$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ffb1385a-fcf0-3f8e-9012-938f49909686.roa File: ffb1385a-fcf0-3f8e-9012-938f49909686.roa (raw, json) Hash identifier: AtvOfL4XVa+pq3eT2Z8VS+uaQesoK4EccVDkmumQHP0= Subject key identifier: 8F:13:5C:57:68:C1:B0:44:62:02:12:34:F8:5C:C4:BA:FC:B9:7D:E8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AB2212BC6D4E91198FFAE1680 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ffb1385a-fcf0-3f8e-9012-938f49909686.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 8069 IP address blocks: 20.33.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:2b:c6:d4:e9:11:98:ff:ae:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=93f6f734-d231-4994-beef-57ab1b7b1f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1e:25:bd:f3:f0:eb:12:f2:d1:37:db:80:67: f8:13:cb:0f:2e:79:7b:14:38:6a:fe:f6:f7:6d:be: cc:23:08:2f:d9:d0:f6:87:cb:5f:23:f7:b7:b8:0c: 71:8f:d3:0c:85:6b:ba:97:27:aa:5b:1b:0e:11:b1: f6:3a:f8:77:d0:47:bf:0b:c7:83:e1:45:22:5e:e3: ff:da:25:f9:77:44:75:d1:32:c1:51:e5:14:97:bd: 37:56:b0:01:7c:1b:43:09:3d:a1:4d:43:99:0f:e9: 2d:72:a4:78:9b:66:6d:e9:10:4e:c5:94:9c:66:dd: d1:5d:14:13:79:b8:13:87:02:33:dc:ff:9f:f6:a4: 3e:fa:cb:ef:87:f5:7e:13:0d:0f:22:64:65:e7:83: 09:89:ee:e2:15:55:2c:f1:9a:16:77:a7:49:71:5b: ca:5a:91:66:6c:63:4f:12:34:32:3b:ad:99:0c:40: d6:2d:6a:cc:9b:c3:91:77:9a:a8:5b:09:f8:21:9c: c3:1d:d4:c0:0b:c3:83:d7:55:c7:c1:14:8c:cd:11: 1a:83:96:19:3f:44:95:89:bd:9a:b1:8b:69:12:21: 8b:c6:70:eb:c7:54:68:5a:7b:e3:b2:5a:0f:3d:06: 6f:16:2a:4a:33:3b:f4:2c:9b:e0:f8:59:28:c6:47: 7e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:13:5C:57:68:C1:B0:44:62:02:12:34:F8:5C:C4:BA:FC:B9:7D:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ffb1385a-fcf0-3f8e-9012-938f49909686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:29:90:2d:04:b9:cb:af:ee:63:88:8a:b1:20:bd:ba:3b:f3: 59:c1:65:a7:d2:9c:e5:87:ba:a5:5e:55:a1:eb:01:09:70:5d: 01:76:cb:32:46:fe:b8:71:09:a4:4a:c8:51:d1:81:eb:86:78: 22:7a:87:e4:b2:c5:ab:1c:98:d5:17:0e:2b:35:c5:2d:4d:41: ea:91:00:8c:57:50:b2:3a:eb:02:0c:6f:b4:a5:5e:fc:f9:a2: ca:3c:6c:e9:73:86:b3:4a:db:42:49:e9:a0:bb:a2:03:5b:45: 71:a3:25:7c:41:a8:b3:50:d1:5b:d1:2c:e9:ef:a0:44:04:f5: 6c:e9:09:db:31:f8:29:61:02:e0:5b:0e:7a:2f:e5:10:49:5a: 07:6a:dd:f4:8f:a3:ae:cb:8c:eb:2c:ef:2c:dc:9d:b0:5a:76: e1:53:5c:c8:7d:42:92:e3:b0:3b:19:d0:20:cd:b2:45:14:89: ad:34:8c:68:19:66:bf:b5:aa:57:9e:20:11:9f:64:75:f4:09: fe:5c:19:ab:a5:ec:67:81:61:d9:bf:34:77:d2:95:00:c1:fa: 2d:3e:ce:88:bb:ff:ef:e6:fd:73:3d:5c:88:82:6e:a9:c1:8b: a9:5c:31:28:ff:b8:89:c9:64:3b:61:c1:c2:97:be:4b:f6:e8: a6:44:d0:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyISvG1OkRmP+uFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk OTNmNmY3MzQtZDIzMS00OTk0LWJlZWYtNTdhYjFiN2IxZjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx4lvfPw6xLy0TfbgGf4E8sPLnl7FDhq/vb3 bb7MIwgv2dD2h8tfI/e3uAxxj9MMhWu6lyeqWxsOEbH2Ovh30Ee/C8eD4UUiXuP/ 2iX5d0R10TLBUeUUl703VrABfBtDCT2hTUOZD+ktcqR4m2Zt6RBOxZScZt3RXRQT ebgThwIz3P+f9qQ++svvh/V+Ew0PImRl54MJie7iFVUs8ZoWd6dJcVvKWpFmbGNP EjQyO62ZDEDWLWrMm8ORd5qoWwn4IZzDHdTAC8OD11XHwRSMzREag5YZP0SVib2a sYtpEiGLxnDrx1RoWnvjsloPPQZvFipKMzv0LJvg+Fkoxkd+OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8TXFdowbBEYgISNPhcxLr8uX3oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZmZiMTM4NWEtZmNmMC0z ZjhlLTkwMTItOTM4ZjQ5OTA5Njg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUpkC0Eucuv7mOIirEgvbo781nBZafSnOWHuqVeVaHrAQlwXQF2yzJG /rhxCaRKyFHRgeuGeCJ6h+SyxascmNUXDis1xS1NQeqRAIxXULI66wIMb7SlXvz5 oso8bOlzhrNK20JJ6aC7ogNbRXGjJXxBqLNQ0VvRLOnvoEQE9WzpCdsx+ClhAuBb Dnov5RBJWgdq3fSPo67LjOss7yzcnbBaduFTXMh9QpLjsDsZ0CDNskUUia00jGgZ Zr+1qleeIBGfZHX0Cf5cGaul7GeBYdm/NHfSlQDB+i0+zoi7/+/m/XM9XIiCbqnB i6lcMSj/uInJZDthwcKXvkv26KZE0Kk= -----END CERTIFICATE-----Generated at Tue Aug 5 20:15:25 2025 by rpki-client