$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/67363bc5-afc2-3ebd-99c4-8fe80b1aaef3.roa File: 67363bc5-afc2-3ebd-99c4-8fe80b1aaef3.roa (raw, json) Hash identifier: /It4IEX7Ki5qo5LgGmhV9cna59yYPN6dOq8K0B0zSUY= Subject key identifier: 6D:29:65:EB:4B:43:CE:71:1D:32:E5:AD:77:C0:7B:03:6A:E0:F8:A8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A15CA92DB23CE0B54A27FA800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/67363bc5-afc2-3ebd-99c4-8fe80b1aaef3.roa Signing time: Thu 05 Jun 2025 01:00:51 +0000 ROA not before: Thu 05 Jun 2025 01:00:51 +0000 ROA not after: Wed 03 Sep 2025 01:00:51 +0000 asID: 8069 IP address blocks: 20.33.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:15:ca:92:db:23:ce:0b:54:a2:7f:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 5 01:00:51 2025 GMT Not After : Sep 3 01:00:51 2025 GMT Subject: CN=7785ebcb-b13d-4957-816b-d13ca18c358c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ea:25:4d:de:99:b2:ed:14:63:f3:bc:37:dd: f9:76:3c:5b:17:cb:42:28:79:63:97:d8:4a:66:e4: a7:f5:21:b8:f6:e8:4e:38:f0:32:b1:e6:21:c1:0b: 74:fb:02:4f:03:42:10:1d:47:65:a9:5c:e2:45:cc: a3:58:b1:5f:46:9d:4e:da:7b:54:3e:6e:ee:69:eb: f5:9d:0c:4f:dd:4e:ad:99:ec:b1:38:3d:91:93:6b: 6b:aa:a2:a9:a6:44:50:24:95:e3:6b:64:0b:45:7a: 18:4d:9d:45:7a:19:da:71:60:0a:6d:51:15:d7:f2: f7:9c:c1:b6:cb:ab:29:9e:c3:63:9d:1c:9e:8d:42: d7:1f:b3:66:02:c1:0f:cf:97:cb:36:ed:2b:2c:23: 38:b5:9e:d6:70:8f:54:a7:ca:98:a3:ea:a7:46:12: a0:7a:17:7d:92:04:b3:43:a6:8f:10:5c:f1:25:21: 57:2e:da:26:4f:c5:87:50:b9:3e:3b:7f:2d:22:82: a0:55:5b:73:58:ce:36:05:8e:93:2e:e2:d5:10:b7: ca:46:ad:a7:0e:80:77:b2:1e:e2:6d:fc:c8:eb:ea: 98:c2:e7:28:48:b6:a6:12:14:88:93:75:60:80:68: 31:d1:e1:fb:04:20:46:1d:66:9f:f4:71:5c:0d:6e: 9d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:29:65:EB:4B:43:CE:71:1D:32:E5:AD:77:C0:7B:03:6A:E0:F8:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/67363bc5-afc2-3ebd-99c4-8fe80b1aaef3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:52:ba:39:d8:e1:d1:2f:04:64:3b:2d:d6:a1:15:15:dd:a2: 2f:b0:5f:01:55:7a:73:45:2f:07:31:5d:ad:93:31:aa:fd:e0: bb:41:c5:e0:46:30:c5:dd:52:22:40:f3:1b:33:17:33:5e:6b: 2c:9a:6b:90:46:7c:55:aa:e2:2c:09:9c:12:51:0f:9b:94:73: e4:d6:78:72:1f:ae:47:00:a2:27:ef:ec:8a:e1:8f:21:c5:39: 7b:4e:50:a3:77:34:12:cf:47:4e:18:b7:37:3b:22:5b:ac:69: 6a:b0:a8:b7:62:8c:34:bd:de:8e:93:9a:bc:fa:f5:f7:39:10: 4a:89:39:77:71:cc:60:05:dd:ac:67:ec:9d:a6:93:f6:ff:89: 88:86:26:63:97:ae:9c:3b:88:b6:6b:9a:93:6f:74:93:b4:75: 5f:3a:c4:1e:38:e4:5f:93:27:8e:69:a2:69:98:84:96:d7:ad: cd:fd:10:95:79:c2:c3:c1:e5:83:39:2a:28:9c:81:cc:54:b3: 6b:47:13:c6:b7:86:2b:e9:b9:cf:c5:28:f0:18:97:48:a2:f5: 0d:fc:70:1b:c1:64:45:52:ab:fd:ce:a6:fc:aa:66:1a:af:99: 64:3a:d8:52:c3:bc:64:82:5a:c3:2f:77:32:b1:f1:0c:79:48: 87:3b:34:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoVypLbI84LVKJ/qAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNTAxMDA1MVoXDTI1MDkwMzAxMDA1MVowLzEtMCsGA1UEAxMk Nzc4NWViY2ItYjEzZC00OTU3LTgxNmItZDEzY2ExOGMzNThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOolTd6Zsu0UY/O8N935djxbF8tCKHljl9hK ZuSn9SG49uhOOPAyseYhwQt0+wJPA0IQHUdlqVziRcyjWLFfRp1O2ntUPm7uaev1 nQxP3U6tmeyxOD2Rk2trqqKppkRQJJXja2QLRXoYTZ1FehnacWAKbVEV1/L3nMG2 y6spnsNjnRyejULXH7NmAsEPz5fLNu0rLCM4tZ7WcI9Up8qYo+qnRhKgehd9kgSz Q6aPEFzxJSFXLtomT8WHULk+O38tIoKgVVtzWM42BY6TLuLVELfKRq2nDoB3sh7i bfzI6+qYwucoSLamEhSIk3VggGgx0eH7BCBGHWaf9HFcDW6dsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0pZetLQ85xHTLlrXfAewNq4PioMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjczNjNiYzUtYWZjMi0z ZWJkLTk5YzQtOGZlODBiMWFhZWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCF1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFSujnY4dEvBGQ7LdahFRXdoi+wXwFVenNFLwcxXa2TMar94LtBxeBG MMXdUiJA8xszFzNeayyaa5BGfFWq4iwJnBJRD5uUc+TWeHIfrkcAoifv7IrhjyHF OXtOUKN3NBLPR04Ytzc7IlusaWqwqLdijDS93o6Tmrz69fc5EEqJOXdxzGAF3axn 7J2mk/b/iYiGJmOXrpw7iLZrmpNvdJO0dV86xB445F+TJ45pommYhJbXrc39EJV5 wsPB5YM5KiicgcxUs2tHE8a3hivpuc/FKPAYl0ii9Q38cBvBZEVSq/3OpvyqZhqv mWQ62FLDvGSCWsMvdzKx8Qx5SIc7NMk= -----END CERTIFICATE-----Generated at Sun Jun 15 15:29:07 2025 by rpki-client