$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4b0c2265-c6cc-304f-b1ab-afa0962ddec2.roa File: 4b0c2265-c6cc-304f-b1ab-afa0962ddec2.roa (raw, json) Hash identifier: qIhmtIh6Olx7JaQwHXVGunwyVHUUk8Rl2Mldj1lCJOI= Subject key identifier: 49:D4:B3:08:3D:A4:7C:7F:86:94:B9:24:CE:FB:D9:77:6B:3D:AA:F5 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849DF5A7AC33AE38E3E59D7BD00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4b0c2265-c6cc-304f-b1ab-afa0962ddec2.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 8069 IP address blocks: 20.33.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:7a:c3:3a:e3:8e:3e:59:d7:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=87bbabde-e3b9-4828-b37d-7960c1eca64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:61:8a:6f:08:f2:31:52:53:3b:7d:12:d8:f1: 3a:f3:6b:76:50:1f:67:81:a5:e5:0e:c8:bc:ad:37: a5:96:72:dc:34:9f:94:4b:d8:37:e1:73:94:8d:37: e7:a6:bc:ef:9f:74:bd:f5:bf:89:0f:c9:5a:90:bf: 14:2c:60:92:5c:1f:bb:46:9a:64:36:1c:f4:31:7f: f3:f0:f3:af:0c:45:8b:7d:a3:14:7f:47:75:1c:bc: e5:ad:02:63:1f:cf:ed:10:93:a3:fa:f4:f3:a4:16: 5f:ac:e5:15:78:02:85:99:33:db:7d:b4:6d:7e:68: 57:52:46:75:d1:48:4e:7e:30:bc:6f:d4:0f:53:e1: 75:2a:db:99:1d:9d:89:ba:6b:26:e4:1d:87:4d:c5: 10:31:2f:e8:ab:80:87:fb:8a:b6:fa:05:1d:8e:c4: 62:ee:f5:0f:5a:ff:4e:9b:c5:8b:e7:f7:e9:5c:c7: ea:a3:59:ba:85:1d:0d:f0:d4:63:99:02:c8:0c:36: ce:22:e0:4b:a0:c4:c4:ac:39:4e:74:0b:bb:56:4a: cc:d8:d2:81:89:48:f5:ea:a7:00:3e:d1:f9:ab:59: bd:00:1a:d1:3d:6b:1a:c8:d5:01:0f:79:d1:d4:2a: 1e:2b:ca:d2:33:0e:7a:ef:8f:a0:e3:f4:4b:9c:b3: 46:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D4:B3:08:3D:A4:7C:7F:86:94:B9:24:CE:FB:D9:77:6B:3D:AA:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4b0c2265-c6cc-304f-b1ab-afa0962ddec2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:48:7d:6c:33:fe:90:f4:96:92:10:20:cf:da:e6:8a:1c:8c: ed:59:1a:d2:69:88:ca:1f:b1:b0:29:ad:da:b5:e1:03:24:17: 2a:5e:92:6f:46:1e:07:74:e0:c9:aa:82:9f:81:c4:21:6c:86: c2:89:78:f6:29:87:05:23:d2:9b:09:5d:0c:19:12:85:08:4a: 18:c1:2a:15:02:8b:fc:e7:d1:d6:d9:db:66:63:26:6e:f8:bf: 22:cf:3b:64:98:be:9d:5a:a8:3d:41:c7:16:15:c7:7e:d8:cd: fd:bf:71:4d:74:0b:0b:95:92:c3:74:d1:c9:ab:b7:ed:b4:72: 4b:61:fc:e0:1b:26:83:df:b4:5e:90:a8:b8:72:8b:c3:6c:01: dc:41:66:9d:29:fc:23:4d:98:89:b2:5a:81:47:b4:44:7d:f7: bf:55:19:a6:15:dc:b4:14:e2:31:ac:b5:11:d5:56:79:fc:a9: 04:0b:be:39:1c:50:0b:e7:7b:66:41:b0:98:b9:2f:3b:a7:5b: 77:3d:96:d1:5c:2a:4a:a4:c3:5e:75:ac:44:1c:a0:a5:9e:75: 3e:4f:3b:37:ed:82:0f:1e:1a:30:44:ef:16:a8:01:da:77:46: 47:5f:56:12:b2:6e:8b:2a:f7:05:da:c1:a8:61:eb:15:9e:40: 86:96:76:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWnrDOuOOPlnXvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk ODdiYmFiZGUtZTNiOS00ODI4LWIzN2QtNzk2MGMxZWNhNjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmGKbwjyMVJTO30S2PE682t2UB9ngaXlDsi8 rTellnLcNJ+US9g34XOUjTfnprzvn3S99b+JD8lakL8ULGCSXB+7RppkNhz0MX/z 8POvDEWLfaMUf0d1HLzlrQJjH8/tEJOj+vTzpBZfrOUVeAKFmTPbfbRtfmhXUkZ1 0UhOfjC8b9QPU+F1KtuZHZ2Jumsm5B2HTcUQMS/oq4CH+4q2+gUdjsRi7vUPWv9O m8WL5/fpXMfqo1m6hR0N8NRjmQLIDDbOIuBLoMTErDlOdAu7VkrM2NKBiUj16qcA PtH5q1m9ABrRPWsayNUBD3nR1CoeK8rSMw5674+g4/RLnLNGXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnUswg9pHx/hpS5JM772XdrPar1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGIwYzIyNjUtYzZjYy0z MDRmLWIxYWItYWZhMDk2MmRkZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdIfWwz/pD0lpIQIM/a5oocjO1ZGtJpiMofsbAprdq14QMkFypekm9G Hgd04Mmqgp+BxCFshsKJePYphwUj0psJXQwZEoUIShjBKhUCi/zn0dbZ22ZjJm74 vyLPO2SYvp1aqD1BxxYVx37Yzf2/cU10CwuVksN00cmrt+20ckth/OAbJoPftF6Q qLhyi8NsAdxBZp0p/CNNmImyWoFHtER9979VGaYV3LQU4jGstRHVVnn8qQQLvjkc UAvne2ZBsJi5LzunW3c9ltFcKkqkw151rEQcoKWedT5POzftgg8eGjBE7xaoAdp3 RkdfVhKybosq9wXawahh6xWeQIaWdn4= -----END CERTIFICATE-----Generated at Sun Jun 15 15:37:30 2025 by rpki-client