$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa File: abad3fc4-19f2-378b-b7e4-8ec84d750389.roa (raw, json) Hash identifier: mmrxkDA01FirYc0usTpQDt82v7yFGHyviCWYlGaK2A4= Subject key identifier: B0:3F:C8:FF:E3:8E:16:6C:F9:8D:3F:32:8B:D8:CE:BF:3E:91:D5:CE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A9E9663DF5DEEEDDACF6A4500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:63:df:5d:ee:ed:da:cf:6a:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=8cd5a27f-7f99-4156-b21b-86723fd8a485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:91:40:fe:08:59:01:a2:af:f0:96:16:e4:37: b4:c3:bf:6b:9d:6f:9f:4a:1c:fd:51:19:2b:73:b6: e3:29:75:a2:c3:f1:5c:0c:ca:eb:f8:d6:3d:0c:e1: e4:47:68:fd:a0:4b:ce:cb:6d:93:24:e6:45:03:4b: 72:3d:67:1c:36:80:c0:27:70:98:07:28:a7:d4:a5: 74:75:35:73:22:b2:74:45:3d:f6:8b:6a:8c:fc:d8: 02:94:af:f7:7d:a4:50:2b:38:eb:d7:50:9b:e4:90: ca:24:dd:20:08:79:a3:67:46:6e:42:8e:fe:d8:9c: 90:90:94:da:5a:c1:f2:94:7d:75:e0:5d:ac:d3:76: 45:d1:60:f1:2e:e6:16:b7:7c:33:23:e3:57:e2:d4: b5:86:fa:c5:6e:a6:30:34:05:8f:f8:31:19:b3:89: 56:b0:b6:1e:30:65:33:16:a0:92:dc:0c:33:6d:e5: 81:0f:c7:e1:b6:af:1f:bf:83:ba:93:39:96:7c:d9: 90:0b:4c:e4:2b:ae:aa:11:80:77:0e:cd:9e:de:63: ba:17:0c:07:6d:08:47:d5:4d:1c:56:1c:8e:80:b7: cb:fb:d3:99:d1:e4:b7:34:98:8b:b9:8f:af:dd:57: c0:5f:5e:f7:59:74:3f:16:41:15:46:68:85:7a:f8: ad:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3F:C8:FF:E3:8E:16:6C:F9:8D:3F:32:8B:D8:CE:BF:3E:91:D5:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:8d:ed:6c:f2:fb:36:e1:4f:13:d4:e3:3f:82:43:cc:c2:f6: bc:58:fd:d2:49:23:ff:f0:24:d8:9d:f8:62:07:fb:86:03:5e: 98:b4:73:54:94:c0:7f:89:95:c5:50:46:05:0c:52:a3:d1:0d: 8d:3e:04:24:8c:cf:30:e1:d3:16:1f:74:7d:b0:3b:4d:18:e8: 05:9f:9c:1e:ec:ba:34:7b:64:de:49:51:95:93:1f:3a:42:f2: c6:13:73:96:65:39:99:4a:56:e2:55:07:b1:cb:ba:37:fc:77: 16:63:68:28:24:b2:37:da:b7:c6:96:5c:35:5c:6d:b8:01:ab: 8c:55:41:4a:ed:bb:ed:1c:c9:83:62:a6:a0:81:0c:2e:be:c6: c3:02:17:02:b6:7a:cb:9f:b8:01:2d:65:f1:f7:21:e9:f7:68: 3d:8f:9d:02:9b:eb:02:0f:3b:21:a2:95:be:ff:37:60:af:c8: 79:75:d9:e9:48:4c:65:7c:1c:be:4c:ad:e4:ce:38:d6:14:d9: 1e:79:ed:56:9d:17:ec:47:b2:5f:eb:85:d1:d6:5e:28:f4:f4: 2d:92:cc:db:9d:9e:5e:80:de:1d:da:3c:ca:90:4c:c3:ee:9c: 3b:dc:6f:7c:69:5b:90:5e:fa:68:1d:23:db:20:62:78:51:77: a6:54:54:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelmPfXe7t2s9qRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk OGNkNWEyN2YtN2Y5OS00MTU2LWIyMWItODY3MjNmZDhhNDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpFA/ghZAaKv8JYW5De0w79rnW+fShz9URkr c7bjKXWiw/FcDMrr+NY9DOHkR2j9oEvOy22TJOZFA0tyPWccNoDAJ3CYByin1KV0 dTVzIrJ0RT32i2qM/NgClK/3faRQKzjr11Cb5JDKJN0gCHmjZ0ZuQo7+2JyQkJTa WsHylH114F2s03ZF0WDxLuYWt3wzI+NX4tS1hvrFbqYwNAWP+DEZs4lWsLYeMGUz FqCS3AwzbeWBD8fhtq8fv4O6kzmWfNmQC0zkK66qEYB3Ds2e3mO6FwwHbQhH1U0c VhyOgLfL+9OZ0eS3NJiLuY+v3VfAX173WXQ/FkEVRmiFevit2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLA/yP/jjhZs+Y0/MovYzr8+kdXOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWJhZDNmYzQtMTlmMi0z NzhiLWI3ZTQtOGVjODRkNzUwMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGN7Wzy+zbhTxPU4z+CQ8zC9rxY/dJJI//wJNid+GIH+4YDXpi0c1SU wH+JlcVQRgUMUqPRDY0+BCSMzzDh0xYfdH2wO00Y6AWfnB7sujR7ZN5JUZWTHzpC 8sYTc5ZlOZlKVuJVB7HLujf8dxZjaCgksjfat8aWXDVcbbgBq4xVQUrtu+0cyYNi pqCBDC6+xsMCFwK2esufuAEtZfH3Ien3aD2PnQKb6wIPOyGilb7/N2CvyHl12elI TGV8HL5MreTOONYU2R557VadF+xHsl/rhdHWXij09C2SzNudnl6A3h3aPMqQTMPu nDvcb3xpW5Be+mgdI9sgYnhRd6ZUVAM= -----END CERTIFICATE-----Generated at Tue Aug 5 17:08:48 2025 by rpki-client