$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/32e61f71-42cb-3aa3-8fdc-307cc164b9ec.roa File: 32e61f71-42cb-3aa3-8fdc-307cc164b9ec.roa (raw, json) Hash identifier: /97Q9XKknrMsjLcDdPed6Li1CnMDzgkm7EdVO8QIL00= Subject key identifier: 7E:40:44:8C:35:18:13:BB:0C:B6:93:44:72:D2:11:92:2B:3F:65:D6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849BF3FA72EF8D1A9034BEE1800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/32e61f71-42cb-3aa3-8fdc-307cc164b9ec.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.33.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:a7:2e:f8:d1:a9:03:4b:ee:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=e38e8ac6-768c-4bf6-a86d-8f6628123dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2b:d8:67:bf:bc:14:12:e2:94:fc:f9:dd:da: 1c:d9:70:f0:04:41:81:f3:0e:d5:49:6e:ae:79:e7: 68:d5:dd:1b:ef:db:48:ef:f6:db:76:59:68:9a:07: 67:73:d5:4b:63:c1:1b:2c:c7:2f:42:2b:0a:5e:5b: 04:b3:22:08:e2:0e:9f:e6:f7:9d:05:c8:e0:7f:f9: 08:4d:e2:ce:50:4c:8b:c6:ef:0a:f1:62:15:ee:51: 8c:02:5d:ad:a9:68:68:ff:c5:40:dc:22:c0:6b:72: 88:69:a7:5b:a2:62:6d:a1:d9:51:bd:bc:28:f8:0b: 5a:9f:e6:d3:de:a7:fc:96:2a:04:92:a6:88:41:26: d6:c0:56:34:a3:9e:2b:09:62:0d:31:06:bf:c6:e1: 27:0b:54:8e:8a:6e:88:ce:ca:73:89:43:a6:92:05: e8:8e:26:0c:ec:f8:75:97:12:fa:d6:eb:61:de:d5: 3b:07:b3:42:b4:24:15:45:20:9b:bd:4e:79:6b:fa: e5:2f:a3:11:82:0a:d4:02:de:7c:63:35:36:eb:0b: 12:2f:7e:83:f9:91:cf:98:b3:a6:ad:7a:55:ab:93: af:c0:e8:2d:a2:5d:01:f2:06:68:fc:96:16:b1:a1: fe:3b:79:23:85:0c:06:6a:7d:8c:95:ca:f3:07:2a: 8d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:40:44:8C:35:18:13:BB:0C:B6:93:44:72:D2:11:92:2B:3F:65:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/32e61f71-42cb-3aa3-8fdc-307cc164b9ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:99:52:dd:5b:50:ee:7d:6b:7c:c7:ee:7b:01:29:a2:5c:b4: da:c6:ff:b3:77:22:87:03:ad:42:ce:53:37:f2:a3:0f:0d:4c: 96:7a:bf:07:83:f7:0f:e2:3f:19:a2:ba:f4:e0:84:71:f6:5a: 44:e2:93:28:68:62:51:61:45:8c:0e:ee:00:31:3c:d4:d1:0d: 03:07:51:5d:fd:d2:63:b9:3b:57:1c:eb:e2:ff:d9:f1:45:a1: 88:57:a8:19:b7:97:d8:c5:42:50:31:50:12:56:2b:e0:c5:5a: 81:50:a3:91:9c:da:11:10:cb:23:f6:07:df:56:db:e4:cd:ce: f4:87:35:94:ec:ef:46:18:1b:00:a0:03:62:61:99:d9:2b:90: 37:de:ba:f9:f0:83:65:dd:8e:de:38:13:88:a7:f0:7b:a9:f0: 3f:30:87:17:e6:0a:71:c8:09:99:c4:ec:82:f6:1d:69:39:93: 99:bb:82:b1:b3:df:5f:a1:b6:a1:40:3d:65:22:e7:42:f3:07: b1:bd:13:85:91:85:01:81:ce:91:59:cf:a2:ad:49:c5:66:eb: 6f:bc:a4:b9:69:84:6a:39:5b:7b:99:34:9e:4d:01:8d:26:8e: 70:5c:8e:34:1c:0a:b3:a6:0a:04:a8:f8:71:a2:78:d8:c1:b3: 39:86:a3:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P6cu+NGpA0vuGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZTM4ZThhYzYtNzY4Yy00YmY2LWE4NmQtOGY2NjI4MTIzZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CvYZ7+8FBLilPz53doc2XDwBEGB8w7VSW6u eedo1d0b79tI7/bbdllomgdnc9VLY8EbLMcvQisKXlsEsyII4g6f5vedBcjgf/kI TeLOUEyLxu8K8WIV7lGMAl2tqWho/8VA3CLAa3KIaadbomJtodlRvbwo+Atan+bT 3qf8lioEkqaIQSbWwFY0o54rCWINMQa/xuEnC1SOim6IzspziUOmkgXojiYM7Ph1 lxL61uth3tU7B7NCtCQVRSCbvU55a/rlL6MRggrUAt58YzU26wsSL36D+ZHPmLOm rXpVq5OvwOgtol0B8gZo/JYWsaH+O3kjhQwGan2MlcrzByqNSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5ARIw1GBO7DLaTRHLSEZIrP2XWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzJlNjFmNzEtNDJjYi0z YWEzLThmZGMtMzA3Y2MxNjRiOWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCFmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKZUt1bUO59a3zH7nsBKaJctNrG/7N3IocDrULOUzfyow8NTJZ6vweD 9w/iPxmiuvTghHH2WkTikyhoYlFhRYwO7gAxPNTRDQMHUV390mO5O1cc6+L/2fFF oYhXqBm3l9jFQlAxUBJWK+DFWoFQo5Gc2hEQyyP2B99W2+TNzvSHNZTs70YYGwCg A2JhmdkrkDfeuvnwg2Xdjt44E4in8Hup8D8whxfmCnHICZnE7IL2HWk5k5m7grGz 31+htqFAPWUi50LzB7G9E4WRhQGBzpFZz6KtScVm62+8pLlphGo5W3uZNJ5NAY0m jnBcjjQcCrOmCgSo+HGieNjBszmGo5U= -----END CERTIFICATE-----Generated at Sun Jun 15 15:58:31 2025 by rpki-client