$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e5a45b9-c391-3cb7-bd4d-c9ab44dcbe4d.roa File: 6e5a45b9-c391-3cb7-bd4d-c9ab44dcbe4d.roa (raw, json) Hash identifier: E4b0rflZeS+gekoTxoNDYX6CVcD6rtUtUFO4KTkNeYI= Subject key identifier: 85:D5:2E:7F:48:EE:E3:21:12:73:C1:0A:98:44:F0:D3:D0:D6:AD:4D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A5B95B611C688B6D5C9A4EA00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e5a45b9-c391-3cb7-bd4d-c9ab44dcbe4d.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:b6:11:c6:88:b6:d5:c9:a4:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=b1ac7aa8-bb28-4704-94bd-3bcbd0c2cc68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:17:e2:c6:c7:47:ce:56:13:0c:7d:37:62:83: 36:1c:8f:e2:68:f4:f1:0b:92:d9:b2:ad:dd:ff:78: 3d:2e:b5:25:b2:5c:dd:8e:8e:39:97:68:db:28:61: 0b:e1:76:be:15:fb:49:5c:4f:f6:f7:51:ed:5e:a6: f6:59:ae:f7:09:1d:a7:c7:fa:fa:5e:89:58:78:a5: bb:b5:67:3e:1d:e0:12:ea:99:b7:f0:a6:91:7c:ee: 8e:04:61:41:7a:ac:8d:22:29:42:5a:98:6c:d9:d9: 53:0a:bc:e9:ca:2e:f7:2d:bd:f3:4c:d5:af:17:68: ec:cb:f2:93:c8:18:cb:5f:50:58:58:4b:b5:2a:04: 1c:ef:ed:aa:01:f0:52:de:22:00:9a:fb:e1:ac:7d: b4:b5:26:6c:a6:87:cd:3b:dc:51:c0:49:a8:cd:e1: cd:65:8e:a9:9c:15:6f:81:12:28:79:c1:83:89:97: 6d:3a:74:51:20:7a:42:98:19:5a:0e:ea:47:24:a7: 35:06:4d:9d:62:39:21:2e:6c:fd:0e:e7:f4:f4:06: f8:cd:dc:f6:09:d1:af:c9:94:d0:87:f1:9f:30:ba: ed:ea:64:1b:2c:f6:d7:a4:bb:d1:db:8c:65:5c:3f: fb:1d:b0:b9:ff:80:22:81:ee:72:59:fe:80:49:93: 67:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D5:2E:7F:48:EE:E3:21:12:73:C1:0A:98:44:F0:D3:D0:D6:AD:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e5a45b9-c391-3cb7-bd4d-c9ab44dcbe4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:6b:76:75:6b:d7:9f:0c:4d:74:49:f0:17:50:86:21:36:5f: db:90:4b:62:fe:40:fb:95:6b:90:96:fe:d9:cd:b9:62:cd:f7: 0d:46:a1:ab:cd:11:ad:3e:eb:3e:81:a4:a7:d7:dd:0a:9d:e9: ac:3f:75:32:16:63:13:8a:f5:fd:a5:d7:c7:ff:dd:f8:54:8d: 45:c3:a4:c1:27:23:15:de:a8:9b:f4:1c:a1:ea:fa:32:55:74: 7c:f9:69:7f:99:16:26:fd:43:48:37:00:d5:94:84:39:cf:95: d6:b1:c7:36:ef:f6:e1:8c:16:89:03:ed:3f:ba:7f:84:14:e6: 62:dd:d1:d5:72:cc:25:87:d9:25:35:58:0b:6a:69:5e:5e:21: 48:4d:82:90:7d:67:90:55:7a:71:1e:c8:f7:c6:05:38:4e:27: 9f:92:e3:02:27:8b:7b:d2:2a:ef:d7:4a:8e:64:e3:c1:32:30: 09:31:40:51:ec:26:1d:51:cb:8e:bc:27:b7:3f:17:61:5d:6f: ab:78:77:4f:42:85:f3:3b:29:fe:38:51:94:3a:1b:8b:fb:3f: 33:18:47:40:a2:28:68:b8:eb:44:2f:7d:18:50:12:82:6b:c5: 05:2d:a3:75:35:a2:0d:87:02:78:b4:a1:37:a9:2d:8b:9c:b4: d6:f0:19:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpblbYRxoi21cmk6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk YjFhYzdhYTgtYmIyOC00NzA0LTk0YmQtM2JjYmQwYzJjYzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRfixsdHzlYTDH03YoM2HI/iaPTxC5LZsq3d /3g9LrUlslzdjo45l2jbKGEL4Xa+FftJXE/291HtXqb2Wa73CR2nx/r6XolYeKW7 tWc+HeAS6pm38KaRfO6OBGFBeqyNIilCWphs2dlTCrzpyi73Lb3zTNWvF2jsy/KT yBjLX1BYWEu1KgQc7+2qAfBS3iIAmvvhrH20tSZspofNO9xRwEmozeHNZY6pnBVv gRIoecGDiZdtOnRRIHpCmBlaDupHJKc1Bk2dYjkhLmz9Duf09Ab4zdz2CdGvyZTQ h/GfMLrt6mQbLPbXpLvR24xlXD/7HbC5/4Aige5yWf6ASZNnVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXVLn9I7uMhEnPBCphE8NPQ1q1NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmU1YTQ1YjktYzM5MS0z Y2I3LWJkNGQtYzlhYjQ0ZGNiZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNrdnVr158MTXRJ8BdQhiE2X9uQS2L+QPuVa5CW/tnNuWLN9w1GoavN Ea0+6z6BpKfX3Qqd6aw/dTIWYxOK9f2l18f/3fhUjUXDpMEnIxXeqJv0HKHq+jJV dHz5aX+ZFib9Q0g3ANWUhDnPldaxxzbv9uGMFokD7T+6f4QU5mLd0dVyzCWH2SU1 WAtqaV5eIUhNgpB9Z5BVenEeyPfGBThOJ5+S4wIni3vSKu/XSo5k48EyMAkxQFHs Jh1Ry468J7c/F2Fdb6t4d09ChfM7Kf44UZQ6G4v7PzMYR0CiKGi460QvfRhQEoJr xQUto3U1og2HAni0oTepLYuctNbwGaU= -----END CERTIFICATE-----Generated at Thu Jul 10 13:53:13 2025 by rpki-client