$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4394c957-d6d6-3969-9f1f-2829f0301cc7.roa File: 4394c957-d6d6-3969-9f1f-2829f0301cc7.roa (raw, json) Hash identifier: 0efs4nmfq7kNIGLWKQY65ConkzA+M4Owp3sZy5RUbc0= Subject key identifier: 4E:7D:B2:0F:D3:17:8A:C5:B0:0F:7E:53:54:3F:88:EC:DC:0A:15:82 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A9900C9AB6268A9536A7F7D80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4394c957-d6d6-3969-9f1f-2829f0301cc7.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c9:ab:62:68:a9:53:6a:7f:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=8f23cb92-f39c-4d4a-8140-114982921b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2b:62:ac:95:42:f6:98:fe:45:b1:0c:4e:e4: 93:9f:13:df:d6:bc:31:e8:ce:7e:41:11:04:56:33: 7b:2c:f9:20:a9:a9:b8:99:25:3d:60:1e:ab:c6:e1: db:e2:b6:ed:cd:75:c3:e0:c1:aa:d5:d2:f0:ac:c1: c9:b1:ce:42:ea:c1:c6:96:9c:c1:e1:3b:94:da:41: 8b:ad:48:6a:a2:5e:b2:3b:70:f1:75:1e:15:75:ce: 7e:2a:02:5e:e6:65:4f:6d:b5:75:6a:d4:ad:96:f1: b6:3c:45:a3:54:a0:e0:b6:7b:bb:35:a9:d5:3c:25: 65:3e:b6:05:de:7d:3f:d7:ad:79:11:b1:cb:5d:b5: 80:16:28:37:30:5a:8e:e3:4d:cb:ed:9d:35:ca:28: 2f:77:9d:06:4c:7f:54:9c:82:22:74:75:a6:1e:fd: 4a:82:8b:6a:b2:61:d7:53:42:f8:a0:5b:24:5f:96: e9:f4:cf:04:76:61:0d:a6:e6:1c:4d:2b:00:77:61: 85:59:e0:f1:11:a1:b4:83:2b:77:da:de:52:cd:b7: 2f:72:c6:f5:63:41:fe:2a:9f:c0:a3:6d:16:1b:d7: 4e:a1:56:59:cc:d9:89:b0:b7:9a:84:61:42:15:d5: 7e:62:d9:9b:5c:a4:df:33:af:15:24:b5:2b:d0:ac: 02:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7D:B2:0F:D3:17:8A:C5:B0:0F:7E:53:54:3F:88:EC:DC:0A:15:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4394c957-d6d6-3969-9f1f-2829f0301cc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:14:56:c2:83:6f:13:66:87:15:e3:c8:40:bf:62:63:ff:34: b3:ab:da:41:de:0c:d8:f5:ee:ad:1a:58:ff:41:68:ee:51:aa: 9a:8b:b7:4e:76:33:3a:97:b1:9a:7e:04:05:f4:b4:a9:a1:c4: 74:58:03:82:17:75:73:cb:3c:2f:b3:63:b4:d7:68:fb:e1:71: 4a:bc:25:2f:e6:a9:43:95:f7:36:59:0f:35:e4:da:1f:ef:be: af:ac:ec:36:6d:7d:6e:20:86:dc:26:3c:d1:ba:e1:c6:53:78: 60:b4:c0:54:83:95:f4:5e:f9:bb:93:cb:4b:c5:a7:3b:c3:4f: e2:f8:c2:ca:a3:fa:f5:70:63:af:a6:77:34:23:bc:71:df:f7: e7:3a:cd:95:95:cf:66:2f:61:2e:36:ed:ea:f4:32:24:be:11: 5c:8e:67:9f:a6:53:fe:6d:80:2f:86:cf:4d:0b:44:63:e6:5d: 43:5e:63:2c:df:53:10:08:83:31:f8:3d:01:7d:77:87:fd:8f: cf:44:39:e6:67:af:04:24:76:71:d4:6e:d0:04:46:68:f8:32: 52:ff:1c:c8:9d:85:94:4f:e2:10:88:0b:58:63:7b:2c:24:50: 3d:58:92:d4:1c:36:ab:5f:07:d0:e2:8f:8e:f4:ad:52:03:41: f8:fa:26:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMmrYmipU2p/fYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk OGYyM2NiOTItZjM5Yy00ZDRhLTgxNDAtMTE0OTgyOTIxYjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAritirJVC9pj+RbEMTuSTnxPf1rwx6M5+QREE VjN7LPkgqam4mSU9YB6rxuHb4rbtzXXD4MGq1dLwrMHJsc5C6sHGlpzB4TuU2kGL rUhqol6yO3DxdR4Vdc5+KgJe5mVPbbV1atStlvG2PEWjVKDgtnu7NanVPCVlPrYF 3n0/1615EbHLXbWAFig3MFqO403L7Z01yigvd50GTH9UnIIidHWmHv1KgotqsmHX U0L4oFskX5bp9M8EdmENpuYcTSsAd2GFWeDxEaG0gyt32t5Szbcvcsb1Y0H+Kp/A o20WG9dOoVZZzNmJsLeahGFCFdV+YtmbXKTfM68VJLUr0KwChQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE59sg/TF4rFsA9+U1Q/iOzcChWCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDM5NGM5NTctZDZkNi0z OTY5LTlmMWYtMjgyOWYwMzAxY2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUUVsKDbxNmhxXjyEC/YmP/NLOr2kHeDNj17q0aWP9BaO5RqpqLt052 MzqXsZp+BAX0tKmhxHRYA4IXdXPLPC+zY7TXaPvhcUq8JS/mqUOV9zZZDzXk2h/v vq+s7DZtfW4ghtwmPNG64cZTeGC0wFSDlfRe+buTy0vFpzvDT+L4wsqj+vVwY6+m dzQjvHHf9+c6zZWVz2YvYS427er0MiS+EVyOZ5+mU/5tgC+Gz00LRGPmXUNeYyzf UxAIgzH4PQF9d4f9j89EOeZnrwQkdnHUbtAERmj4MlL/HMidhZRP4hCIC1hjeywk UD1YktQcNqtfB9Dij470rVIDQfj6Jgc= -----END CERTIFICATE-----Generated at Mon Aug 4 19:17:19 2025 by rpki-client