$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d851fbe8-225a-3c6f-8e78-4c283a99fd68.roa File: d851fbe8-225a-3c6f-8e78-4c283a99fd68.roa (raw, json) Hash identifier: WCXAqCaKKr0TCBhdiitusjzkAfDhsadFUNVn76nTBpw= Subject key identifier: E1:F2:2C:8A:A5:D0:2C:C4:EE:88:96:47:10:07:06:5C:2C:67:67:97 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A9E9663C43EA9940F48AD0A54 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d851fbe8-225a-3c6f-8e78-4c283a99fd68.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:63:c4:3e:a9:94:0f:48:ad:0a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=89410f1d-dcdc-44b9-b8d8-6b49fe389a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1e:3a:e9:0d:cf:b7:ca:bf:a0:09:f9:d7:c2: 4d:fe:0d:08:b9:37:c5:f9:f4:7b:6f:9d:54:8b:02: 56:32:c3:1d:16:91:31:cd:ef:95:b3:a1:7a:f1:b1: 2b:2b:d3:2a:ad:49:fc:6b:7f:d9:80:c9:c7:b1:77: 84:9f:fa:f4:6a:3f:1d:57:dc:86:11:f9:65:9e:df: 59:8b:4b:89:d1:0f:e3:a8:da:65:fa:e4:f0:8b:52: 95:f6:f9:5e:92:5b:d7:98:7b:d4:5f:04:b1:84:7a: aa:03:36:62:96:4e:64:e1:dc:c7:38:04:57:3b:57: 02:97:4c:a8:51:42:7d:e4:47:de:64:82:6d:a3:d9: db:e6:c7:5b:2f:73:a6:42:ef:82:7b:54:57:67:2f: 0a:e7:80:aa:b8:7e:7e:0c:48:34:5f:14:bf:da:41: 7f:24:4d:64:5e:e9:77:1c:5d:4d:a9:b2:0c:97:a6: f7:e5:72:43:80:a8:67:db:ca:b2:ef:f5:f7:74:ef: 87:74:56:56:cb:9d:46:f7:56:48:63:d7:19:71:8f: 8d:45:13:b5:05:fb:08:1f:3b:fb:cd:84:64:78:b6: 2d:47:da:88:49:5b:de:05:2a:97:fc:d8:c5:25:2f: 61:14:e3:a6:1d:da:64:ce:a2:00:f3:10:61:39:31: fb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F2:2C:8A:A5:D0:2C:C4:EE:88:96:47:10:07:06:5C:2C:67:67:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d851fbe8-225a-3c6f-8e78-4c283a99fd68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:da:4c:24:b4:db:8a:c1:a1:e6:d0:a1:60:7d:60:c1:40:c0: ee:87:fd:c6:70:26:29:ea:61:ea:78:45:0d:58:84:ef:a1:b7: 5a:7b:7d:13:d9:14:db:eb:a2:69:66:c2:21:aa:52:6f:5b:ae: bb:6a:8e:58:7e:fa:d7:62:1e:db:54:2e:63:b5:f0:7a:43:8c: 1a:41:80:3c:83:8f:4d:cb:8f:7e:6d:ba:66:a3:dc:d6:2d:47: 26:5b:86:1e:ab:06:50:09:8c:94:96:ee:49:80:9f:7c:9d:ef: a2:7a:37:a1:9d:7f:e4:1b:19:fe:37:3f:30:d1:83:6f:ca:55: c0:d3:c4:15:c0:20:87:ed:73:ad:31:f7:94:c8:aa:ca:17:c4: 69:d3:a1:4c:a2:03:c3:cd:18:30:39:ca:68:41:88:5f:35:52: 2a:5a:8f:61:20:75:4b:ec:b3:f5:39:29:1f:34:bf:9e:5f:a8: f2:03:bb:a3:ae:c8:c0:7c:bf:c3:49:a6:f3:49:4b:21:71:bc: 30:e4:58:37:cd:4f:1d:bf:9c:f0:81:d5:76:6e:df:a7:30:3d: 3e:1f:d8:e7:13:09:ae:a1:d4:d5:ab:61:c3:da:f4:f1:7a:90: 70:db:59:85:a4:18:82:10:3f:09:6f:4a:56:76:f5:e2:7a:06: de:16:12:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelmPEPqmUD0itClQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk ODk0MTBmMWQtZGNkYy00NGI5LWI4ZDgtNmI0OWZlMzg5YTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx466Q3Pt8q/oAn518JN/g0IuTfF+fR7b51U iwJWMsMdFpExze+Vs6F68bErK9MqrUn8a3/ZgMnHsXeEn/r0aj8dV9yGEfllnt9Z i0uJ0Q/jqNpl+uTwi1KV9vleklvXmHvUXwSxhHqqAzZilk5k4dzHOARXO1cCl0yo UUJ95EfeZIJto9nb5sdbL3OmQu+Ce1RXZy8K54CquH5+DEg0XxS/2kF/JE1kXul3 HF1NqbIMl6b35XJDgKhn28qy7/X3dO+HdFZWy51G91ZIY9cZcY+NRRO1BfsIHzv7 zYRkeLYtR9qISVveBSqX/NjFJS9hFOOmHdpkzqIA8xBhOTH7OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHyLIql0CzE7oiWRxAHBlwsZ2eXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDg1MWZiZTgtMjI1YS0z YzZmLThlNzgtNGMyODNhOTlmZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATaTCS024rBoebQoWB9YMFAwO6H/cZwJinqYep4RQ1YhO+ht1p7fRPZ FNvromlmwiGqUm9brrtqjlh++tdiHttULmO18HpDjBpBgDyDj03Lj35tumaj3NYt RyZbhh6rBlAJjJSW7kmAn3yd76J6N6Gdf+QbGf43PzDRg2/KVcDTxBXAIIftc60x 95TIqsoXxGnToUyiA8PNGDA5ymhBiF81Uipaj2EgdUvss/U5KR80v55fqPIDu6Ou yMB8v8NJpvNJSyFxvDDkWDfNTx2/nPCB1XZu36cwPT4f2OcTCa6h1NWrYcPa9PF6 kHDbWYWkGIIQPwlvSlZ29eJ6Bt4WEls= -----END CERTIFICATE-----Generated at Mon Aug 4 19:17:36 2025 by rpki-client