$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/13685917-b747-38e7-b217-bfb35c42a823.roa File: 13685917-b747-38e7-b217-bfb35c42a823.roa (raw, json) Hash identifier: w5dQFFwdnjPUxly21QAaDxzWMthoNamOBuNaIyBfB7Y= Subject key identifier: A7:84:6A:96:46:92:D3:7C:90:1F:4B:1F:2B:24:1E:D7:0A:7A:64:9B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AC0164D5F9D3C415F84A4EB80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/13685917-b747-38e7-b217-bfb35c42a823.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 8069 IP address blocks: 20.33.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:4d:5f:9d:3c:41:5f:84:a4:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=87a63e85-4368-4383-a8aa-37ac9a438486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9c:93:57:f3:8e:76:b5:02:f1:de:41:10:21: 39:df:53:65:ff:63:17:7e:5e:af:01:b2:9a:3a:e9: c3:06:d2:bf:95:40:52:c0:d0:da:e0:f1:20:cb:d5: 34:4d:a7:ce:cb:df:f9:38:23:ef:f4:7a:13:71:14: 69:03:83:ca:21:51:6f:24:a5:57:fc:2c:93:fc:1c: b8:f4:18:6f:83:ab:6d:1a:8c:82:29:f0:c7:ba:4f: 7b:19:49:5c:b6:97:1f:1c:de:3d:ba:08:06:c2:28: 09:6e:b2:f0:1f:94:4b:11:bc:bb:bf:6c:07:fb:4d: f8:87:8d:b2:07:9c:3f:38:db:dd:c1:7b:ea:d0:d6: 76:93:e9:5d:10:9b:98:44:9a:70:3f:8d:c6:43:84: 7c:02:5a:fd:6a:7a:27:e7:ef:62:e2:ce:d1:8e:d8: 8e:dc:f6:1c:ff:05:77:33:d8:ea:7c:05:9d:ab:a0: a0:a3:85:64:64:ae:98:3d:5d:19:7a:6e:01:d7:c0: 1c:f7:19:02:14:2f:3b:0b:40:d6:a1:26:47:c5:12: d3:8a:fb:81:c8:fb:81:3c:eb:b7:d9:0a:5f:fc:01: 3d:6d:f6:c4:3a:41:5a:64:ec:bb:f1:24:c8:54:7b: db:48:bb:c7:e9:7a:a2:ce:31:1f:53:df:47:54:ad: db:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:84:6A:96:46:92:D3:7C:90:1F:4B:1F:2B:24:1E:D7:0A:7A:64:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/13685917-b747-38e7-b217-bfb35c42a823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:c4:7a:d6:72:c5:a2:a7:c7:bd:45:1d:ff:b8:23:41:bc:c7: f2:e5:5d:93:d3:0a:c0:e2:56:bb:77:d9:d7:d5:19:00:57:de: 32:26:e2:b3:5d:11:91:bc:96:a4:a8:74:d6:79:28:dd:93:b7: 17:ca:6b:32:60:05:c1:40:9c:13:86:4f:54:a7:b4:79:9c:4a: ea:f6:86:c4:7f:99:e8:c1:0a:35:05:41:0e:47:74:75:3d:23: d3:cb:65:1a:ce:ba:24:83:36:b3:4b:ff:90:d6:cd:fe:fa:0a: 11:44:c8:bf:13:43:ec:54:0e:ae:0a:02:47:94:5a:fb:1c:22: 16:8f:2c:30:65:97:52:22:d0:bb:00:72:9f:9a:3a:ef:ed:0b: ab:ed:91:57:6f:90:7b:ed:07:c0:11:65:6a:cb:49:6d:8b:02: d4:ce:a5:e3:18:44:ff:39:39:83:73:4b:11:4d:f6:6d:74:39: 0d:fe:97:6e:b9:c0:fa:a5:70:05:46:e3:c3:c3:72:77:a0:b0: 08:62:d3:49:53:06:fe:1c:56:9a:e9:10:fa:88:43:6d:ad:31: 09:a1:02:9c:85:b9:7b:a0:11:af:ca:44:e5:b0:c2:d8:6f:ba: f7:6b:a5:c0:e3:51:f3:5f:2c:c1:0a:40:30:70:ad:41:ad:69: 55:d3:2f:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFk1fnTxBX4Sk64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk ODdhNjNlODUtNDM2OC00MzgzLWE4YWEtMzdhYzlhNDM4NDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJyTV/OOdrUC8d5BECE531Nl/2MXfl6vAbKa OunDBtK/lUBSwNDa4PEgy9U0TafOy9/5OCPv9HoTcRRpA4PKIVFvJKVX/CyT/By4 9Bhvg6ttGoyCKfDHuk97GUlctpcfHN49uggGwigJbrLwH5RLEby7v2wH+034h42y B5w/ONvdwXvq0NZ2k+ldEJuYRJpwP43GQ4R8Alr9anon5+9i4s7RjtiO3PYc/wV3 M9jqfAWdq6Cgo4VkZK6YPV0Zem4B18Ac9xkCFC87C0DWoSZHxRLTivuByPuBPOu3 2Qpf/AE9bfbEOkFaZOy78STIVHvbSLvH6XqizjEfU99HVK3bYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKeEapZGktN8kB9LHyskHtcKemSbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTM2ODU5MTctYjc0Ny0z OGU3LWIyMTctYmZiMzVjNDJhODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzEetZyxaKnx71FHf+4I0G8x/LlXZPTCsDiVrt32dfVGQBX3jIm4rNd EZG8lqSodNZ5KN2TtxfKazJgBcFAnBOGT1SntHmcSur2hsR/mejBCjUFQQ5HdHU9 I9PLZRrOuiSDNrNL/5DWzf76ChFEyL8TQ+xUDq4KAkeUWvscIhaPLDBll1Ii0LsA cp+aOu/tC6vtkVdvkHvtB8ARZWrLSW2LAtTOpeMYRP85OYNzSxFN9m10OQ3+l265 wPqlcAVG48PDcnegsAhi00lTBv4cVprpEPqIQ22tMQmhApyFuXugEa/KROWwwthv uvdrpcDjUfNfLMEKQDBwrUGtaVXTL1o= -----END CERTIFICATE-----Generated at Tue Aug 5 16:48:02 2025 by rpki-client