$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34bf3447-2505-34e1-be37-4e4a4628389b.roa File: 34bf3447-2505-34e1-be37-4e4a4628389b.roa (raw, json) Hash identifier: 1ZXm357LIOSK9lkkyvYZpv8hRuiFCdto2Af94qvJZMU= Subject key identifier: 4C:9E:74:11:0A:01:3B:2C:E9:C3:6C:8A:78:15:ED:0F:EA:88:68:03 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849D16550414A04B12CC12A9C80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34bf3447-2505-34e1-be37-4e4a4628389b.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 8069 IP address blocks: 20.33.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:50:41:4a:04:b1:2c:c1:2a:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=058850ea-2680-42b9-9468-ebfd60aa1c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:80:ff:e7:6c:31:d5:1a:bb:a5:de:52:9e:be: 90:cf:e7:4e:7d:37:4b:e1:87:8d:56:74:b2:fa:83: 30:b6:50:9d:5f:a1:e2:3f:2e:53:0e:43:a7:c6:c1: 02:7b:26:c0:79:0a:49:3c:0b:15:6c:bb:52:5b:7f: 6e:ec:8d:16:2c:c9:30:8c:45:d7:ae:cb:c3:98:92: 54:7f:b7:c9:2a:4b:d8:4c:61:5b:01:64:e8:78:14: 56:cb:2b:53:f3:d3:46:63:21:51:86:f8:ac:5d:ca: c6:8e:83:8c:75:48:25:80:67:76:98:d3:8e:3b:12: 6d:74:b1:77:ad:af:75:f0:61:f3:2f:1f:2a:26:49: c4:03:dc:e6:f1:73:e2:27:94:90:37:59:e2:d1:64: ac:f3:19:f3:01:bc:d8:68:9e:15:a9:f0:c1:78:97: c9:59:95:63:7e:15:07:c6:6e:7d:2b:c9:ae:f1:43: 46:69:63:22:90:f9:8d:8b:5e:c0:da:1a:dd:ed:14: 5b:45:7e:3e:89:b7:f2:92:f1:10:48:0d:be:33:c1: b7:55:d9:d6:d4:92:e1:fe:eb:ae:18:d0:1e:9d:40: 30:af:5e:d8:6c:41:32:a0:cb:93:43:ee:78:48:ea: b5:22:96:99:35:e3:73:2b:06:0b:1a:da:1f:45:e1: 32:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9E:74:11:0A:01:3B:2C:E9:C3:6C:8A:78:15:ED:0F:EA:88:68:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34bf3447-2505-34e1-be37-4e4a4628389b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:b9:10:b6:d1:87:b9:f0:e7:79:b8:dd:62:8b:91:b0:f9:16: 1a:23:15:69:30:0d:50:6f:b2:79:22:78:84:6d:34:d0:9a:bc: 8e:ab:c1:75:30:69:41:2c:29:a1:ea:38:14:26:bf:18:48:02: c4:8c:bf:a1:57:96:e0:6b:53:bc:8e:74:6f:7d:d9:f4:23:0d: ea:22:00:8e:db:f5:38:71:87:ad:7b:cf:7b:20:45:04:7a:49: ed:3e:0e:38:a5:33:23:dc:14:93:d9:a3:c0:a2:89:fd:e1:c4: 2a:c5:cb:90:fa:f5:ac:3c:a6:bd:43:3e:d6:7c:78:9b:74:3b: 06:8a:1d:24:7f:c0:d1:f5:f8:6c:fc:e9:48:64:6b:a3:3b:23: 02:98:08:a3:e9:8a:a4:7b:1d:72:a4:58:43:00:97:0b:9f:57: d5:b5:4f:12:76:38:cc:e6:a9:31:16:e2:07:34:0f:e2:bf:0b: 96:27:98:13:d5:4b:78:45:52:48:7d:d3:7c:84:df:79:2f:8e: 7a:74:76:7d:77:c9:7a:a7:5c:e2:7b:d9:9e:73:49:94:30:1e: 00:3b:bb:1e:b6:d0:9c:bf:0f:c9:7a:cb:3e:f6:1e:0d:d0:0d: e4:fa:76:49:fe:0e:74:8d:7b:4b:e9:21:84:cb:95:fe:cb:d9: a8:20:33:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZVBBSgSxLMEqnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MDU4ODUwZWEtMjY4MC00MmI5LTk0NjgtZWJmZDYwYWExYzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4D/52wx1Rq7pd5Snr6Qz+dOfTdL4YeNVnSy +oMwtlCdX6HiPy5TDkOnxsECeybAeQpJPAsVbLtSW39u7I0WLMkwjEXXrsvDmJJU f7fJKkvYTGFbAWToeBRWyytT89NGYyFRhvisXcrGjoOMdUglgGd2mNOOOxJtdLF3 ra918GHzLx8qJknEA9zm8XPiJ5SQN1ni0WSs8xnzAbzYaJ4VqfDBeJfJWZVjfhUH xm59K8mu8UNGaWMikPmNi17A2hrd7RRbRX4+ibfykvEQSA2+M8G3VdnW1JLh/uuu GNAenUAwr17YbEEyoMuTQ+54SOq1IpaZNeNzKwYLGtofReEyjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyedBEKATss6cNsingV7Q/qiGgDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzRiZjM0NDctMjUwNS0z NGUxLWJlMzctNGU0YTQ2MjgzODliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCHkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABq5ELbRh7nw53m43WKLkbD5FhojFWkwDVBvsnkieIRtNNCavI6rwXUw aUEsKaHqOBQmvxhIAsSMv6FXluBrU7yOdG992fQjDeoiAI7b9Thxh617z3sgRQR6 Se0+DjilMyPcFJPZo8Ciif3hxCrFy5D69aw8pr1DPtZ8eJt0OwaKHSR/wNH1+Gz8 6Uhka6M7IwKYCKPpiqR7HXKkWEMAlwufV9W1TxJ2OMzmqTEW4gc0D+K/C5YnmBPV S3hFUkh903yE33kvjnp0dn13yXqnXOJ72Z5zSZQwHgA7ux620Jy/D8l6yz72Hg3Q DeT6dkn+DnSNe0vpIYTLlf7L2aggMzE= -----END CERTIFICATE-----Generated at Sun Jun 15 17:41:14 2025 by rpki-client