$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2752a970-d5ff-337c-a051-6b254bb9c802.roa File: 2752a970-d5ff-337c-a051-6b254bb9c802.roa (raw, json) Hash identifier: 53NaXxjmDcgZYcokzPkSRmU/Ygc5OmVgeIvGMzcGoqU= Subject key identifier: DD:39:4E:AE:11:7A:DD:2A:01:88:3D:61:48:BB:C4:C1:50:F1:8F:40 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AB2212B7B79CDB6D4A9520680 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2752a970-d5ff-337c-a051-6b254bb9c802.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 8069 IP address blocks: 20.33.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:2b:7b:79:cd:b6:d4:a9:52:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=0cdc7750-aab9-4631-ab1b-a29425c60696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:50:95:57:db:38:ff:6b:6a:b5:24:04:2b:31: 3e:ef:52:64:f4:35:59:7a:94:f8:66:62:d6:ba:2e: 3b:50:fd:d8:8f:2c:9c:db:2f:69:27:f3:0e:79:ca: 7d:8a:08:5e:9a:b8:71:04:4b:65:34:16:4d:56:94: a2:92:fd:a7:cd:5c:9f:5f:16:98:e4:39:6e:e3:0d: f4:c7:1f:fb:c1:36:92:0e:a4:f5:95:16:b1:69:3a: c6:45:bd:70:91:aa:c5:40:5d:90:5e:58:e4:6e:78: d7:92:14:61:d4:f8:90:89:53:91:2c:27:d8:0d:b6: 07:e2:ae:62:d4:ee:36:2c:f2:0c:f9:85:00:f3:90: fe:93:12:9d:bd:5e:58:91:c0:7a:94:34:97:97:57: b4:00:2d:91:bb:cf:d4:a4:14:c8:0d:79:ad:82:da: ce:81:10:45:0c:7b:8a:38:fb:01:bb:be:53:7c:1c: b0:c4:6a:63:c3:4f:c9:f3:37:f7:d4:2d:2c:27:4c: dc:31:d0:4b:ba:99:fa:44:0d:4b:cf:d4:24:de:34: 70:2c:eb:40:87:34:59:7c:50:65:d3:36:2d:56:05: 48:ee:4a:5b:be:3b:fe:c3:16:46:a8:d9:61:01:f6: 0f:06:84:b3:e1:50:3d:58:d9:3d:06:13:72:50:ae: 18:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:39:4E:AE:11:7A:DD:2A:01:88:3D:61:48:BB:C4:C1:50:F1:8F:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2752a970-d5ff-337c-a051-6b254bb9c802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:0a:f0:20:44:d6:f4:59:e7:95:35:f5:60:c7:18:78:a7:98: 1d:63:52:5b:ce:b7:57:45:4a:aa:48:eb:4e:44:97:d0:05:e3: 06:4e:6d:ca:cc:20:ed:44:42:7d:20:ef:82:6c:e3:09:65:90: 67:07:7c:b5:69:f8:7e:c6:c2:de:ce:5b:b5:8b:6f:8a:17:f9: 26:47:c6:bf:be:e2:d9:ab:7b:af:d0:60:e6:28:42:21:fa:69: 63:03:cf:cb:25:f9:d3:00:f5:05:54:46:ae:9b:a8:0a:84:6d: 00:f8:f3:ff:99:ec:df:10:d3:b3:98:18:78:fb:cc:16:b6:be: 7b:e4:5f:6e:a9:1c:b7:bb:d9:39:22:12:77:91:e8:fe:62:0e: cc:98:9b:0d:e3:08:8e:96:00:df:0b:0b:3f:5d:af:91:fb:d0: 0a:73:fb:cb:5c:b8:87:7f:20:d5:43:57:18:18:0e:ed:63:b8: 8f:1b:84:b0:64:56:cf:21:ad:0e:da:ed:c3:9f:95:09:f6:bc: fc:6c:e1:80:b7:9c:0b:aa:00:96:66:b8:94:05:0b:15:e7:1e: 8d:a3:5d:ce:59:51:61:66:f3:93:ea:46:05:cc:0e:fe:15:63: 51:ce:fd:ab:f7:40:38:db:56:f5:fe:9a:de:f3:02:80:5f:67: b2:01:97:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyISt7ec221KlSBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk MGNkYzc3NTAtYWFiOS00NjMxLWFiMWItYTI5NDI1YzYwNjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFCVV9s4/2tqtSQEKzE+71Jk9DVZepT4ZmLW ui47UP3Yjyyc2y9pJ/MOecp9ighemrhxBEtlNBZNVpSikv2nzVyfXxaY5Dlu4w30 xx/7wTaSDqT1lRaxaTrGRb1wkarFQF2QXljkbnjXkhRh1PiQiVORLCfYDbYH4q5i 1O42LPIM+YUA85D+kxKdvV5YkcB6lDSXl1e0AC2Ru8/UpBTIDXmtgtrOgRBFDHuK OPsBu75TfBywxGpjw0/J8zf31C0sJ0zcMdBLupn6RA1Lz9Qk3jRwLOtAhzRZfFBl 0zYtVgVI7kpbvjv+wxZGqNlhAfYPBoSz4VA9WNk9BhNyUK4YgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN05Tq4Ret0qAYg9YUi7xMFQ8Y9AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjc1MmE5NzAtZDVmZi0z MzdjLWEwNTEtNmIyNTRiYjljODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcK8CBE1vRZ55U19WDHGHinmB1jUlvOt1dFSqpI605El9AF4wZObcrM IO1EQn0g74Js4wllkGcHfLVp+H7Gwt7OW7WLb4oX+SZHxr++4tmre6/QYOYoQiH6 aWMDz8sl+dMA9QVURq6bqAqEbQD48/+Z7N8Q07OYGHj7zBa2vnvkX26pHLe72Tki EneR6P5iDsyYmw3jCI6WAN8LCz9dr5H70Apz+8tcuId/INVDVxgYDu1juI8bhLBk Vs8hrQ7a7cOflQn2vPxs4YC3nAuqAJZmuJQFCxXnHo2jXc5ZUWFm85PqRgXMDv4V Y1HO/av3QDjbVvX+mt7zAoBfZ7IBl7E= -----END CERTIFICATE-----Generated at Mon Aug 4 19:02:58 2025 by rpki-client