$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/35b9c925-cda6-3421-a583-d46714bddd70.roa File: 35b9c925-cda6-3421-a583-d46714bddd70.roa (raw, json) Hash identifier: h7xE+e9sjNVjBgJNFNATPCsWHnodYtIopPlwWsv1U2I= Subject key identifier: B5:A7:7E:16:0A:3F:AD:01:09:FB:6D:1C:DD:49:CB:35:6F:7D:BA:AC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A9900CB76815E041ED0B4C3A8 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/35b9c925-cda6-3421-a583-d46714bddd70.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:cb:76:81:5e:04:1e:d0:b4:c3:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=af67e5ea-4dc9-4cd5-aaa8-131f67ddc274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ea:d2:d2:9e:3a:39:ca:82:d9:14:80:46:38: 1c:7c:d9:13:92:33:a9:ac:f7:71:5c:f4:7c:2b:67: 4d:60:1b:dd:9f:bf:89:d1:49:c2:bd:c4:90:d5:71: 74:e8:bc:4f:39:36:6c:12:17:2c:8b:53:83:88:70: e6:92:8f:3c:58:0b:cc:f4:0b:fe:85:49:fc:3c:82: 07:12:13:a0:a8:07:b4:61:77:02:5a:a0:92:51:a2: 74:b1:15:13:75:0c:ae:67:87:79:d6:70:37:47:8e: 33:d6:bb:96:c8:93:67:d2:8e:dc:4c:ca:0f:21:23: fd:18:02:22:07:56:53:78:76:fc:26:9e:83:50:b7: 67:3b:e6:97:b7:77:51:9b:ec:c8:4c:3b:df:98:36: ad:0f:c9:14:c8:bb:d4:7f:d1:dc:8c:fd:d3:9c:9c: b4:85:fe:2a:7c:48:9a:1e:41:50:2f:cb:bf:e5:c2: 04:34:c8:05:2e:38:c4:e4:c9:0b:77:45:c9:0a:0e: b3:70:4c:4a:2b:f8:e1:2b:1f:b0:b9:69:28:1a:99: 0f:04:30:0d:07:a6:7c:3d:7e:b8:ec:8f:ed:fa:7a: 3f:64:e1:a2:36:c7:b6:a1:29:b4:68:6a:29:0b:19: bf:0a:49:68:a4:d1:24:df:2e:07:e9:06:a8:a5:b4: 98:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A7:7E:16:0A:3F:AD:01:09:FB:6D:1C:DD:49:CB:35:6F:7D:BA:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/35b9c925-cda6-3421-a583-d46714bddd70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:34:5d:6e:79:61:53:14:36:92:3e:d5:5d:59:ea:26:ba:fb: 08:2b:46:59:fe:0f:e9:34:02:b7:37:4d:3c:14:a6:49:54:67: c5:e4:74:94:bf:ca:60:80:b1:c0:af:9c:39:7f:d9:14:f7:f0: d3:e3:16:f7:36:a4:94:25:45:2e:dc:1a:49:bf:80:39:3a:f0: 4c:f7:b2:0c:f5:91:1c:ce:4b:75:75:59:ed:fe:56:b0:48:59: 2b:56:bc:5b:9f:15:b5:f7:ff:e5:79:45:25:37:00:56:e4:a9: 5f:d1:77:c1:26:3f:51:07:bd:f5:73:f2:d1:f9:99:92:72:d9: 69:db:b7:ea:e0:48:57:0d:28:82:52:8a:91:cf:16:51:83:9e: 4d:a8:5a:82:8b:a5:4e:fa:52:f0:16:62:31:51:06:1b:fd:9f: 18:38:2b:33:f9:2d:db:ec:6a:ea:f6:ff:14:45:2e:5e:7f:71: 09:1e:1e:96:f1:f7:ea:da:6a:ce:92:8f:37:db:88:fd:39:af: 1f:cd:87:a3:1f:37:40:30:83:ee:fb:28:ce:b4:db:5f:3e:b1: 8e:2d:b9:4c:8d:5c:ad:95:c1:38:7f:38:4e:3c:da:0a:7f:04: 6f:4c:ee:1c:23:a4:4e:ea:8b:95:f8:d1:a0:71:4c:43:e1:98: 29:51:3c:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMt2gV4EHtC0w6gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk YWY2N2U1ZWEtNGRjOS00Y2Q1LWFhYTgtMTMxZjY3ZGRjMjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAterS0p46OcqC2RSARjgcfNkTkjOprPdxXPR8 K2dNYBvdn7+J0UnCvcSQ1XF06LxPOTZsEhcsi1ODiHDmko88WAvM9Av+hUn8PIIH EhOgqAe0YXcCWqCSUaJ0sRUTdQyuZ4d51nA3R44z1ruWyJNn0o7cTMoPISP9GAIi B1ZTeHb8Jp6DULdnO+aXt3dRm+zITDvfmDatD8kUyLvUf9HcjP3TnJy0hf4qfEia HkFQL8u/5cIENMgFLjjE5MkLd0XJCg6zcExKK/jhKx+wuWkoGpkPBDANB6Z8PX64 7I/t+no/ZOGiNse2oSm0aGopCxm/CklopNEk3y4H6QaopbSYkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWnfhYKP60BCfttHN1JyzVvfbqsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzViOWM5MjUtY2RhNi0z NDIxLWE1ODMtZDQ2NzE0YmRkZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCESMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABI0XW55YVMUNpI+1V1Z6ia6+wgrRln+D+k0Arc3TTwUpklUZ8XkdJS/ ymCAscCvnDl/2RT38NPjFvc2pJQlRS7cGkm/gDk68Ez3sgz1kRzOS3V1We3+VrBI WStWvFufFbX3/+V5RSU3AFbkqV/Rd8EmP1EHvfVz8tH5mZJy2Wnbt+rgSFcNKIJS ipHPFlGDnk2oWoKLpU76UvAWYjFRBhv9nxg4KzP5Ldvsaur2/xRFLl5/cQkeHpbx 9+raas6SjzfbiP05rx/Nh6MfN0Awg+77KM60218+sY4tuUyNXK2VwTh/OE482gp/ BG9M7hwjpE7qi5X40aBxTEPhmClRPJg= -----END CERTIFICATE-----Generated at Wed Aug 6 05:13:51 2025 by rpki-client