$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fee36d8c-ea50-3844-9ead-d050392cf847.roa File: fee36d8c-ea50-3844-9ead-d050392cf847.roa (raw, json) Hash identifier: 56ms+eW4xm+Tc9CjSJ0ONLZT1kMJ/0OI6F3d2EOjrIk= Subject key identifier: D6:6B:CC:3D:81:EB:73:F7:E4:4C:0A:01:71:3F:58:C2:57:44:60:AA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AC0164D3BD3678FD3DAEF8980 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fee36d8c-ea50-3844-9ead-d050392cf847.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 8069 IP address blocks: 20.33.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:4d:3b:d3:67:8f:d3:da:ef:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=bbffd8e8-01da-415d-8269-9771787cc741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:72:5c:35:5f:56:89:99:4a:46:84:e5:73:9a: 2d:60:53:23:d9:96:7a:1f:75:4b:f5:a6:ed:96:49: a6:72:d5:a5:4c:93:3b:c7:39:26:c6:4e:0c:94:57: 8c:7e:76:71:21:6a:6d:35:39:6d:73:c6:5b:fa:8a: 6b:67:62:4b:ba:a0:0c:3d:83:bb:0e:a5:09:0f:f0: 48:5f:bb:3b:7d:b4:21:4e:95:f3:da:05:a5:56:4f: d7:a4:36:81:99:0a:68:2f:a8:e9:4d:6d:35:23:37: dc:49:50:16:d8:a9:86:4b:e7:f6:06:5b:f4:da:87: db:23:f4:54:e7:78:f7:5d:cf:57:ec:5b:b1:62:5e: c4:cf:30:72:af:ff:c6:b5:38:de:fe:f6:ba:80:40: d3:55:67:49:31:63:f1:48:df:1c:d1:22:00:28:ec: 75:e4:dc:9a:d5:51:74:93:71:ee:a6:1a:0d:35:c4: 4e:a8:57:89:d8:18:bd:ce:97:68:10:4c:2b:ea:ad: 98:9c:94:6b:26:d3:15:0d:33:54:b8:97:25:51:a3: 53:2d:70:f7:b9:ca:74:72:6b:3e:27:89:10:c1:3e: 8a:e5:de:4d:3f:1a:c0:b0:c0:75:3b:6d:36:61:1f: 3f:f9:09:c2:23:8a:00:ef:08:71:c6:9b:64:05:df: 63:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6B:CC:3D:81:EB:73:F7:E4:4C:0A:01:71:3F:58:C2:57:44:60:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fee36d8c-ea50-3844-9ead-d050392cf847.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:38:2e:d7:04:fd:f7:9f:bd:32:f3:fc:b3:b4:fd:1f:65:7f: 3d:21:9f:23:6a:58:32:fd:b5:b1:af:ab:c6:6b:2c:09:78:d2: 72:9c:f5:0a:02:e6:c9:06:9f:bb:79:cd:69:0e:0e:29:b8:dd: 7e:15:b7:23:1b:2a:b5:15:93:23:7f:ef:c8:3e:00:ad:0e:77: 8f:39:d4:59:bc:d7:ed:1b:65:6c:63:79:aa:39:fc:e1:39:c3: eb:66:67:2e:f2:0b:8f:62:cc:8b:b8:bb:85:5f:9d:f0:7a:09: a9:cb:0b:2a:15:b5:81:48:d4:90:08:76:35:5d:4a:0f:48:f2: 52:2e:25:57:8c:4c:a4:8b:d9:a2:44:57:6b:34:62:92:83:d9: 82:25:3e:50:2b:39:84:1c:4a:46:5e:58:d9:ba:c3:a0:6a:71: eb:ae:97:b4:1b:52:28:2a:ae:9c:fa:89:7c:e6:94:06:f9:e6: be:a3:fa:32:e4:37:49:71:40:15:9f:4e:4e:b3:91:45:4f:16: c5:75:b5:f1:b0:0e:39:54:fd:2e:08:81:9c:af:d9:e1:2c:bc: 6f:ba:43:f1:a7:44:35:70:d5:18:22:7e:eb:5b:1a:bf:3b:6d: cb:33:87:72:8b:d4:d5:8a:45:d2:ee:20:e1:6c:11:29:4f:83: ae:bd:8f:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFk0702eP09rviYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk YmJmZmQ4ZTgtMDFkYS00MTVkLTgyNjktOTc3MTc4N2NjNzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHJcNV9WiZlKRoTlc5otYFMj2ZZ6H3VL9abt lkmmctWlTJM7xzkmxk4MlFeMfnZxIWptNTltc8Zb+oprZ2JLuqAMPYO7DqUJD/BI X7s7fbQhTpXz2gWlVk/XpDaBmQpoL6jpTW01IzfcSVAW2KmGS+f2Blv02ofbI/RU 53j3Xc9X7FuxYl7EzzByr//GtTje/va6gEDTVWdJMWPxSN8c0SIAKOx15Nya1VF0 k3HuphoNNcROqFeJ2Bi9zpdoEEwr6q2YnJRrJtMVDTNUuJclUaNTLXD3ucp0cms+ J4kQwT6K5d5NPxrAsMB1O202YR8/+QnCI4oA7whxxptkBd9jBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZrzD2B63P35EwKAXE/WMJXRGCqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZmVlMzZkOGMtZWE1MC0z ODQ0LTllYWQtZDA1MDM5MmNmODQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJY4LtcE/fefvTLz/LO0/R9lfz0hnyNqWDL9tbGvq8ZrLAl40nKc9QoC 5skGn7t5zWkODim43X4VtyMbKrUVkyN/78g+AK0Od4851Fm81+0bZWxjeao5/OE5 w+tmZy7yC49izIu4u4VfnfB6CanLCyoVtYFI1JAIdjVdSg9I8lIuJVeMTKSL2aJE V2s0YpKD2YIlPlArOYQcSkZeWNm6w6Bqceuul7QbUigqrpz6iXzmlAb55r6j+jLk N0lxQBWfTk6zkUVPFsV1tfGwDjlU/S4IgZyv2eEsvG+6Q/GnRDVw1RgifutbGr87 bcszh3KL1NWKRdLuIOFsESlPg669j/Q= -----END CERTIFICATE-----Generated at Tue Aug 5 17:22:58 2025 by rpki-client