$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e1715101-8757-35c5-9b97-2c8a2220e65e.roa File: e1715101-8757-35c5-9b97-2c8a2220e65e.roa (raw, json) Hash identifier: /46ZHvZkk4/gLS+U787FZz4eE1ReWcLnE1YD9kwAzFA= Subject key identifier: 94:DB:BE:67:29:F8:DE:8F:6C:C6:6F:8F:4D:53:96:22:40:E3:6F:AA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AB2212AFDB20AA242393098C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e1715101-8757-35c5-9b97-2c8a2220e65e.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 8069 IP address blocks: 20.33.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:2a:fd:b2:0a:a2:42:39:30:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=fb6325cd-34ef-43b7-8342-dbc5610f45bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:38:b5:46:4c:f5:5d:53:82:d5:a0:5c:ac:79: 27:85:f4:dd:d3:73:3a:e4:2f:85:0d:b8:bf:28:d2: 36:0e:b2:99:7e:77:60:aa:3f:b2:95:94:45:96:1a: 75:99:42:d8:e8:90:04:f7:5c:2c:01:00:92:ff:a6: fc:9f:d6:b2:5c:0a:45:d5:cd:b3:80:2c:a1:89:4f: da:fc:ba:fa:82:9c:17:3e:4c:c3:3f:8d:7a:f4:3f: 80:70:e4:6c:a1:78:22:64:82:20:fb:d7:76:95:d2: c5:27:b2:25:20:59:bc:32:6d:bd:c0:88:c8:f4:1b: 10:77:b8:e2:c5:1f:8d:2a:9c:0d:74:39:ed:33:50: d6:78:a2:45:ad:92:0e:6e:f6:d7:ae:e9:7d:f9:a8: 01:36:3e:fd:10:81:0a:49:26:c3:37:d1:b8:cd:8f: 0b:de:dd:13:bd:f2:d6:15:e1:17:a2:0a:6f:79:e8: 70:ea:26:f7:b8:a2:81:13:b9:72:bc:76:7e:d4:1f: 2b:10:d3:64:a5:b6:ca:ed:39:a0:95:c2:eb:d3:1c: f5:ae:6c:1b:2b:83:69:09:11:6f:ad:de:96:4a:79: e2:b9:61:f5:8e:ad:89:f2:bd:9b:fb:b1:14:23:6e: 0e:4b:98:4c:79:48:19:c6:94:e7:6b:b3:49:be:11: 6a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DB:BE:67:29:F8:DE:8F:6C:C6:6F:8F:4D:53:96:22:40:E3:6F:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e1715101-8757-35c5-9b97-2c8a2220e65e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:cb:8d:cf:c1:c7:3b:0c:eb:9c:a2:bc:d1:12:c7:e2:e2:49: 4f:4f:71:b2:d0:f0:88:81:57:7a:fd:36:f2:68:ef:df:4d:58: 6b:43:17:a1:29:dd:56:04:70:20:ad:dd:74:50:a2:af:9a:5d: a5:ca:aa:ee:cc:a2:b6:c8:3f:d0:84:a5:41:0d:75:f8:be:1a: 38:ae:18:85:aa:e1:14:0e:94:09:51:f8:8b:fb:1b:26:2d:01: 35:12:53:8b:0c:e4:f8:f4:4e:d2:9d:1d:08:5c:d5:6f:07:2c: 82:5c:de:36:fd:29:04:05:e7:ea:05:d7:95:ed:ba:a2:bd:10: 42:95:74:a2:e5:93:1c:ca:86:18:62:e0:5f:2c:04:80:01:d3: 14:d4:aa:ee:32:5b:2a:19:58:82:85:84:23:79:04:6f:cc:17: 27:8b:f7:63:74:dc:3b:9b:15:aa:9b:7c:69:96:d6:ff:70:26: 8d:67:b0:a2:7c:79:53:79:81:51:64:4a:09:0a:b7:ff:d9:fb: 22:0b:a5:8f:1d:02:b0:e6:a6:49:32:92:3f:57:dd:ca:4d:88: d8:b2:01:c6:25:92:56:6a:c6:b8:1a:7e:8c:f4:a5:7b:a4:cd: 6b:84:03:12:c8:6e:48:f1:4b:24:69:3f:33:fb:b7:7a:e1:0e: 69:dc:4b:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyISr9sgqiQjkwmMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZmI2MzI1Y2QtMzRlZi00M2I3LTgzNDItZGJjNTYxMGY0NWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgji1Rkz1XVOC1aBcrHknhfTd03M65C+FDbi/ KNI2DrKZfndgqj+ylZRFlhp1mULY6JAE91wsAQCS/6b8n9ayXApF1c2zgCyhiU/a /Lr6gpwXPkzDP4169D+AcORsoXgiZIIg+9d2ldLFJ7IlIFm8Mm29wIjI9BsQd7ji xR+NKpwNdDntM1DWeKJFrZIObvbXrul9+agBNj79EIEKSSbDN9G4zY8L3t0TvfLW FeEXogpveehw6ib3uKKBE7lyvHZ+1B8rENNkpbbK7TmglcLr0xz1rmwbK4NpCRFv rd6WSnniuWH1jq2J8r2b+7EUI24OS5hMeUgZxpTna7NJvhFq2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTbvmcp+N6PbMZvj01TliJA42+qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTE3MTUxMDEtODc1Ny0z NWM1LTliOTctMmM4YTIyMjBlNjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfLjc/BxzsM65yivNESx+LiSU9PcbLQ8IiBV3r9NvJo799NWGtDF6Ep 3VYEcCCt3XRQoq+aXaXKqu7MorbIP9CEpUENdfi+GjiuGIWq4RQOlAlR+Iv7GyYt ATUSU4sM5Pj0TtKdHQhc1W8HLIJc3jb9KQQF5+oF15XtuqK9EEKVdKLlkxzKhhhi 4F8sBIAB0xTUqu4yWyoZWIKFhCN5BG/MFyeL92N03DubFaqbfGmW1v9wJo1nsKJ8 eVN5gVFkSgkKt//Z+yILpY8dArDmpkkykj9X3cpNiNiyAcYlklZqxrgafoz0pXuk zWuEAxLIbkjxSyRpPzP7t3rhDmncS90= -----END CERTIFICATE-----Generated at Mon Aug 4 19:16:09 2025 by rpki-client