$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/54229034-9041-3ee3-bfcd-6d8d02da3700.roa File: 54229034-9041-3ee3-bfcd-6d8d02da3700.roa (raw, json) Hash identifier: U2k2P4hijzl6MP0+3tiZ5WXEfDo1ca5DW4Vj54DONxI= Subject key identifier: BA:B2:C3:86:C2:DC:8F:50:FD:A5:00:92:6B:7D:76:A0:C6:AE:17:E7 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AC0164D4DB693AAFE170CD700 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/54229034-9041-3ee3-bfcd-6d8d02da3700.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 8069 IP address blocks: 20.33.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:4d:4d:b6:93:aa:fe:17:0c:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=2fe44727-37e7-4d60-9609-10fd0fdda746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:47:04:f8:18:2a:41:56:29:12:5c:d5:c7:3e: cd:7a:a9:0b:04:eb:93:b2:07:7f:d3:03:79:b1:5a: e7:c6:86:0f:82:14:58:5e:70:28:b5:4e:47:a9:a8: 8c:22:e0:63:98:34:c7:54:18:d4:b6:b7:20:36:f5: 3e:d9:72:67:76:18:8c:c0:60:a3:ec:02:f6:9e:2d: 61:21:f3:45:9d:b8:9f:dc:f7:fc:f8:e7:77:43:f2: f1:a6:01:1d:01:a1:8e:90:c9:42:22:99:57:0b:98: 2e:e1:06:d7:9c:ba:f3:e2:b8:c4:2e:0e:b9:77:52: c9:ab:e7:4a:d0:2a:9c:88:bc:6d:13:58:b6:7e:37: 40:d1:67:84:40:37:fd:28:19:13:3b:f4:08:03:68: 0a:8a:04:70:e2:04:3a:3d:b2:5e:c7:6f:75:42:f6: 43:c0:49:30:b7:62:b0:72:d8:19:42:80:09:d0:f6: 16:00:55:f3:41:e6:c5:ed:2d:3e:2e:a2:81:fc:a1: 10:ed:8a:07:87:15:86:c7:24:c0:7f:16:30:23:18: b5:d0:da:65:61:ca:3f:60:12:9b:9a:ac:86:83:ca: c6:54:c0:50:08:97:7d:cb:18:d0:69:0f:a0:e8:5d: 8c:40:aa:87:9c:fe:be:a3:c5:29:8f:52:e9:fd:a4: 5f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B2:C3:86:C2:DC:8F:50:FD:A5:00:92:6B:7D:76:A0:C6:AE:17:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/54229034-9041-3ee3-bfcd-6d8d02da3700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:22:d4:45:ed:69:41:2a:c0:b6:ed:ae:0f:95:80:d2:66:d6: 46:7a:39:94:96:bb:f2:e6:91:e0:13:d4:72:a4:e9:8c:6e:82: f3:65:16:fe:00:e1:50:14:52:ef:d3:f4:b6:e2:1d:1f:2e:90: 96:23:51:cc:f6:d5:74:38:fc:b3:dc:23:eb:50:9c:9f:ff:8b: 79:f7:d9:9b:b3:bb:87:8d:7a:97:76:52:7a:aa:7b:4f:d0:02: 31:e2:3a:1a:73:c8:f8:2d:36:a6:54:0d:e7:e8:a2:5c:34:54: 3a:2d:be:c4:71:58:3f:1b:45:6a:96:1c:a9:ca:d5:3b:c4:ea: 74:cd:5f:e8:11:4f:a5:6b:a8:11:10:98:ce:4c:33:3a:b3:82: f2:c5:74:88:7b:1f:d1:53:61:2f:39:a2:e0:ac:5e:17:da:b7: d9:85:46:4c:72:76:91:62:e0:9f:85:68:fa:6c:99:41:54:08: 3d:7b:ce:ee:18:02:63:ba:3c:6a:dd:9d:c2:66:5c:fd:c4:06: f6:d7:0c:f9:f4:df:bb:92:a4:e0:a6:95:a1:0d:a0:74:e5:38: 55:c2:22:d2:ec:cd:e4:25:2b:27:56:10:8a:e6:dc:c2:f2:49: 7f:3d:e4:2b:50:bf:b1:77:14:ea:1f:a1:bb:fa:a1:7e:76:0a: a7:37:ff:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFk1NtpOq/hcM1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MmZlNDQ3MjctMzdlNy00ZDYwLTk2MDktMTBmZDBmZGRhNzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUcE+BgqQVYpElzVxz7NeqkLBOuTsgd/0wN5 sVrnxoYPghRYXnAotU5HqaiMIuBjmDTHVBjUtrcgNvU+2XJndhiMwGCj7AL2ni1h IfNFnbif3Pf8+Od3Q/LxpgEdAaGOkMlCIplXC5gu4QbXnLrz4rjELg65d1LJq+dK 0CqciLxtE1i2fjdA0WeEQDf9KBkTO/QIA2gKigRw4gQ6PbJex291QvZDwEkwt2Kw ctgZQoAJ0PYWAFXzQebF7S0+LqKB/KEQ7YoHhxWGxyTAfxYwIxi10NplYco/YBKb mqyGg8rGVMBQCJd9yxjQaQ+g6F2MQKqHnP6+o8Upj1Lp/aRfzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqyw4bC3I9Q/aUAkmt9dqDGrhfnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTQyMjkwMzQtOTA0MS0z ZWUzLWJmY2QtNmQ4ZDAyZGEzNzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIi1EXtaUEqwLbtrg+VgNJm1kZ6OZSWu/LmkeAT1HKk6YxugvNlFv4A 4VAUUu/T9LbiHR8ukJYjUcz21XQ4/LPcI+tQnJ//i3n32Zuzu4eNepd2Unqqe0/Q AjHiOhpzyPgtNqZUDefoolw0VDotvsRxWD8bRWqWHKnK1TvE6nTNX+gRT6VrqBEQ mM5MMzqzgvLFdIh7H9FTYS85ouCsXhfat9mFRkxydpFi4J+FaPpsmUFUCD17zu4Y AmO6PGrdncJmXP3EBvbXDPn037uSpOCmlaENoHTlOFXCItLszeQlKydWEIrm3MLy SX895CtQv7F3FOofobv6oX52Cqc3/xU= -----END CERTIFICATE-----Generated at Tue Aug 5 20:12:47 2025 by rpki-client