$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfc48a13-8ef5-3e8c-a89e-d0cca5676ba0.roa File: cfc48a13-8ef5-3e8c-a89e-d0cca5676ba0.roa (raw, json) Hash identifier: xDl4UR9Sr4pUVjAUtli7P8Gkdl1AJUAVT/8Lj6LleK8= Subject key identifier: 13:70:1E:7A:32:02:5E:D2:02:A2:AB:05:F3:A6:DE:D2:9A:29:10:21 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A5B95B56B5E380C3323BBE980 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfc48a13-8ef5-3e8c-a89e-d0cca5676ba0.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:b5:6b:5e:38:0c:33:23:bb:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=04a17682-4d83-40a9-adf1-6667f9657c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:28:f6:bc:24:fd:9c:2e:c8:0e:11:a3:fc:19: 04:38:b7:7a:0a:a4:a4:c9:0d:70:83:2f:46:2f:f1: cc:3d:00:b9:d5:63:4c:09:39:ec:81:90:e0:a3:ef: f5:0b:64:de:5a:25:27:40:a5:aa:30:7b:ae:76:ec: 45:2e:d4:b5:bf:e7:0d:66:f6:37:ab:a5:1d:0e:4b: 89:27:00:a2:03:a2:68:f0:f9:bb:eb:bc:c5:47:80: f6:76:34:99:16:6b:bd:a7:d5:50:7b:e4:9c:74:25: 54:0f:1e:26:4f:ca:a0:47:ec:d5:28:38:6e:8a:e9: a1:62:ce:09:01:19:dc:b0:2d:33:0a:33:a4:57:b7: db:74:ef:f1:0c:fa:ad:bf:75:d0:5a:27:77:14:ae: 0c:3b:cf:26:bd:34:dc:b1:d9:49:06:b0:67:cd:65: 49:bc:2f:d5:1b:df:d3:b3:e8:ed:20:ac:28:e7:3f: 1a:ee:4e:55:89:8b:1a:72:f5:38:b2:f6:96:f2:6c: e5:47:00:82:fc:33:63:3a:f2:73:11:0e:83:df:03: 43:f3:eb:84:b3:1d:7d:2b:04:2e:28:59:5e:0b:20: f1:2f:78:21:47:11:7b:36:95:b4:fd:19:97:aa:2a: c8:8d:cd:cd:68:9e:a5:c2:74:30:63:eb:60:94:b9: 43:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:70:1E:7A:32:02:5E:D2:02:A2:AB:05:F3:A6:DE:D2:9A:29:10:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfc48a13-8ef5-3e8c-a89e-d0cca5676ba0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:3e:43:ab:d0:e7:b2:1c:7b:20:1f:77:73:65:59:fb:ce:2f: 99:60:07:19:22:9e:84:0d:31:7a:a1:11:26:45:0d:89:97:54: 29:10:dc:cc:7d:25:48:e4:d9:75:b7:1a:42:45:f7:55:36:13: 9e:21:70:65:37:37:cd:6b:07:49:b7:ee:a5:ba:35:09:b4:d2: a8:32:88:03:4e:f7:16:47:f7:f2:98:4b:3d:d1:21:69:12:25: e5:0e:e2:3b:88:e1:24:5e:6c:70:fe:fa:ca:b1:c1:12:0c:31: 90:22:fd:dc:a3:22:02:e4:56:c2:80:4a:9f:ad:96:67:6e:92: 9c:d4:a6:e7:28:dd:07:0d:90:93:c5:73:b7:9c:40:45:f2:65: c6:25:e3:1c:ce:39:03:54:61:87:2d:68:8e:97:8e:dd:e8:c4: 0f:95:fc:06:32:27:98:99:19:37:d8:eb:0d:31:6f:48:a1:47: eb:57:fe:cb:36:a8:52:7f:ff:f5:6d:07:26:0b:48:f1:17:38: e7:cf:49:3e:76:59:80:59:5b:8d:ec:f9:d2:5d:86:c7:88:b0: ab:ba:5a:d4:54:d2:b0:2e:32:9c:1d:11:96:7c:21:3a:0c:4c: 5a:1f:37:cc:26:a4:fc:a8:da:35:8c:39:b8:5e:c2:73:31:16: 1d:21:7a:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpblbVrXjgMMyO76YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk MDRhMTc2ODItNGQ4My00MGE5LWFkZjEtNjY2N2Y5NjU3YzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiij2vCT9nC7IDhGj/BkEOLd6CqSkyQ1wgy9G L/HMPQC51WNMCTnsgZDgo+/1C2TeWiUnQKWqMHuuduxFLtS1v+cNZvY3q6UdDkuJ JwCiA6Jo8Pm767zFR4D2djSZFmu9p9VQe+ScdCVUDx4mT8qgR+zVKDhuiumhYs4J ARncsC0zCjOkV7fbdO/xDPqtv3XQWid3FK4MO88mvTTcsdlJBrBnzWVJvC/VG9/T s+jtIKwo5z8a7k5ViYsacvU4svaW8mzlRwCC/DNjOvJzEQ6D3wND8+uEsx19KwQu KFleCyDxL3ghRxF7NpW0/RmXqirIjc3NaJ6lwnQwY+tglLlDIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNwHnoyAl7SAqKrBfOm3tKaKRAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2ZjNDhhMTMtOGVmNS0z ZThjLWE4OWUtZDBjY2E1Njc2YmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAg+Q6vQ57IceyAfd3NlWfvOL5lgBxkinoQNMXqhESZFDYmXVCkQ3Mx9 JUjk2XW3GkJF91U2E54hcGU3N81rB0m37qW6NQm00qgyiANO9xZH9/KYSz3RIWkS JeUO4juI4SRebHD++sqxwRIMMZAi/dyjIgLkVsKASp+tlmdukpzUpuco3QcNkJPF c7ecQEXyZcYl4xzOOQNUYYctaI6Xjt3oxA+V/AYyJ5iZGTfY6w0xb0ihR+tX/ss2 qFJ///VtByYLSPEXOOfPST52WYBZW43s+dJdhseIsKu6WtRU0rAuMpwdEZZ8IToM TFofN8wmpPyo2jWMObhewnMxFh0helY= -----END CERTIFICATE-----Generated at Thu Jul 10 00:48:21 2025 by rpki-client