$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c7375d5-e6fa-37b0-aa8e-ab53e4385ead.roa File: 7c7375d5-e6fa-37b0-aa8e-ab53e4385ead.roa (raw, json) Hash identifier: LGgx4o435ND2/xbu3tGkC0awk9uvQDjauswz7Mhi3F8= Subject key identifier: 79:0A:B8:27:03:50:9D:69:B2:70:A8:7C:BB:A4:D2:46:AE:FB:F2:20 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849C4D4D0143B976D66ED9DA700 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c7375d5-e6fa-37b0-aa8e-ab53e4385ead.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 8069 IP address blocks: 20.33.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:d0:14:3b:97:6d:66:ed:9d:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=2ce366cb-f037-43f6-922f-dcd8bd948163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:03:9c:36:fb:b1:02:90:3e:af:d1:c0:48:94: 48:e6:09:e0:d9:09:f1:e5:f5:b3:69:5e:ce:74:ca: 39:7c:c8:48:c4:ba:86:6d:b5:0e:0c:c1:87:a3:00: 84:95:21:60:84:6b:3c:3c:b6:a9:d2:4f:eb:72:19: 30:e5:ea:66:94:99:6f:d6:9a:e5:85:20:2f:03:e5: 62:08:52:81:fb:42:89:23:a0:bc:42:8b:ec:19:9d: bb:97:88:0e:ae:ee:2b:e4:fa:28:b0:e0:54:8f:b9: f0:e7:cf:cc:20:fc:c5:53:51:0b:3a:9d:85:e8:b1: 6c:ee:77:84:2b:f7:a4:77:25:ac:f0:6a:10:62:cc: e3:fa:89:1a:12:90:f6:21:23:9a:71:bb:e7:b6:9b: ff:01:69:f7:81:f7:3a:e8:10:2e:2d:72:74:63:9f: 47:94:5c:2d:3f:0c:91:65:d4:5b:64:3a:f0:d9:40: 59:62:48:e4:06:8c:90:f3:ef:9c:cb:a6:ec:16:05: 7b:9e:6b:2b:dc:bb:9f:3a:1c:62:6f:57:87:b5:17: 50:ba:f5:f9:52:28:0f:40:7b:5e:b5:5e:6e:61:b2: ad:46:10:10:a3:f5:97:26:b3:0b:0a:4d:ef:48:d1: 36:c7:60:4c:44:7f:b5:7d:6c:04:a2:5f:1c:53:35: 87:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:0A:B8:27:03:50:9D:69:B2:70:A8:7C:BB:A4:D2:46:AE:FB:F2:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c7375d5-e6fa-37b0-aa8e-ab53e4385ead.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:07:ba:13:47:3e:60:7b:7a:36:dd:27:7c:cc:b5:89:98:2f: ed:16:d0:02:eb:14:01:9d:a7:05:7a:5f:29:1e:6a:4c:fa:61: 2f:e5:ed:c4:33:0e:e8:fa:97:33:0a:17:d1:48:52:09:17:f3: 2b:b4:ac:c5:02:b1:11:ad:4a:8e:d8:4f:b6:b2:2b:1f:43:b8: 0d:64:10:72:b3:87:07:8e:cd:da:15:a5:7c:8d:a1:bf:a3:8c: 5b:90:6a:dd:78:1e:f4:3d:33:8a:24:47:63:9c:96:7e:2d:bf: db:a3:bf:b3:36:a4:d1:af:84:0f:78:a1:34:10:03:f0:f1:4f: 55:aa:37:29:eb:79:cc:97:4e:2e:63:37:50:a8:a1:17:e0:3f: 1c:b6:88:3a:6c:2f:66:ea:4a:12:a6:d3:ec:aa:79:0c:6a:f7: 7e:6d:dd:5f:0a:8a:07:c6:19:27:d9:95:7b:33:69:ce:ac:e3: f6:8e:9e:9a:3f:28:00:76:8b:cf:16:dd:b8:c7:fa:7b:fa:ec: 39:91:8f:49:c1:d9:f2:91:67:ba:20:07:ed:9a:0f:09:42:c0: 10:06:56:43:9b:8e:8d:37:f9:f2:b1:c2:11:21:8d:f3:61:fc: 92:15:f3:01:12:25:1e:4f:e8:b5:6d:0f:6e:74:fa:b8:e2:67: ee:37:e0:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1NAUO5dtZu2dpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk MmNlMzY2Y2ItZjAzNy00M2Y2LTkyMmYtZGNkOGJkOTQ4MTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gOcNvuxApA+r9HASJRI5gng2Qnx5fWzaV7O dMo5fMhIxLqGbbUODMGHowCElSFghGs8PLap0k/rchkw5epmlJlv1prlhSAvA+Vi CFKB+0KJI6C8QovsGZ27l4gOru4r5PoosOBUj7nw58/MIPzFU1ELOp2F6LFs7neE K/ekdyWs8GoQYszj+okaEpD2ISOacbvntpv/AWn3gfc66BAuLXJ0Y59HlFwtPwyR ZdRbZDrw2UBZYkjkBoyQ8++cy6bsFgV7nmsr3LufOhxib1eHtRdQuvX5UigPQHte tV5uYbKtRhAQo/WXJrMLCk3vSNE2x2BMRH+1fWwEol8cUzWHSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkKuCcDUJ1psnCofLuk0kau+/IgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2M3Mzc1ZDUtZTZmYS0z N2IwLWFhOGUtYWI1M2U0Mzg1ZWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYHuhNHPmB7ejbdJ3zMtYmYL+0W0ALrFAGdpwV6Xykeakz6YS/l7cQz Duj6lzMKF9FIUgkX8yu0rMUCsRGtSo7YT7ayKx9DuA1kEHKzhweOzdoVpXyNob+j jFuQat14HvQ9M4okR2Ocln4tv9ujv7M2pNGvhA94oTQQA/DxT1WqNynrecyXTi5j N1CooRfgPxy2iDpsL2bqShKm0+yqeQxq935t3V8KigfGGSfZlXszac6s4/aOnpo/ KAB2i88W3bjH+nv67DmRj0nB2fKRZ7ogB+2aDwlCwBAGVkObjo03+fKxwhEhjfNh /JIV8wESJR5P6LVtD250+rjiZ+434A8= -----END CERTIFICATE-----Generated at Sun Jun 15 15:28:16 2025 by rpki-client