$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/69e687b5-c66f-3cd6-b1f2-623803e3abd1.roa File: 69e687b5-c66f-3cd6-b1f2-623803e3abd1.roa (raw, json) Hash identifier: U5/MxFlF4rVKuAOxTqf5lqLnwkpk33g9f0d0fEjIXO4= Subject key identifier: AD:0B:87:DC:38:46:7C:4D:C8:2D:D2:0F:39:5A:B1:2D:4F:29:A3:51 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A23C01E7F3BFC381408D02600 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/69e687b5-c66f-3cd6-b1f2-623803e3abd1.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:1e:7f:3b:fc:38:14:08:d0:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=88c3ac6c-672c-4ddd-9c76-e9837a81287f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b7:1d:33:c2:d9:af:71:85:a1:2f:c9:3d:e4: d4:19:22:e5:09:6f:18:8c:c8:82:da:af:52:0d:8b: cc:e9:65:50:c7:c7:50:e2:10:61:ff:98:8d:8f:c3: 8e:58:56:da:b8:ee:e8:6c:ca:56:f2:17:af:3e:aa: 92:28:82:e2:b5:79:28:f2:2d:5e:8e:aa:1c:d1:53: 3e:98:02:0c:0c:c8:61:ae:1c:44:29:62:11:d5:ac: 48:5d:11:74:34:8c:4d:32:48:aa:3a:cd:9e:8c:45: bf:69:75:32:bc:12:cb:74:6a:a3:ef:3a:3e:7b:da: 19:49:54:3e:0b:9d:e4:01:d5:bf:89:c3:87:a7:83: 50:ea:8b:51:c1:37:91:65:12:3e:7c:9a:06:61:09: d1:c3:b3:89:44:17:0b:98:5a:7f:b3:5a:2f:e9:c4: 64:88:d0:1b:78:06:ce:31:6a:dc:0d:d2:f0:cf:58: 9b:6a:45:17:4d:ff:1d:5b:ae:24:f6:7b:b5:d6:cf: 6e:d0:42:69:f2:58:97:f2:71:6c:42:eb:d2:47:3c: 96:2e:6c:69:4e:9d:c6:22:04:12:15:ac:ed:be:5d: d5:d1:3e:c1:92:48:18:2e:e5:3a:01:3f:91:2b:45: 99:3d:49:ea:cb:64:eb:5e:38:58:3f:60:d3:fc:48: c4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0B:87:DC:38:46:7C:4D:C8:2D:D2:0F:39:5A:B1:2D:4F:29:A3:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/69e687b5-c66f-3cd6-b1f2-623803e3abd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:ec:17:90:07:de:bd:c3:6e:7e:02:97:b1:1c:13:4c:aa:5d: 9a:fc:0d:75:cc:77:c0:57:c4:6d:d1:11:44:20:0b:b6:5b:fe: a2:78:5f:a3:ab:2c:4a:7d:66:60:7e:1d:13:1d:0a:80:a4:27: 0b:f7:01:db:76:03:a9:bd:4a:1e:18:f0:da:ff:94:9f:51:e0: b3:d7:0b:5f:36:55:bc:71:98:59:50:71:52:92:04:6e:28:80: 7a:ea:25:86:83:00:25:a1:9b:93:79:03:8b:b7:a8:e9:5d:58: 15:9d:19:3d:18:19:38:c1:83:29:0f:8b:79:c4:35:95:10:18: 56:3e:a2:88:3f:97:2e:0f:ae:1c:99:7f:e8:33:b5:82:82:da: 88:b7:9e:bf:8d:9a:fc:3b:72:2c:60:33:a0:52:89:c3:33:ab: 35:19:76:49:cf:c6:9b:dd:8b:52:55:a4:f0:19:e0:14:06:45: 86:1a:26:b5:28:28:c8:b0:30:27:30:a6:98:0a:aa:02:63:d6: 14:dc:e2:3f:4d:61:88:3c:1d:1a:6e:51:cc:6c:de:50:59:be: c6:a5:6c:7c:79:94:34:67:56:30:6d:0b:55:46:d5:3a:59:55: 90:7b:84:cd:19:85:f2:39:93:49:9f:36:0e:a6:73:97:ed:0d: e2:67:78:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwB5/O/w4FAjQJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk ODhjM2FjNmMtNjcyYy00ZGRkLTljNzYtZTk4MzdhODEyODdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbcdM8LZr3GFoS/JPeTUGSLlCW8YjMiC2q9S DYvM6WVQx8dQ4hBh/5iNj8OOWFbauO7obMpW8hevPqqSKILitXko8i1ejqoc0VM+ mAIMDMhhrhxEKWIR1axIXRF0NIxNMkiqOs2ejEW/aXUyvBLLdGqj7zo+e9oZSVQ+ C53kAdW/icOHp4NQ6otRwTeRZRI+fJoGYQnRw7OJRBcLmFp/s1ov6cRkiNAbeAbO MWrcDdLwz1ibakUXTf8dW64k9nu11s9u0EJp8liX8nFsQuvSRzyWLmxpTp3GIgQS Faztvl3V0T7BkkgYLuU6AT+RK0WZPUnqy2TrXjhYP2DT/EjEUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0Lh9w4RnxNyC3SDzlasS1PKaNRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjllNjg3YjUtYzY2Zi0z Y2Q2LWIxZjItNjIzODAzZTNhYmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvsF5AH3r3Dbn4Cl7EcE0yqXZr8DXXMd8BXxG3REUQgC7Zb/qJ4X6Or LEp9ZmB+HRMdCoCkJwv3Adt2A6m9Sh4Y8Nr/lJ9R4LPXC182VbxxmFlQcVKSBG4o gHrqJYaDACWhm5N5A4u3qOldWBWdGT0YGTjBgykPi3nENZUQGFY+oog/ly4PrhyZ f+gztYKC2oi3nr+Nmvw7cixgM6BSicMzqzUZdknPxpvdi1JVpPAZ4BQGRYYaJrUo KMiwMCcwppgKqgJj1hTc4j9NYYg8HRpuUcxs3lBZvsalbHx5lDRnVjBtC1VG1TpZ VZB7hM0ZhfI5k0mfNg6mc5ftDeJneB4= -----END CERTIFICATE-----Generated at Sun Jun 15 15:29:01 2025 by rpki-client