$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4eb720e4-01b2-3f16-8642-849e970123c0.roa File: 4eb720e4-01b2-3f16-8642-849e970123c0.roa (raw, json) Hash identifier: hQ6PjKafEFGWnlkaHG+cZuDedD8N3ArYmzD5krlRiqo= Subject key identifier: 67:F4:FD:AF:98:64:7D:2F:82:3D:D0:43:D1:BF:81:8C:F0:7C:2F:A0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AA42B8FF8D9CD0534A5894480 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4eb720e4-01b2-3f16-8642-849e970123c0.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.33.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:8f:f8:d9:cd:05:34:a5:89:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=aecb8b85-3583-46df-bad7-499b3a0c8c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ba:1a:b9:1f:89:cb:94:b2:ab:28:cc:db:e1: f6:77:50:0f:1f:23:39:46:1c:1e:74:e0:d7:e8:95: cf:11:8f:70:98:53:d9:7f:2f:af:12:06:cc:7a:2a: 13:2d:69:2b:22:33:86:44:46:67:c3:8e:57:14:c7: e9:ea:52:11:87:cb:8d:19:55:9a:f3:39:2c:5a:08: f0:1a:b2:18:4c:3b:83:de:9e:01:fd:4a:87:eb:43: 5e:5a:20:35:e7:25:3b:8a:54:60:26:26:8b:a5:94: 18:85:ee:f9:15:f8:c7:ee:48:93:b5:87:ed:03:f4: b7:ef:66:2b:6b:6c:ad:b2:06:ef:fa:5d:f3:f0:3d: 1a:2f:ef:d3:e6:e5:d4:72:4a:bd:1d:19:35:03:97: d9:f2:22:a8:15:44:fa:6e:80:f1:6e:d7:d4:5c:1b: 64:c9:c5:81:f8:f1:0e:17:c4:22:cd:1c:c6:3d:d9: f0:e0:2b:31:e6:51:f5:96:bb:ac:81:42:ed:17:92: 2a:3e:2c:09:3f:0e:85:e1:b2:7d:87:21:1b:f0:0b: 24:cd:fd:85:ac:cd:95:12:d7:6b:12:0c:8a:23:d9: c8:24:d3:a8:9c:a4:73:55:f3:85:72:ad:5a:d5:79: 65:bf:a1:07:63:6c:9d:ef:f9:a8:f7:3c:81:32:e8: b9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F4:FD:AF:98:64:7D:2F:82:3D:D0:43:D1:BF:81:8C:F0:7C:2F:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4eb720e4-01b2-3f16-8642-849e970123c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:7b:9a:f0:5a:7c:83:8b:2c:51:7d:16:ff:00:dd:64:f1:e4: 07:e6:99:47:c5:70:c3:38:3c:d5:86:41:1b:46:a4:75:bf:f4: 59:43:91:3c:ef:07:88:97:36:1e:3c:e3:a9:e5:97:cd:a9:5a: 77:0e:02:a2:ad:35:3f:68:e9:b8:11:9e:56:e2:27:e3:ca:a5: 0d:36:6b:87:86:94:44:5e:9e:58:b4:83:27:5f:80:e6:a3:9d: 96:47:19:8d:0a:ff:f9:06:ee:9c:ea:a4:af:36:8f:65:50:bb: 2f:43:a9:5a:bf:1c:3d:5e:ff:db:06:aa:b6:45:65:50:cc:df: f2:3a:39:d5:6b:40:fa:6c:53:0f:3e:ad:23:57:e6:4c:77:bf: ba:b7:1e:71:0c:6a:be:1f:e0:b1:6c:7f:c1:88:5f:15:53:37: 8f:9b:d4:bf:34:40:4a:ab:54:aa:65:3a:dc:ac:f4:42:48:64: 7c:3c:64:0c:f1:c9:c7:93:25:4d:e2:39:65:5c:f9:bb:11:9c: 2f:6c:10:0a:36:0d:6e:9e:37:07:f8:be:2d:93:da:78:c4:ee: 6c:8b:e7:ec:a3:aa:6e:4e:99:a7:11:fc:ff:29:6a:5e:d7:ac: 30:8d:ce:7b:c6:e8:74:c6:03:32:3a:6f:44:3c:d8:28:14:2f: ad:d2:a8:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK4/42c0FNKWJRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk YWVjYjhiODUtMzU4My00NmRmLWJhZDctNDk5YjNhMGM4YzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtboauR+Jy5SyqyjM2+H2d1APHyM5RhwedODX 6JXPEY9wmFPZfy+vEgbMeioTLWkrIjOGREZnw45XFMfp6lIRh8uNGVWa8zksWgjw GrIYTDuD3p4B/UqH60NeWiA15yU7ilRgJiaLpZQYhe75FfjH7kiTtYftA/S372Yr a2ytsgbv+l3z8D0aL+/T5uXUckq9HRk1A5fZ8iKoFUT6boDxbtfUXBtkycWB+PEO F8QizRzGPdnw4Csx5lH1lrusgULtF5IqPiwJPw6F4bJ9hyEb8Askzf2FrM2VEtdr EgyKI9nIJNOonKRzVfOFcq1a1Xllv6EHY2yd7/mo9zyBMui5DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGf0/a+YZH0vgj3QQ9G/gYzwfC+gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGViNzIwZTQtMDFiMi0z ZjE2LTg2NDItODQ5ZTk3MDEyM2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHV7mvBafIOLLFF9Fv8A3WTx5AfmmUfFcMM4PNWGQRtGpHW/9FlDkTzv B4iXNh4846nll82pWncOAqKtNT9o6bgRnlbiJ+PKpQ02a4eGlERenli0gydfgOaj nZZHGY0K//kG7pzqpK82j2VQuy9DqVq/HD1e/9sGqrZFZVDM3/I6OdVrQPpsUw8+ rSNX5kx3v7q3HnEMar4f4LFsf8GIXxVTN4+b1L80QEqrVKplOtys9EJIZHw8ZAzx yceTJU3iOWVc+bsRnC9sEAo2DW6eNwf4vi2T2njE7myL5+yjqm5OmacR/P8pal7X rDCNznvG6HTGAzI6b0Q82CgUL63SqBo= -----END CERTIFICATE-----Generated at Mon Aug 4 18:38:07 2025 by rpki-client