$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ffb5f399-7910-3515-819d-e4fcf15480cf.roa File: ffb5f399-7910-3515-819d-e4fcf15480cf.roa (raw, json) Hash identifier: 7hjwZ14T6J7Bw5K26fEz1qWhUxHmGQ6uj0kh3Yo+rZE= Subject key identifier: 4F:04:21:EE:3E:DE:00:A3:60:E6:D5:5F:C1:11:DB:C2:C1:B6:15:86 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AC0164CD3C2E554A35712F380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ffb5f399-7910-3515-819d-e4fcf15480cf.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 8069 IP address blocks: 20.33.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:4c:d3:c2:e5:54:a3:57:12:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=75170468-277d-4d20-8cf7-790c10fa1b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:84:3d:8a:36:60:2e:d3:93:5d:0f:67:76:b2: d2:ed:9d:0c:f0:eb:5c:d4:d1:32:90:17:50:5a:1a: 29:0a:75:af:f1:c8:f9:30:91:0c:40:9f:84:29:68: 18:76:45:7d:1b:4a:0e:96:73:13:eb:44:63:93:b2: 38:54:5e:42:60:ea:c7:de:53:d5:d7:dc:06:46:8b: dc:36:33:ed:a3:e4:e8:69:d0:ec:c0:97:10:d1:05: 34:30:2e:bb:84:d6:e4:8f:00:6f:c9:16:b9:bf:49: 81:da:c9:22:56:6a:b5:36:4f:ae:21:0f:ae:08:73: 5e:9f:32:f2:97:7f:8e:b0:cd:8c:73:28:66:38:e4: b7:c2:04:a9:03:9c:d5:46:ff:7c:2d:8b:e5:af:19: 30:d6:91:0b:b3:c3:45:09:cb:54:fe:62:d0:0f:24: f2:1c:53:56:08:a0:01:be:07:5c:0e:fd:dd:4c:44: 38:17:1b:b1:10:26:83:c9:de:60:02:38:ec:af:bf: 17:13:ce:20:af:2e:11:d5:cb:9b:99:51:3a:0a:27: c1:f2:56:6a:0b:cb:77:03:65:0e:25:35:4e:cf:67: 0d:2d:72:61:bf:4d:9b:de:77:45:2d:fd:f1:9d:2d: 8c:02:09:a2:a6:45:cc:4b:9b:31:10:14:fa:5d:bf: 41:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:04:21:EE:3E:DE:00:A3:60:E6:D5:5F:C1:11:DB:C2:C1:B6:15:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ffb5f399-7910-3515-819d-e4fcf15480cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:e9:43:5a:0a:b2:2a:0c:a1:9d:0f:bd:9a:99:65:1e:c3:4e: c8:e1:5c:81:f5:ac:e2:19:3d:73:36:1d:82:82:21:c5:6b:77: 86:30:f9:53:b6:84:40:c2:46:a4:9b:d2:b5:f5:59:cc:86:03: 62:ef:eb:cc:61:da:f6:30:8e:c5:c2:66:26:ee:71:f5:fb:e0: 0d:5b:ef:2a:b1:bf:4e:c5:df:41:76:a3:87:18:c0:17:b8:f6: 79:a3:bc:5c:1f:2f:0e:87:aa:1c:c6:74:b3:8b:72:18:13:4a: 97:7a:49:42:f9:87:17:b5:48:3e:e0:ea:b1:9e:e1:96:c9:50: 90:6a:05:3c:0d:64:1e:d6:90:3c:c1:b0:dd:46:9a:19:ab:cb: e3:a6:42:64:db:93:2e:49:37:cc:a4:6d:f9:67:e9:2c:da:be: 32:15:5d:7d:1f:e6:21:df:89:3d:59:57:86:70:6c:5b:8b:8b: bd:4f:f2:2c:83:56:3d:35:1c:0d:9f:82:4b:f0:38:f3:00:19: 60:70:31:ba:ef:48:c5:07:04:fc:21:3f:92:a7:cb:ec:2e:86: e4:d7:7a:72:16:5a:67:2c:0f:3d:31:0a:ca:9e:3c:33:58:a4: 62:08:be:00:17:a4:4c:32:fd:40:0f:36:00:44:3e:60:00:41: ad:96:99:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFkzTwuVUo1cS84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk NzUxNzA0NjgtMjc3ZC00ZDIwLThjZjctNzkwYzEwZmExYjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYQ9ijZgLtOTXQ9ndrLS7Z0M8Otc1NEykBdQ WhopCnWv8cj5MJEMQJ+EKWgYdkV9G0oOlnMT60Rjk7I4VF5CYOrH3lPV19wGRovc NjPto+ToadDswJcQ0QU0MC67hNbkjwBvyRa5v0mB2skiVmq1Nk+uIQ+uCHNenzLy l3+OsM2McyhmOOS3wgSpA5zVRv98LYvlrxkw1pELs8NFCctU/mLQDyTyHFNWCKAB vgdcDv3dTEQ4FxuxECaDyd5gAjjsr78XE84gry4R1cubmVE6CifB8lZqC8t3A2UO JTVOz2cNLXJhv02b3ndFLf3xnS2MAgmipkXMS5sxEBT6Xb9BvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8EIe4+3gCjYObVX8ER28LBthWGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZmZiNWYzOTktNzkxMC0z NTE1LTgxOWQtZTRmY2YxNTQ4MGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7pQ1oKsioMoZ0PvZqZZR7DTsjhXIH1rOIZPXM2HYKCIcVrd4Yw+VO2 hEDCRqSb0rX1WcyGA2Lv68xh2vYwjsXCZibucfX74A1b7yqxv07F30F2o4cYwBe4 9nmjvFwfLw6HqhzGdLOLchgTSpd6SUL5hxe1SD7g6rGe4ZbJUJBqBTwNZB7WkDzB sN1Gmhmry+OmQmTbky5JN8ykbfln6SzavjIVXX0f5iHfiT1ZV4ZwbFuLi71P8iyD Vj01HA2fgkvwOPMAGWBwMbrvSMUHBPwhP5Kny+wuhuTXenIWWmcsDz0xCsqePDNY pGIIvgAXpEwy/UAPNgBEPmAAQa2WmbY= -----END CERTIFICATE-----Generated at Wed Aug 6 04:09:24 2025 by rpki-client