$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9256e928-9e7a-395f-a0ec-b2e0c6ac0b84.roa File: 9256e928-9e7a-395f-a0ec-b2e0c6ac0b84.roa (raw, json) Hash identifier: C/ZhV2hGVABLuysLKS1wRVzPkGl3FLR0kK3Fd4SbFMM= Subject key identifier: 4B:62:E9:4A:D5:73:D8:18:B7:1D:71:C3:F3:C3:19:05:ED:52:98:83 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A119AC5E3ACF3D9FD0BB6A740 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9256e928-9e7a-395f-a0ec-b2e0c6ac0b84.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 8069 IP address blocks: 20.33.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:c5:e3:ac:f3:d9:fd:0b:b6:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=dcdf783c-53fb-4fd2-bf9b-678f9e2983e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1b:01:d9:5c:3b:d8:23:01:e9:24:b3:63:1a: 61:e8:49:d0:d8:36:ca:51:1c:48:d9:ba:11:c3:52: e8:12:9a:af:da:f7:ad:0f:81:4f:2e:ff:51:ed:9f: dc:e0:4a:1f:14:2e:34:ca:62:da:d3:57:76:4f:d2: b7:f9:a5:cf:c7:0d:cb:13:14:9b:76:16:a9:52:80: ae:e6:88:1b:41:15:0f:14:d0:b9:09:1b:60:2a:6b: 22:24:84:c2:52:24:81:1b:f2:6f:c3:40:40:c9:30: 43:7d:23:b3:24:74:bd:84:02:f1:ab:9f:9a:89:1b: a5:36:dc:16:f1:6d:51:db:5e:d4:56:a7:e3:76:30: 33:a9:eb:4f:07:eb:8b:a2:57:c5:9d:6c:eb:19:39: 66:4c:3f:af:35:b1:29:5b:9d:cd:ce:b4:9a:0d:fe: 80:11:ff:bf:56:71:3f:9f:ff:72:4b:a3:fa:74:73: fd:ca:7d:58:10:88:87:4e:5a:8d:6e:0e:0d:e2:65: 59:55:fc:33:58:d8:47:37:a2:1e:a0:25:9b:5c:9b: 42:7f:3c:be:36:2e:d9:2b:3d:11:ee:52:a0:00:19: 6a:0f:de:9e:64:84:4c:1c:2f:98:96:39:84:36:79: d4:e5:c6:19:65:25:da:88:49:80:c3:c1:09:74:9e: c9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:62:E9:4A:D5:73:D8:18:B7:1D:71:C3:F3:C3:19:05:ED:52:98:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9256e928-9e7a-395f-a0ec-b2e0c6ac0b84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:46:d1:79:46:2c:f8:70:92:49:e0:d2:00:65:8a:e3:4a:54: 87:e2:2e:f9:9e:dd:ec:14:88:d4:1e:36:b0:3a:3e:9b:01:44: e5:35:2d:ba:4e:66:9d:5f:17:0b:26:f4:35:c0:7c:bb:ab:d1: b5:9f:33:97:5b:8e:cb:07:b2:a3:cc:3f:44:cf:f4:74:aa:74: 7d:97:63:89:a2:0e:14:08:42:6f:9f:c9:f0:ff:99:21:6c:2c: 8e:01:4f:4d:89:2a:39:8c:b1:c3:5e:33:c5:be:a0:0a:37:12: 20:fe:05:4e:49:bb:93:97:15:d3:80:6f:82:25:c8:f3:fc:03: c7:07:87:b5:de:4e:04:dc:6c:ce:c6:88:9c:a5:3e:c6:6e:c7: f4:4b:cf:41:61:4d:7d:ba:26:c3:04:c4:82:24:7e:79:7d:f3: 9d:fc:0c:c1:ae:1a:d0:e3:42:aa:ce:aa:29:16:b1:46:17:b1: b6:ce:8c:aa:48:fa:0a:a8:1f:d1:39:14:7d:d0:25:87:5e:b7: e5:c2:44:5e:6d:68:0c:2a:c4:12:89:1f:d3:02:59:f7:ef:e5: 5e:7b:0c:84:9c:97:f8:96:7c:7d:80:55:7e:fc:ad:70:40:46: d3:42:a4:8f:c5:d0:a6:c9:be:76:ae:5a:c7:6a:26:46:90:97: 52:91:87:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmsXjrPPZ/Qu2p0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk ZGNkZjc4M2MtNTNmYi00ZmQyLWJmOWItNjc4ZjllMjk4M2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxsB2Vw72CMB6SSzYxph6EnQ2DbKURxI2boR w1LoEpqv2vetD4FPLv9R7Z/c4EofFC40ymLa01d2T9K3+aXPxw3LExSbdhapUoCu 5ogbQRUPFNC5CRtgKmsiJITCUiSBG/Jvw0BAyTBDfSOzJHS9hALxq5+aiRulNtwW 8W1R217UVqfjdjAzqetPB+uLolfFnWzrGTlmTD+vNbEpW53NzrSaDf6AEf+/VnE/ n/9yS6P6dHP9yn1YEIiHTlqNbg4N4mVZVfwzWNhHN6IeoCWbXJtCfzy+Ni7ZKz0R 7lKgABlqD96eZIRMHC+YljmENnnU5cYZZSXaiEmAw8EJdJ7JmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEti6UrVc9gYtx1xw/PDGQXtUpiDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTI1NmU5MjgtOWU3YS0z OTVmLWEwZWMtYjJlMGM2YWMwYjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCElMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlG0XlGLPhwkkng0gBliuNKVIfiLvme3ewUiNQeNrA6PpsBROU1LbpO Zp1fFwsm9DXAfLur0bWfM5dbjssHsqPMP0TP9HSqdH2XY4miDhQIQm+fyfD/mSFs LI4BT02JKjmMscNeM8W+oAo3EiD+BU5Ju5OXFdOAb4IlyPP8A8cHh7XeTgTcbM7G iJylPsZux/RLz0FhTX26JsMExIIkfnl98538DMGuGtDjQqrOqikWsUYXsbbOjKpI +gqoH9E5FH3QJYdet+XCRF5taAwqxBKJH9MCWffv5V57DIScl/iWfH2AVX78rXBA RtNCpI/F0KbJvnauWsdqJkaQl1KRh/0= -----END CERTIFICATE-----Generated at Sun Jun 15 15:31:20 2025 by rpki-client