$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f3144c14-37fd-38fe-8d89-b33b134abc84.roa File: f3144c14-37fd-38fe-8d89-b33b134abc84.roa (raw, json) Hash identifier: 4hMeJBAp++4m2njok9SOzY6+u6p923lAV3pWDdsGn1M= Subject key identifier: D6:1B:67:10:2F:DD:6E:36:6C:15:6B:DB:03:B2:3A:FE:BB:7F:37:BD Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A90A0C6F43D0E2B19F90547C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f3144c14-37fd-38fe-8d89-b33b134abc84.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.33.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:c6:f4:3d:0e:2b:19:f9:05:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=64ad0256-d53e-429c-8a19-0af3dd149171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d3:60:66:a0:b3:fe:97:6d:04:28:91:32:26: 4e:6d:18:54:a2:45:3b:1a:c8:1c:9f:d3:db:76:02: de:7f:fb:36:6b:40:8d:fb:b9:f2:a6:14:5f:91:70: b5:20:c4:b9:a5:97:98:b1:21:7d:3f:57:f0:3b:23: 43:ca:24:ec:8c:52:ca:f9:fc:7c:01:91:34:8f:e9: 8e:88:a7:fe:9b:c2:37:c1:27:6f:48:78:c2:28:81: a3:76:62:1f:c5:8e:f7:dc:50:a9:26:20:a1:8c:3a: 80:a5:44:8e:4c:23:c0:1d:29:b0:0a:7a:ff:82:15: 4f:c8:1f:8b:51:1d:bd:6e:c4:2b:71:ca:da:d3:1c: 4d:71:ed:cc:5e:e6:22:7d:78:2b:59:4e:ed:8f:1d: 62:8b:c7:e7:78:71:1d:ac:d7:78:d5:66:14:db:78: e5:48:a8:79:70:50:5e:cc:4e:7f:e1:2c:e2:c2:21: a5:d9:95:d3:be:20:c6:1d:67:37:f6:c2:55:54:d2: 44:e7:c0:a3:19:a1:73:7f:67:55:5a:8a:b0:40:4c: 71:30:c2:7a:d3:81:df:31:e0:77:4e:54:33:06:48: 3f:b2:53:69:c2:db:b1:96:f4:7a:59:a4:f4:73:5f: ec:b7:7a:77:6e:63:e8:ec:fb:dd:b5:ab:b7:12:6b: c1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1B:67:10:2F:DD:6E:36:6C:15:6B:DB:03:B2:3A:FE:BB:7F:37:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f3144c14-37fd-38fe-8d89-b33b134abc84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:9c:93:17:ed:b7:2f:7b:c3:d1:99:d3:cb:1b:79:ac:46:9a: b2:35:08:ba:76:ee:d1:35:11:01:13:9d:7e:6e:75:1a:1b:d3: 3f:ca:22:84:1c:e7:c0:65:d0:d6:16:49:5e:65:da:e4:4e:79: 73:31:d1:31:b9:ff:27:53:01:f4:44:14:50:66:99:d5:43:30: 24:f4:46:f0:99:22:15:ae:b3:ea:6e:b5:42:ee:7a:02:33:89: 03:f9:2b:38:d1:ae:75:b6:35:a9:30:9d:7b:de:98:d7:85:90: 95:99:13:82:db:49:af:c2:32:b4:d5:fc:4e:d8:63:b6:f9:94: f6:26:ca:be:ff:f5:d4:df:b0:b8:4c:5d:89:c0:c2:cd:a1:4a: 96:74:31:9a:97:52:a0:7b:8e:e4:23:91:e1:5f:a2:fc:bd:fc: fd:03:f6:d6:a4:8c:45:df:3a:50:12:ab:b2:6f:8b:a9:e5:ec: 20:48:09:bb:c3:58:c3:7c:52:71:10:22:74:a7:80:04:c7:d9: a7:79:0b:fb:1f:61:3c:30:c4:43:69:21:54:0a:b3:e9:3e:d2: fd:ff:88:01:54:78:2f:8c:8e:ae:2a:a4:3f:c5:25:ea:12:67: ef:9c:24:59:b7:2c:0c:42:b2:a2:a3:17:62:e2:15:63:57:6a: 46:53:81:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoMb0PQ4rGfkFR8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NjRhZDAyNTYtZDUzZS00MjljLThhMTktMGFmM2RkMTQ5MTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtNgZqCz/pdtBCiRMiZObRhUokU7Gsgcn9Pb dgLef/s2a0CN+7nyphRfkXC1IMS5pZeYsSF9P1fwOyNDyiTsjFLK+fx8AZE0j+mO iKf+m8I3wSdvSHjCKIGjdmIfxY733FCpJiChjDqApUSOTCPAHSmwCnr/ghVPyB+L UR29bsQrccra0xxNce3MXuYifXgrWU7tjx1ii8fneHEdrNd41WYU23jlSKh5cFBe zE5/4SziwiGl2ZXTviDGHWc39sJVVNJE58CjGaFzf2dVWoqwQExxMMJ604HfMeB3 TlQzBkg/slNpwtuxlvR6WaT0c1/st3p3bmPo7Pvdtau3EmvBbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYbZxAv3W42bBVr2wOyOv67fze9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjMxNDRjMTQtMzdmZC0z OGZlLThkODktYjMzYjEzNGFiYzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACickxftty97w9GZ08sbeaxGmrI1CLp27tE1EQETnX5udRob0z/KIoQc 58Bl0NYWSV5l2uROeXMx0TG5/ydTAfREFFBmmdVDMCT0RvCZIhWus+putULuegIz iQP5KzjRrnW2NakwnXvemNeFkJWZE4LbSa/CMrTV/E7YY7b5lPYmyr7/9dTfsLhM XYnAws2hSpZ0MZqXUqB7juQjkeFfovy9/P0D9takjEXfOlASq7Jvi6nl7CBICbvD WMN8UnEQInSngATH2ad5C/sfYTwwxENpIVQKs+k+0v3/iAFUeC+Mjq4qpD/FJeoS Z++cJFm3LAxCsqKjF2LiFWNXakZTgSk= -----END CERTIFICATE-----Generated at Thu Aug 7 03:52:21 2025 by rpki-client