$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/35b9c925-cda6-3421-a583-d46714bddd70.roa File: 35b9c925-cda6-3421-a583-d46714bddd70.roa (raw, json) Hash identifier: n9S9uy/dOV6r96osfEQnhL5IZ3rw9FFk+cNNj2mpBTc= Subject key identifier: D3:E0:EA:7E:D3:42:D1:97:E8:6A:52:3A:FE:3D:F9:1A:59:3B:E2:FA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849B9AA0B0F4445B83BEA8FB280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/35b9c925-cda6-3421-a583-d46714bddd70.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 8069 IP address blocks: 20.33.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:0b:0f:44:45:b8:3b:ea:8f:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=7b8d1254-4ffe-4500-b9de-3b4be774a5ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e2:67:6e:69:59:ef:7b:d2:a1:93:12:c1:e0: 61:1a:1e:aa:ec:26:4e:5e:5b:4a:2c:c2:74:5b:32: cc:a0:f4:d0:a3:91:18:59:93:fd:8b:b1:61:fa:59: 4a:25:25:26:25:9f:d4:67:21:95:aa:f6:52:2a:3d: d0:55:12:a0:a8:48:69:14:72:b6:df:fb:73:8c:8d: 43:fd:fe:09:5c:dd:89:8f:ad:76:0c:65:85:c6:70: 47:ff:d4:19:ec:d9:7a:1d:82:d7:10:f1:2f:43:52: 70:63:31:51:48:cd:a5:ef:3f:fa:87:01:7b:cf:aa: 7f:e8:92:b0:55:b2:05:ca:d8:a7:42:a5:6b:99:73: 71:1a:bb:66:3a:ad:11:fe:2f:fa:6d:50:de:bf:1a: 75:21:4d:db:92:4f:e9:2f:4e:a9:ee:77:51:74:fd: aa:b7:b0:6d:e3:c1:9c:8f:44:fb:0a:24:37:6b:ad: 93:ce:22:32:a6:64:c2:a8:16:69:c3:22:70:48:38: df:5b:9b:51:e4:3e:f3:d8:33:7e:7f:9d:47:c3:a0: b0:f0:e8:74:a6:7e:be:19:40:ed:ed:6b:c5:2d:02: ff:40:c6:0c:a7:96:e7:19:b8:f6:5b:a8:e3:dd:d9: ac:90:e0:d6:12:c8:eb:68:a5:95:a0:25:59:3f:e6: b4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E0:EA:7E:D3:42:D1:97:E8:6A:52:3A:FE:3D:F9:1A:59:3B:E2:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/35b9c925-cda6-3421-a583-d46714bddd70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:2c:cb:54:d3:be:2a:36:b7:e5:85:58:5c:fd:5b:ad:fe:4b: bc:6d:c1:e1:8a:b2:05:a9:00:85:a0:48:62:30:e2:9a:0d:a1: c7:68:23:09:d3:11:1c:a5:80:1b:4e:6e:54:f8:e6:c3:db:48: d0:df:05:f7:6d:41:a4:b9:ef:7d:81:b7:16:d2:92:6b:48:71: d1:7f:ea:c8:1e:a8:19:cb:23:e4:fe:80:76:27:88:23:06:c7: 40:57:a1:e7:93:77:34:c0:d1:22:af:b7:30:d5:ba:1e:4c:be: be:f8:b1:35:ff:73:a7:51:86:8a:3e:a1:a9:47:7b:c5:ab:ff: f4:97:1f:05:46:f7:88:4d:f0:7c:a3:5e:f5:82:6b:63:2a:0d: 62:2d:44:53:0e:1b:27:31:d8:81:9b:07:ce:6d:44:b0:bd:5d: 69:6a:59:7e:4b:72:c3:b5:a2:23:a3:00:fb:07:b2:4d:61:95: 1e:1b:cb:c8:27:aa:d1:2c:4f:67:9f:29:13:3e:a9:8a:9c:8e: 45:f7:f8:3a:06:e8:c4:f8:46:a5:6f:95:9a:cc:6f:e6:ef:b7: b0:50:0b:7f:14:8a:f4:5f:fb:65:56:df:d3:69:cb:c2:b7:ad: 90:b6:c5:db:31:63:d8:c1:a9:62:ac:19:6a:e9:f4:b6:fd:c5: bf:93:e1:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgsPREW4O+qPsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk N2I4ZDEyNTQtNGZmZS00NTAwLWI5ZGUtM2I0YmU3NzRhNWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+JnbmlZ73vSoZMSweBhGh6q7CZOXltKLMJ0 WzLMoPTQo5EYWZP9i7Fh+llKJSUmJZ/UZyGVqvZSKj3QVRKgqEhpFHK23/tzjI1D /f4JXN2Jj612DGWFxnBH/9QZ7Nl6HYLXEPEvQ1JwYzFRSM2l7z/6hwF7z6p/6JKw VbIFytinQqVrmXNxGrtmOq0R/i/6bVDevxp1IU3bkk/pL06p7ndRdP2qt7Bt48Gc j0T7CiQ3a62TziIypmTCqBZpwyJwSDjfW5tR5D7z2DN+f51Hw6Cw8Oh0pn6+GUDt 7WvFLQL/QMYMp5bnGbj2W6jj3dmskODWEsjraKWVoCVZP+a0jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPg6n7TQtGX6GpSOv49+RpZO+L6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzViOWM5MjUtY2RhNi0z NDIxLWE1ODMtZDQ2NzE0YmRkZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCESMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQsy1TTvio2t+WFWFz9W63+S7xtweGKsgWpAIWgSGIw4poNocdoIwnT ERylgBtOblT45sPbSNDfBfdtQaS5732BtxbSkmtIcdF/6sgeqBnLI+T+gHYniCMG x0BXoeeTdzTA0SKvtzDVuh5Mvr74sTX/c6dRhoo+oalHe8Wr//SXHwVG94hN8Hyj XvWCa2MqDWItRFMOGycx2IGbB85tRLC9XWlqWX5LcsO1oiOjAPsHsk1hlR4by8gn qtEsT2efKRM+qYqcjkX3+DoG6MT4RqVvlZrMb+bvt7BQC38UivRf+2VW39Npy8K3 rZC2xdsxY9jBqWKsGWrp9Lb9xb+T4Rg= -----END CERTIFICATE-----Generated at Sun Jun 15 18:04:14 2025 by rpki-client