxNwUjyXUSZk7/ogSg68i5ar6VoAkCFCydw63Ybwth F2R4N/80GYG8sXblVBHKexCri6qJ4DHOJGFuo41lwiJZ5DDFqH//DO9uakWeGgUv E7b0bODpABapCbA54x/lEW46wIzktuw= -----END CERTIFICATE-----Generated at Mon Jun 16 05:12:42 2025 by rpki-client