$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34bf3447-2505-34e1-be37-4e4a4628389b.roa File: 34bf3447-2505-34e1-be37-4e4a4628389b.roa (raw, json) Hash identifier: gAcnGpRkdVGSt/TwLWBaF0gFfYPSvUkLDrRHJiAaeZo= Subject key identifier: 53:5D:2D:0A:DB:CB:1A:44:D2:33:B2:A9:77:2D:59:D3:C2:44:66:83 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AB2212B442587E06A000F1198 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34bf3447-2505-34e1-be37-4e4a4628389b.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 8069 IP address blocks: 20.33.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:2b:44:25:87:e0:6a:00:0f:11:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=491e4efa-b0c1-47dc-8735-5c757d902a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:05:4c:29:3b:cb:60:a4:dd:43:67:e8:d4:b7: fa:5f:b2:06:99:e1:d4:e5:2d:14:73:7c:a6:87:ae: 5f:55:ea:60:6c:28:aa:e5:18:8b:ac:35:cb:6d:73: 7f:64:31:ca:4d:cc:2d:16:01:81:14:2b:ec:1e:b7: 70:91:35:63:92:ec:f0:b6:62:44:82:0f:04:07:2e: e9:97:da:0c:09:02:fb:06:4c:a3:94:6c:5c:19:d5: e1:ac:58:13:2c:b1:2e:db:87:bf:41:ff:20:9e:c9: 63:05:de:2a:7f:39:96:70:d5:69:87:94:bb:24:5d: d6:eb:89:2b:e3:26:b2:0f:08:7e:ae:6c:d4:ed:08: cb:4f:10:0d:dc:df:26:d5:3f:3c:49:06:31:d0:83: 88:0b:81:18:c3:7f:3e:80:9f:5e:b9:ec:e2:c7:19: c2:97:83:00:98:ce:68:a4:55:7a:de:f1:51:d5:15: 4d:2c:8f:60:ef:2d:a6:5a:05:64:05:f6:2a:3f:c6: 0b:7b:04:05:cc:76:37:69:fa:a7:0c:f0:d1:d3:e0: 0b:c2:df:60:a6:4b:4e:c4:37:5a:94:fc:75:14:a1: 25:b7:90:27:2e:77:00:96:17:2c:40:5a:96:11:53: 4e:38:84:25:49:bf:c4:5a:92:57:0e:74:00:9c:ec: 29:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5D:2D:0A:DB:CB:1A:44:D2:33:B2:A9:77:2D:59:D3:C2:44:66:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34bf3447-2505-34e1-be37-4e4a4628389b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:da:5a:e4:fb:a6:18:6c:01:f7:3f:9e:dd:22:b9:7b:ff:61: d6:cd:9e:27:93:85:f4:a5:45:51:76:10:47:fc:e5:79:12:78: 83:5f:05:14:d9:41:f1:c4:62:9a:e0:48:74:9e:ca:c5:f6:da: 69:aa:51:f2:5c:b0:d5:b9:4c:36:60:dc:51:f2:a8:60:9f:c0: d9:74:0c:10:67:5e:49:14:35:ab:50:c7:67:83:90:d2:22:0a: f9:d8:71:ae:3c:7f:f1:cf:98:39:9e:95:76:3e:0c:a9:b7:6b: b5:c1:ef:3b:36:74:41:5a:86:e8:df:40:97:6e:d2:6b:cd:0e: cf:b6:11:8a:87:fb:cb:e0:34:93:c1:a6:61:c6:d9:86:0b:ba: 3f:aa:c5:2b:39:0c:98:f9:43:8c:49:39:44:23:29:5c:b4:2d: 2c:87:e9:86:e2:ce:b8:d4:4e:4b:09:26:b4:98:06:8a:1a:76: 9b:c3:2e:cc:64:04:4f:ab:ec:85:0b:22:16:b1:1c:3a:2e:c1: e8:97:64:5a:bf:b5:c3:5e:63:4c:75:ec:9f:07:ac:f0:0c:15: 27:ef:b3:4c:18:09:53:50:c0:8d:b2:1a:72:a4:a1:e0:94:63: fc:3c:18:45:29:1e:82:d6:47:14:ad:f6:aa:1b:cb:b0:34:74: 59:8b:95:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIStEJYfgagAPEZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk NDkxZTRlZmEtYjBjMS00N2RjLTg3MzUtNWM3NTdkOTAyYTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gVMKTvLYKTdQ2fo1Lf6X7IGmeHU5S0Uc3ym h65fVepgbCiq5RiLrDXLbXN/ZDHKTcwtFgGBFCvsHrdwkTVjkuzwtmJEgg8EBy7p l9oMCQL7BkyjlGxcGdXhrFgTLLEu24e/Qf8gnsljBd4qfzmWcNVph5S7JF3W64kr 4yayDwh+rmzU7QjLTxAN3N8m1T88SQYx0IOIC4EYw38+gJ9euezixxnCl4MAmM5o pFV63vFR1RVNLI9g7y2mWgVkBfYqP8YLewQFzHY3afqnDPDR0+ALwt9gpktOxDda lPx1FKElt5AnLncAlhcsQFqWEVNOOIQlSb/EWpJXDnQAnOwpZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNdLQrbyxpE0jOyqXctWdPCRGaDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzRiZjM0NDctMjUwNS0z NGUxLWJlMzctNGU0YTQ2MjgzODliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCHkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbaWuT7phhsAfc/nt0iuXv/YdbNnieThfSlRVF2EEf85XkSeINfBRTZ QfHEYprgSHSeysX22mmqUfJcsNW5TDZg3FHyqGCfwNl0DBBnXkkUNatQx2eDkNIi CvnYca48f/HPmDmelXY+DKm3a7XB7zs2dEFahujfQJdu0mvNDs+2EYqH+8vgNJPB pmHG2YYLuj+qxSs5DJj5Q4xJOUQjKVy0LSyH6YbizrjUTksJJrSYBooadpvDLsxk BE+r7IULIhaxHDouweiXZFq/tcNeY0x17J8HrPAMFSfvs0wYCVNQwI2yGnKkoeCU Y/w8GEUpHoLWRxSt9qoby7A0dFmLlVI= -----END CERTIFICATE-----Generated at Wed Aug 6 07:48:57 2025 by rpki-client