$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7156ddac-0037-381d-b03c-e9232ac59dea.roa File: 7156ddac-0037-381d-b03c-e9232ac59dea.roa (raw, json) Hash identifier: VX4dhWZMnIl+u2WcO8dKO0/eMTLl74qLRlTa5kV1ljU= Subject key identifier: 5E:C1:D8:D5:45:C9:E4:D2:7A:69:5F:60:D7:B5:06:48:05:8B:72:F2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A71EB55634624F72C00DD8500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7156ddac-0037-381d-b03c-e9232ac59dea.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 8069 IP address blocks: 20.33.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:55:63:46:24:f7:2c:00:dd:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=1c033e40-9be7-438e-80e8-cd2501fa8f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bc:b6:7b:3d:ad:52:3a:22:36:24:89:01:1f: 23:f6:13:c8:e9:17:12:a2:9b:c5:82:16:96:6e:43: ed:07:e4:a2:2b:7a:da:19:0b:95:8a:d9:ea:79:9b: f6:d3:cf:31:c1:2e:b7:a6:02:82:19:91:41:0f:78: 4e:53:3d:34:4b:73:0b:4a:23:11:63:b2:ba:f7:e2: 95:9b:d9:ca:b2:05:6e:34:89:b5:67:a9:27:aa:80: 65:a7:83:5f:6f:79:77:dd:77:23:d6:c9:57:f5:64: 4e:fc:47:97:a9:fb:49:27:1c:65:5c:b8:ec:76:14: aa:3d:90:68:cc:5a:dc:b0:b2:d7:9b:ed:51:13:f2: 26:9e:01:f6:74:78:cc:cc:0b:01:3e:7a:01:d1:da: 9c:ae:c6:80:8b:8b:1b:02:65:76:29:b0:e6:af:46: d1:7c:f7:45:bb:17:cb:ce:49:2c:a4:d7:0e:d7:95: 7a:ae:f7:2b:ed:22:00:aa:e8:d1:7a:6c:55:3b:fc: 1b:b2:8a:34:a9:bf:0e:2d:e1:73:85:a0:c6:d9:3e: a7:af:11:ee:0f:9f:89:2d:d0:3d:0a:8b:1a:51:31: 31:36:ed:bc:74:d8:7c:f7:65:bd:8c:61:90:fb:3e: 98:c9:21:d4:e3:22:7c:51:1b:34:68:2b:64:c7:d1: da:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C1:D8:D5:45:C9:E4:D2:7A:69:5F:60:D7:B5:06:48:05:8B:72:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7156ddac-0037-381d-b03c-e9232ac59dea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:8b:9f:27:bc:44:3b:91:2b:33:d5:fb:13:20:6a:aa:0f:92: 54:d2:cc:53:fb:1a:8b:f3:41:a0:19:ca:a7:20:e9:cc:d4:92: dc:10:c3:c7:af:6a:3d:56:6f:7f:7a:b7:18:e7:ff:9d:cf:7a: 58:98:ae:dd:ea:6f:7d:14:b4:ff:a9:cd:07:df:c2:99:c9:9d: 7b:15:6c:a4:3d:3b:c5:13:a9:5a:8f:b4:e6:35:e8:f4:d2:13: 23:b5:68:64:0c:fd:6e:23:52:39:37:ba:f3:04:ac:35:21:84: ca:04:af:49:22:04:b2:06:96:e2:f0:7a:ae:55:9a:01:53:e2: 63:e3:84:3d:f7:fe:19:66:84:cc:6b:a6:8c:4a:b8:90:3b:a1: ba:e9:db:b2:eb:c0:c5:18:fd:76:ae:27:b2:3e:ed:6d:99:2a: bd:8c:63:75:75:3d:17:16:35:ab:c9:28:09:0e:3b:9e:d1:d2: 12:27:6f:30:95:09:b8:5b:88:82:c0:a0:ef:78:ef:d6:16:02: b2:f9:0c:32:23:8d:51:5b:a3:62:e8:47:84:0e:81:54:ab:24: 18:ea:44:34:64:11:55:1d:fe:7d:b9:2f:5f:00:52:0e:aa:8c: 26:79:7b:3e:a8:84:46:7b:78:53:88:00:38:c0:b2:20:6e:72: a5:31:cf:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx61VjRiT3LADdhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk MWMwMzNlNDAtOWJlNy00MzhlLTgwZTgtY2QyNTAxZmE4ZjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiby2ez2tUjoiNiSJAR8j9hPI6RcSopvFghaW bkPtB+SiK3raGQuVitnqeZv2088xwS63pgKCGZFBD3hOUz00S3MLSiMRY7K69+KV m9nKsgVuNIm1Z6knqoBlp4Nfb3l33Xcj1slX9WRO/EeXqftJJxxlXLjsdhSqPZBo zFrcsLLXm+1RE/ImngH2dHjMzAsBPnoB0dqcrsaAi4sbAmV2KbDmr0bRfPdFuxfL zkkspNcO15V6rvcr7SIAqujRemxVO/wbsoo0qb8OLeFzhaDG2T6nrxHuD5+JLdA9 CosaUTExNu28dNh892W9jGGQ+z6YySHU4yJ8URs0aCtkx9HakwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7B2NVFyeTSemlfYNe1BkgFi3LyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzE1NmRkYWMtMDAzNy0z ODFkLWIwM2MtZTkyMzJhYzU5ZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCEKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWLnye8RDuRKzPV+xMgaqoPklTSzFP7GovzQaAZyqcg6czUktwQw8ev aj1Wb396txjn/53PeliYrt3qb30UtP+pzQffwpnJnXsVbKQ9O8UTqVqPtOY16PTS EyO1aGQM/W4jUjk3uvMErDUhhMoEr0kiBLIGluLweq5VmgFT4mPjhD33/hlmhMxr poxKuJA7obrp27LrwMUY/XauJ7I+7W2ZKr2MY3V1PRcWNavJKAkOO57R0hInbzCV CbhbiILAoO9479YWArL5DDIjjVFbo2LoR4QOgVSrJBjqRDRkEVUd/n25L18AUg6q jCZ5ez6ohEZ7eFOIADjAsiBucqUxz0Q= -----END CERTIFICATE-----Generated at Thu Jul 10 02:46:18 2025 by rpki-client