$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfce08b9-fa20-3011-97ac-85c4ba3785d5.roa File: cfce08b9-fa20-3011-97ac-85c4ba3785d5.roa (raw, json) Hash identifier: 8/nKIFSifJFgyW2vF2cuaJ4jV1L8Dp8OaaNCngojC5I= Subject key identifier: 2A:AC:F5:13:E6:7D:66:BF:D6:D9:4D:D4:CD:2E:88:FD:B1:62:96:02 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849D165504D31B0A6AA4FC41580 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfce08b9-fa20-3011-97ac-85c4ba3785d5.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 8069 IP address blocks: 20.33.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:50:4d:31:b0:a6:aa:4f:c4:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=6e96bee2-198f-4445-a51e-024c41cecce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ba:33:2b:fe:5e:34:be:49:7e:a9:81:0b:13: 40:09:a1:25:15:3d:73:f2:53:54:cf:58:46:4c:77: 56:76:d5:6c:ca:d2:3a:9a:49:82:a5:1d:81:66:bb: e7:3e:a6:64:81:0c:97:76:4c:f6:eb:bb:2e:d3:e7: c8:88:07:43:3c:0e:0c:8c:87:85:9d:61:de:71:aa: eb:73:fe:5b:84:8d:bd:63:88:b8:96:ef:b0:2e:ee: 19:c6:e7:22:30:eb:2e:7b:3b:19:27:7e:3e:b5:cb: d2:ff:01:22:49:2a:0f:c0:4f:2b:00:26:70:82:27: ac:ab:1c:85:bc:4f:8b:95:c9:74:95:df:b6:a1:b5: ee:2d:2e:59:b5:4e:fc:60:cc:50:6c:7c:2f:d7:48: 7e:0d:b8:39:84:5b:f1:df:62:df:de:3d:6c:20:5d: bd:96:b1:61:27:06:69:20:eb:95:01:35:b9:66:94: c0:70:20:7d:ba:11:ac:ae:38:18:62:43:61:cd:ec: a8:8e:42:14:fa:ed:52:a5:00:f2:9f:1f:31:93:0e: 07:f4:e0:28:df:ab:d1:a1:4e:fe:70:e9:ba:ee:41: fe:fd:75:fd:19:8e:1b:87:3e:77:a1:8e:3f:6e:3a: dd:d8:b2:47:15:a8:c0:6b:54:57:c2:f8:44:bf:fe: b3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AC:F5:13:E6:7D:66:BF:D6:D9:4D:D4:CD:2E:88:FD:B1:62:96:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfce08b9-fa20-3011-97ac-85c4ba3785d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:fd:cf:ae:2f:05:21:9a:10:6f:14:f2:e8:6e:d7:ae:bd:23: 74:61:c6:73:a3:e5:d3:79:0b:c6:2c:cd:53:c8:5f:3d:e5:e6: 4f:5e:8b:77:44:4e:42:bd:55:56:26:50:dc:41:40:f7:51:9f: d7:b3:c4:33:ed:18:b5:c2:ef:9b:b2:37:c6:4e:7e:86:14:8b: 6c:50:06:4f:13:f5:0c:70:c4:0b:de:62:26:62:25:5d:a0:c5: d1:08:e2:20:ae:d1:0e:df:9c:8c:e5:0a:13:8e:50:bf:f3:40: 3f:64:e6:ad:81:32:c6:75:2a:5d:84:67:fa:65:1b:27:80:7c: 8f:d6:51:3e:43:5e:7d:81:8a:e2:3a:ed:b2:ed:7e:6b:a7:87: c4:c6:3d:80:39:16:a5:7f:f4:02:1f:39:a5:39:2c:2a:d3:59: 22:51:f3:fd:e8:ac:0f:07:07:cb:5e:04:fb:27:56:2b:72:1d: 61:ef:89:85:10:65:dc:8b:28:96:59:e2:0b:e9:6e:f7:bc:a3: 11:3b:2d:07:e5:96:6e:18:87:0c:c7:d1:7d:23:bc:28:12:27: 32:83:55:4e:7a:33:18:5f:ad:f6:bc:ea:2d:c5:21:64:be:40: ff:5e:7e:e7:46:86:e3:2f:c1:f5:2b:04:08:d8:e0:19:90:53: ad:1b:85:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZVBNMbCmqk/EFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk NmU5NmJlZTItMTk4Zi00NDQ1LWE1MWUtMDI0YzQxY2VjY2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbozK/5eNL5JfqmBCxNACaElFT1z8lNUz1hG THdWdtVsytI6mkmCpR2BZrvnPqZkgQyXdkz267su0+fIiAdDPA4MjIeFnWHecarr c/5bhI29Y4i4lu+wLu4ZxuciMOsuezsZJ34+tcvS/wEiSSoPwE8rACZwgiesqxyF vE+Llcl0ld+2obXuLS5ZtU78YMxQbHwv10h+Dbg5hFvx32Lf3j1sIF29lrFhJwZp IOuVATW5ZpTAcCB9uhGsrjgYYkNhzeyojkIU+u1SpQDynx8xkw4H9OAo36vRoU7+ cOm67kH+/XX9GY4bhz53oY4/bjrd2LJHFajAa1RXwvhEv/6zeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqs9RPmfWa/1tlN1M0uiP2xYpYCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2ZjZTA4YjktZmEyMC0z MDExLTk3YWMtODVjNGJhMzc4NWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHT9z64vBSGaEG8U8uhu1669I3RhxnOj5dN5C8YszVPIXz3l5k9ei3dE TkK9VVYmUNxBQPdRn9ezxDPtGLXC75uyN8ZOfoYUi2xQBk8T9QxwxAveYiZiJV2g xdEI4iCu0Q7fnIzlChOOUL/zQD9k5q2BMsZ1Kl2EZ/plGyeAfI/WUT5DXn2BiuI6 7bLtfmunh8TGPYA5FqV/9AIfOaU5LCrTWSJR8/3orA8HB8teBPsnVityHWHviYUQ ZdyLKJZZ4gvpbve8oxE7LQfllm4YhwzH0X0jvCgSJzKDVU56Mxhfrfa86i3FIWS+ QP9efudGhuMvwfUrBAjY4BmQU60bhTw= -----END CERTIFICATE-----Generated at Sun Jun 15 15:34:01 2025 by rpki-client