$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/433f4626-f5a4-3f5b-8402-ad0e6744411a.roa File: 433f4626-f5a4-3f5b-8402-ad0e6744411a.roa (raw, json) Hash identifier: 2IjjOvCOb4Q/RhcrtPLbLlW8kES6lm0U/wpPeIu/aOc= Subject key identifier: 5F:13:AF:F2:B0:22:1B:AA:1B:76:99:EF:66:8E:5C:7F:5F:8B:A7:FF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A23C01F6D3D103D95FDC356C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/433f4626-f5a4-3f5b-8402-ad0e6744411a.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:1f:6d:3d:10:3d:95:fd:c3:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=59d3ce85-8e07-47ea-a7f8-33860937502d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:80:48:30:36:f4:95:f0:40:5a:71:ad:a6:63: 44:b9:94:64:15:b1:d7:06:79:59:02:eb:2a:02:55: 06:60:51:81:10:a4:30:e1:c5:dd:a8:b0:05:c1:c0: 57:79:e3:40:2b:a3:91:c3:a5:47:77:1f:2b:3f:e9: 1c:90:7f:29:e9:9d:7f:62:da:d1:d4:26:cb:ee:dd: e0:02:1f:c8:08:37:70:eb:6d:aa:2b:f2:df:be:f4: 5b:38:7b:fb:e7:a3:17:39:c9:6a:11:3f:d2:60:c7: 99:a2:f2:b2:6c:29:c2:48:b3:1e:be:f7:e1:03:49: 39:8a:85:c8:d2:ed:73:9d:42:1f:49:1d:f3:a7:e8: 84:c0:1d:12:10:11:32:56:46:81:e8:9a:85:f6:60: aa:a3:8e:5f:16:d9:8c:ba:94:1f:e5:05:a2:8e:3d: 8d:cd:fa:94:36:18:49:83:b6:9d:21:df:f1:f7:0a: 19:90:45:1d:9a:85:a5:ee:62:b6:1d:b6:f2:7f:03: a5:25:82:cd:6a:ef:35:e6:28:5f:74:26:68:72:25: 9b:f4:71:ba:e1:9d:c5:88:f6:8c:aa:f4:f5:e2:07: 2b:d7:fd:42:d5:7e:f4:d1:6e:c0:60:82:af:cd:19: 27:ec:cc:a2:be:16:37:68:82:b7:b5:92:7c:3d:8a: 2f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:13:AF:F2:B0:22:1B:AA:1B:76:99:EF:66:8E:5C:7F:5F:8B:A7:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/433f4626-f5a4-3f5b-8402-ad0e6744411a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c2:80:aa:19:a2:1f:fd:3c:5f:bf:78:35:24:1f:12:58:5f: 00:37:00:6f:f5:41:78:50:8d:f9:cd:3f:93:40:2d:4b:c8:a0: 8c:54:e9:d8:de:6b:d8:38:a6:0a:01:56:a7:0f:80:6c:bb:b2: da:c3:62:48:52:72:60:37:74:05:1b:6a:ba:73:ed:31:ba:87: f0:60:f2:54:13:77:fd:fa:c0:6c:60:7e:10:e1:c8:03:25:54: 3d:55:94:1f:b1:1e:7a:ab:49:1c:af:f2:01:e7:c4:76:d9:f0: 4f:da:7a:fd:60:69:13:09:8a:9c:6c:0c:0b:cb:29:c9:4e:aa: ca:3f:cb:48:f0:87:b4:5f:3c:b4:27:c8:66:74:9f:68:80:47: 8d:36:cb:9f:8e:54:16:29:9b:e4:03:2f:da:e9:4d:f8:69:b0: d4:8b:c4:4b:d0:91:52:68:87:ed:6f:70:1b:c4:af:13:ce:ac: 10:ed:e2:4e:a2:49:a5:da:9e:d0:03:e1:5a:81:38:55:58:51: 25:88:07:38:08:58:73:bc:b2:93:bd:dc:a6:c1:d8:1d:36:86: 9c:68:8f:1f:ec:e2:5c:d8:f4:9a:18:3b:f3:9d:6b:cb:85:e4: 03:e3:ce:1c:9c:b5:21:88:8b:ed:8f:d5:e3:fb:45:a8:88:8d: 07:17:3f:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwB9tPRA9lf3DVsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk NTlkM2NlODUtOGUwNy00N2VhLWE3ZjgtMzM4NjA5Mzc1MDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4BIMDb0lfBAWnGtpmNEuZRkFbHXBnlZAusq AlUGYFGBEKQw4cXdqLAFwcBXeeNAK6ORw6VHdx8rP+kckH8p6Z1/YtrR1CbL7t3g Ah/ICDdw622qK/LfvvRbOHv756MXOclqET/SYMeZovKybCnCSLMevvfhA0k5ioXI 0u1znUIfSR3zp+iEwB0SEBEyVkaB6JqF9mCqo45fFtmMupQf5QWijj2NzfqUNhhJ g7adId/x9woZkEUdmoWl7mK2HbbyfwOlJYLNau815ihfdCZociWb9HG64Z3FiPaM qvT14gcr1/1C1X700W7AYIKvzRkn7MyivhY3aIK3tZJ8PYov1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8Tr/KwIhuqG3aZ72aOXH9fi6f/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDMzZjQ2MjYtZjVhNC0z ZjViLTg0MDItYWQwZTY3NDQ0MTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3CgKoZoh/9PF+/eDUkHxJYXwA3AG/1QXhQjfnNP5NALUvIoIxU6dje a9g4pgoBVqcPgGy7strDYkhScmA3dAUbarpz7TG6h/Bg8lQTd/36wGxgfhDhyAMl VD1VlB+xHnqrSRyv8gHnxHbZ8E/aev1gaRMJipxsDAvLKclOqso/y0jwh7RfPLQn yGZ0n2iAR402y5+OVBYpm+QDL9rpTfhpsNSLxEvQkVJoh+1vcBvErxPOrBDt4k6i SaXantAD4VqBOFVYUSWIBzgIWHO8spO93KbB2B02hpxojx/s4lzY9JoYO/Oda8uF 5APjzhyctSGIi+2P1eP7RaiIjQcXP+M= -----END CERTIFICATE-----Generated at Sun Jun 15 15:34:11 2025 by rpki-client