$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6a974e5c-7db3-322a-b1d2-d8ef64264249.roa File: 6a974e5c-7db3-322a-b1d2-d8ef64264249.roa (raw, json) Hash identifier: gqVgNaUMKH9INOieEPV1mwQNVUAWSkuvm2fRy0+Mnpo= Subject key identifier: 73:F3:7A:74:2A:47:40:C3:DC:13:C2:91:2F:A2:96:6B:DA:C5:B8:08 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AB2212B688192431D6C7BDE80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6a974e5c-7db3-322a-b1d2-d8ef64264249.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 8069 IP address blocks: 20.33.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:2b:68:81:92:43:1d:6c:7b:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=bd8261ea-f050-4e5b-9cd2-facb3252986f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b0:ff:07:6b:61:7a:cb:63:55:5d:0c:0b:89: 81:80:9d:4b:e4:ef:3d:45:e3:f8:59:ce:96:20:e2: d2:c5:1e:16:b1:16:07:bb:77:06:e7:8c:94:b4:c3: 7c:58:01:64:06:58:2f:9d:35:2a:73:aa:56:ee:a6: da:05:e6:f0:c6:ba:15:f5:66:9d:8d:bd:4e:55:0c: 18:d5:6d:c4:09:a6:c8:b1:8f:70:47:f6:46:bf:d2: 55:a4:ad:b0:a9:1e:4b:9b:f5:f3:c6:28:5e:0d:62: 83:14:02:20:62:6b:61:06:56:b4:01:b3:30:96:eb: 2e:71:6a:eb:6d:12:65:f4:81:57:32:25:dc:5d:86: 7b:66:6f:99:12:2d:50:6d:84:97:15:66:4b:ea:93: 77:9f:a3:1b:a4:ae:5f:5a:2c:e5:de:56:ce:30:39: 61:8c:d4:0a:08:12:ae:39:cf:8a:a7:71:1a:24:dd: e6:a7:d3:62:c8:39:68:3a:aa:05:ea:36:45:56:bc: 3b:83:dc:69:9b:3a:51:a3:1d:7a:46:ba:f0:93:c6: bd:60:ee:dc:4c:0a:99:09:57:ec:d5:e8:d7:1f:e3: 8d:44:57:18:88:c2:ad:63:3d:4d:93:1d:17:82:d1: dd:64:d0:3e:4f:28:81:1d:9c:f4:ae:0d:de:cb:4d: 3c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F3:7A:74:2A:47:40:C3:DC:13:C2:91:2F:A2:96:6B:DA:C5:B8:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6a974e5c-7db3-322a-b1d2-d8ef64264249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:6a:e7:1e:3c:5a:a3:cd:c9:02:04:9b:72:63:25:4b:92:19: 31:e0:59:95:5a:64:ff:ce:76:9e:ee:91:8c:3f:4c:bb:43:d7: ac:5a:61:cd:7c:f0:3b:c3:4b:8b:f4:f4:35:e2:e5:d0:c3:01: 69:f3:1d:62:9f:4f:4e:44:9b:1a:49:03:ad:92:63:58:54:0c: a7:cf:4d:56:04:80:a3:9a:2c:62:78:02:f5:b6:b5:6a:c4:33: 1f:77:0e:b4:25:58:c7:49:af:33:9b:be:d9:37:01:0a:1b:0d: 08:c2:c5:1d:d0:7a:58:93:c7:d6:01:35:e2:09:e5:f8:b1:f1: 05:f4:ad:cf:73:1f:3f:ae:d8:fe:d0:80:1e:ba:4c:88:4e:fc: d6:de:25:9c:ed:ee:c0:40:2d:54:72:83:fd:6a:06:03:a2:25: ff:3c:18:6d:7f:47:f1:de:28:9a:dc:a2:3c:a3:de:52:86:18: b9:a0:5e:dd:66:a1:0b:87:5c:ad:80:f1:2a:77:ff:35:f5:d9: 73:71:f7:2e:f9:66:3c:f0:1b:c9:85:16:fc:d6:7f:bd:2e:75: f8:2f:d7:61:f6:38:5e:e5:08:49:93:f3:cc:77:94:76:aa:56: ad:05:1f:9b:28:41:e6:c8:19:17:36:f4:06:d0:94:dd:a8:34: 15:d5:ea:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIStogZJDHWx73oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk YmQ4MjYxZWEtZjA1MC00ZTViLTljZDItZmFjYjMyNTI5ODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorD/B2thestjVV0MC4mBgJ1L5O89ReP4Wc6W IOLSxR4WsRYHu3cG54yUtMN8WAFkBlgvnTUqc6pW7qbaBebwxroV9Wadjb1OVQwY 1W3ECabIsY9wR/ZGv9JVpK2wqR5Lm/XzxiheDWKDFAIgYmthBla0AbMwlusucWrr bRJl9IFXMiXcXYZ7Zm+ZEi1QbYSXFWZL6pN3n6MbpK5fWizl3lbOMDlhjNQKCBKu Oc+Kp3EaJN3mp9NiyDloOqoF6jZFVrw7g9xpmzpRox16Rrrwk8a9YO7cTAqZCVfs 1ejXH+ONRFcYiMKtYz1Nkx0XgtHdZNA+TyiBHZz0rg3ey008BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPzenQqR0DD3BPCkS+ilmvaxbgIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmE5NzRlNWMtN2RiMy0z MjJhLWIxZDItZDhlZjY0MjY0MjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpq5x48WqPNyQIEm3JjJUuSGTHgWZVaZP/Odp7ukYw/TLtD16xaYc18 8DvDS4v09DXi5dDDAWnzHWKfT05EmxpJA62SY1hUDKfPTVYEgKOaLGJ4AvW2tWrE Mx93DrQlWMdJrzObvtk3AQobDQjCxR3QeliTx9YBNeIJ5fix8QX0rc9zHz+u2P7Q gB66TIhO/NbeJZzt7sBALVRyg/1qBgOiJf88GG1/R/HeKJrcojyj3lKGGLmgXt1m oQuHXK2A8Sp3/zX12XNx9y75ZjzwG8mFFvzWf70udfgv12H2OF7lCEmT88x3lHaq Vq0FH5soQebIGRc29AbQlN2oNBXV6kc= -----END CERTIFICATE-----Generated at Mon Aug 4 22:21:33 2025 by rpki-client