$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7b5ac41d-84f9-3c65-bed3-c388701dbf1d.roa File: 7b5ac41d-84f9-3c65-bed3-c388701dbf1d.roa (raw, json) Hash identifier: tWKDze6oJIWOmjww0BUbLkg1uTAUewhoZf1RQ5hZo6o= Subject key identifier: 7A:99:D5:56:77:51:E4:C5:61:8F:C3:4C:6F:7E:B7:36:92:98:EA:7A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A268AC884CCB3444688C4F9C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7b5ac41d-84f9-3c65-bed3-c388701dbf1d.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:c8:84:cc:b3:44:46:88:c4:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=47e252b0-f576-45ef-a823-4264fd590037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:87:42:2c:96:14:c5:42:62:2d:d7:54:1d:61: 96:0d:2f:ff:1a:70:90:22:ef:bc:84:64:4e:59:e9: 03:64:ed:83:fe:04:89:fa:e1:c5:f1:8e:dd:d3:eb: 60:d1:4e:7f:b3:bf:a9:93:4e:e1:2d:31:5f:d9:51: 93:de:f9:33:84:d6:30:a6:d9:8d:cf:2c:73:3f:93: 12:0d:fa:c6:25:1c:1b:95:73:27:e0:97:cb:26:96: d2:a9:52:cb:22:c0:8d:c2:9c:c8:86:b6:a0:6f:80: 7a:6f:61:f4:ee:a5:b7:e3:20:31:80:d7:0a:e6:a7: 21:2c:6c:30:11:d5:0b:01:eb:d4:fd:8c:71:3c:5a: f2:2a:97:32:b0:0f:e9:2f:9d:42:da:7f:2a:97:a9: 96:37:34:3f:94:d4:fb:2e:e8:bf:e7:b1:db:ef:0c: a2:57:ec:99:d4:ae:96:0a:d2:9a:d3:68:75:c6:08: f0:50:e9:34:c1:c9:6d:75:48:75:cc:d4:e8:28:66: 33:7d:d1:ea:1b:93:23:4d:6c:0f:4b:2b:fe:83:40: b6:d4:8f:c4:c1:f2:2d:e4:a3:52:50:85:0b:7e:86: 3a:22:78:75:81:60:96:a1:f7:e2:30:9a:8d:87:1e: 46:d1:80:56:9d:8a:71:73:ca:d4:3b:0e:86:45:eb: 92:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:99:D5:56:77:51:E4:C5:61:8F:C3:4C:6F:7E:B7:36:92:98:EA:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7b5ac41d-84f9-3c65-bed3-c388701dbf1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:fd:d1:c1:92:0b:5c:3b:bd:87:b2:16:dc:7c:37:62:da:7e: 86:c2:12:f2:0d:f6:78:24:c8:f1:4f:f6:c9:80:b3:65:5d:f7: 86:ee:9a:79:31:d6:d2:f0:2c:f7:8e:27:b2:f2:8c:43:43:70: 86:d5:36:51:1d:a6:80:71:0b:ee:cd:d9:c1:39:2f:8f:0f:37: 20:c2:54:dd:ef:6a:50:c9:f4:6a:14:9c:7a:5e:e6:12:d8:c4: a8:63:fe:ff:f7:51:f8:0e:87:3b:16:06:ef:85:73:58:79:0b: e8:26:88:ff:c2:97:6e:f8:7b:03:09:aa:71:fa:c0:5a:c8:1c: a4:ec:95:b6:93:cb:6c:be:38:bf:22:e1:9a:30:8e:68:42:0c: d7:1f:62:bd:28:fb:4c:d1:29:b2:00:b4:4d:82:3a:7c:00:4f: 7c:da:23:4b:6a:ca:68:db:1e:49:a1:13:f2:8d:7f:23:cb:e0: 98:c6:20:c3:f4:e9:3a:41:6c:64:17:dc:50:93:e8:5b:54:2b: d1:d9:75:87:2f:f9:ef:86:5b:18:d9:44:a1:e2:8b:99:3e:dd: 86:4e:d1:9c:8e:82:d4:1c:df:6f:21:92:cc:df:db:da:ec:19: c9:d0:f6:00:13:a9:5d:ba:e7:68:92:35:ee:97:d7:35:87:45: 39:1c:22:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomisiEzLNERojE+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk NDdlMjUyYjAtZjU3Ni00NWVmLWE4MjMtNDI2NGZkNTkwMDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsodCLJYUxUJiLddUHWGWDS//GnCQIu+8hGRO WekDZO2D/gSJ+uHF8Y7d0+tg0U5/s7+pk07hLTFf2VGT3vkzhNYwptmNzyxzP5MS DfrGJRwblXMn4JfLJpbSqVLLIsCNwpzIhragb4B6b2H07qW34yAxgNcK5qchLGww EdULAevU/YxxPFryKpcysA/pL51C2n8ql6mWNzQ/lNT7Lui/57Hb7wyiV+yZ1K6W CtKa02h1xgjwUOk0wcltdUh1zNToKGYzfdHqG5MjTWwPSyv+g0C21I/EwfIt5KNS UIULfoY6Inh1gWCWoffiMJqNhx5G0YBWnYpxc8rUOw6GReuSRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqZ1VZ3UeTFYY/DTG9+tzaSmOp6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2I1YWM0MWQtODRmOS0z YzY1LWJlZDMtYzM4ODcwMWRiZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA390cGSC1w7vYeyFtx8N2LafobCEvIN9ngkyPFP9smAs2Vd94bumnkx 1tLwLPeOJ7LyjENDcIbVNlEdpoBxC+7N2cE5L48PNyDCVN3valDJ9GoUnHpe5hLY xKhj/v/3UfgOhzsWBu+Fc1h5C+gmiP/Cl274ewMJqnH6wFrIHKTslbaTy2y+OL8i 4ZowjmhCDNcfYr0o+0zRKbIAtE2COnwAT3zaI0tqymjbHkmhE/KNfyPL4JjGIMP0 6TpBbGQX3FCT6FtUK9HZdYcv+e+GWxjZRKHii5k+3YZO0ZyOgtQc328hkszf29rs GcnQ9gATqV2652iSNe6X1zWHRTkcInc= -----END CERTIFICATE-----Generated at Sun Jun 15 15:36:05 2025 by rpki-client