$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4426bc50-c7c8-3db9-ba29-a76605eb28e0.roa File: 4426bc50-c7c8-3db9-ba29-a76605eb28e0.roa (raw, json) Hash identifier: D/kSjtq8Vw87OL84kour9cLOqMu+ccRr/YblH3pieOc= Subject key identifier: 3D:E5:CB:1F:CD:50:0F:D3:4C:F6:B8:9D:2C:9F:CB:F0:E3:7C:F0:63 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AA42B906179AEF610CF5EA280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4426bc50-c7c8-3db9-ba29-a76605eb28e0.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.33.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:90:61:79:ae:f6:10:cf:5e:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=d62dff85-8e7c-4000-88e6-21907dd86784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:67:0c:63:7a:18:f9:c2:82:f4:a4:06:61:ab: 4b:13:03:59:a1:cc:e8:72:77:6f:c4:2d:7d:e2:f8: de:c5:3a:4f:92:8b:77:eb:37:34:da:fe:61:13:7c: 56:19:68:26:86:c6:1f:92:49:ba:12:ae:41:15:f8: cb:81:4b:cd:6b:93:e2:b4:f4:9b:2a:d7:f5:d8:43: 7d:64:3b:eb:f8:b9:5a:4d:bd:bd:c3:08:e1:81:e2: 2c:68:57:82:60:ab:f3:a1:0d:b0:5b:4a:e6:ca:ed: e3:cc:3d:48:90:3d:9c:f7:7b:02:66:40:e2:3a:ea: 20:f2:54:c4:88:4d:44:fe:cd:08:97:4b:1a:b0:cc: 21:55:41:20:36:d2:f4:53:b5:d0:06:6b:fe:5d:92: 5f:4a:ed:32:47:50:46:95:96:df:88:77:a6:99:52: 5c:91:60:c4:f5:35:5f:a7:0f:61:c1:cd:80:0c:3e: d8:9b:b3:ec:44:1c:f6:d4:11:89:79:92:1e:56:87: b3:50:48:ab:6c:5f:4e:31:e9:bc:c4:1d:af:67:02: 17:e2:16:aa:b0:e2:2c:86:28:50:af:c1:bf:7e:64: 13:04:6c:cc:53:0d:c9:49:2a:ce:b3:8d:3e:63:6f: bb:b1:bb:16:f3:22:1d:3c:e2:0c:98:08:f2:10:ab: 98:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E5:CB:1F:CD:50:0F:D3:4C:F6:B8:9D:2C:9F:CB:F0:E3:7C:F0:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4426bc50-c7c8-3db9-ba29-a76605eb28e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:6d:a3:cb:f6:75:14:36:3f:11:14:8e:d0:f4:35:7f:c6:95: 76:07:e0:1f:70:01:5f:0c:db:ab:90:b2:63:7b:20:68:6d:d2: 80:62:e4:76:3e:ae:a7:57:22:0e:1f:09:cc:c4:d2:48:b9:3a: ce:4e:bf:ac:1c:08:53:9d:f5:5a:03:7e:ce:97:86:e6:62:ad: 55:8c:3a:58:f0:e2:5d:28:70:a3:4b:98:57:85:1c:1e:9b:3f: 3e:c2:39:75:8e:9b:ab:e3:90:a4:3c:fa:46:9a:df:d3:9f:d9: cd:2b:9e:dd:c5:84:7f:46:cd:fc:8a:4d:37:4c:f9:bd:33:8a: 60:49:a4:6e:df:82:82:04:d8:33:4b:ce:e6:29:86:f8:fd:b9: 21:a0:f7:2f:91:99:2d:24:88:42:b3:96:a5:60:af:bb:6c:0c: d0:19:52:e8:a3:ee:9a:2a:ea:69:0b:63:4b:0f:e6:a6:8f:f0: dd:dc:24:22:b4:b7:a9:7a:56:42:42:50:0d:1a:80:6b:28:06: 55:75:3b:b4:1b:4d:e3:e6:18:c0:ea:a7:ef:9b:81:d2:58:ba: 58:42:e7:b8:84:b6:45:16:55:c1:18:d4:cb:56:12:d4:18:96: b7:12:6c:33:8e:98:bf:00:bb:3f:ff:0c:84:17:53:5e:fc:b1: 43:3c:f2:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK5Bhea72EM9eooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZDYyZGZmODUtOGU3Yy00MDAwLTg4ZTYtMjE5MDdkZDg2Nzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWcMY3oY+cKC9KQGYatLEwNZoczocndvxC19 4vjexTpPkot36zc02v5hE3xWGWgmhsYfkkm6Eq5BFfjLgUvNa5PitPSbKtf12EN9 ZDvr+LlaTb29wwjhgeIsaFeCYKvzoQ2wW0rmyu3jzD1IkD2c93sCZkDiOuog8lTE iE1E/s0Il0sasMwhVUEgNtL0U7XQBmv+XZJfSu0yR1BGlZbfiHemmVJckWDE9TVf pw9hwc2ADD7Ym7PsRBz21BGJeZIeVoezUEirbF9OMem8xB2vZwIX4haqsOIshihQ r8G/fmQTBGzMUw3JSSrOs40+Y2+7sbsW8yIdPOIMmAjyEKuY9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3lyx/NUA/TTPa4nSyfy/DjfPBjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDQyNmJjNTAtYzdjOC0z ZGI5LWJhMjktYTc2NjA1ZWIyOGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtto8v2dRQ2PxEUjtD0NX/GlXYH4B9wAV8M26uQsmN7IGht0oBi5HY+ rqdXIg4fCczE0ki5Os5Ov6wcCFOd9VoDfs6XhuZirVWMOljw4l0ocKNLmFeFHB6b Pz7COXWOm6vjkKQ8+kaa39Of2c0rnt3FhH9GzfyKTTdM+b0zimBJpG7fgoIE2DNL zuYphvj9uSGg9y+RmS0kiEKzlqVgr7tsDNAZUuij7poq6mkLY0sP5qaP8N3cJCK0 t6l6VkJCUA0agGsoBlV1O7QbTePmGMDqp++bgdJYulhC57iEtkUWVcEY1MtWEtQY lrcSbDOOmL8Auz//DIQXU178sUM88jg= -----END CERTIFICATE-----Generated at Mon Aug 4 19:07:36 2025 by rpki-client