$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14c71dae-6e19-3c93-9f11-94b8dad2435d.roa File: 14c71dae-6e19-3c93-9f11-94b8dad2435d.roa (raw, json) Hash identifier: fiwFQ4p2Ch0Ll3wP85pQkJEpUkZvnYFCtAs8zLB0rm4= Subject key identifier: 63:EE:64:15:A2:0C:0F:AA:D6:8F:96:EC:9D:92:92:BC:63:3A:16:3A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AC0164CE73B6D3DC56E964488 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14c71dae-6e19-3c93-9f11-94b8dad2435d.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 8069 IP address blocks: 20.33.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:4c:e7:3b:6d:3d:c5:6e:96:44:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=2290c335-641d-4375-818c-887d67a70ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:79:24:b9:58:04:20:c7:4e:b8:28:af:69:dc: af:6b:40:75:b7:ec:09:59:7d:a7:38:79:9b:d3:9f: e5:70:73:1e:cb:3b:10:b6:aa:1b:ff:b3:d9:94:89: d1:85:08:a7:2b:b9:8a:e7:dc:28:e3:37:54:72:b7: b6:c1:62:bc:88:ea:5a:16:ab:18:d6:ae:68:13:4b: 1b:15:3e:a7:9c:12:9f:2b:91:14:c4:ad:b7:39:41: d3:19:97:37:c6:93:88:23:6c:a8:f3:c6:cb:34:c1: 75:e0:82:b6:05:7e:96:fa:60:1d:0b:c0:57:af:c2: 65:46:81:1d:81:30:88:eb:5a:64:56:d5:ad:33:39: 25:95:af:c4:de:50:54:40:7e:d8:a8:bf:bc:3c:2b: 8d:2b:7c:bd:f2:c7:4e:43:cc:d1:63:9b:93:a1:96: ca:78:99:40:f6:b0:bb:b0:81:5a:4d:bd:3d:77:9b: 7d:4c:1e:e7:2a:50:20:01:80:76:45:c6:5d:2b:77: 19:fb:10:fb:56:0e:a3:f4:b4:e9:0b:ff:c0:61:fb: 06:d9:6c:9f:a8:b6:52:8f:02:ec:1b:48:d1:65:da: ce:18:40:da:9a:5c:e8:20:c9:13:9c:e7:35:21:59: eb:bf:8c:b4:4d:de:da:d4:3e:d7:7f:a5:20:79:68: f1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:EE:64:15:A2:0C:0F:AA:D6:8F:96:EC:9D:92:92:BC:63:3A:16:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14c71dae-6e19-3c93-9f11-94b8dad2435d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:1b:a1:22:70:25:14:7d:55:f0:3f:cb:0b:7e:31:b9:d0:58: 70:fe:af:f9:df:6b:f1:6c:1b:45:2b:c7:e5:47:81:7c:9e:87: d9:4f:6b:fa:0a:71:a6:a0:88:c5:2a:84:a5:a2:ef:af:7a:e6: 77:a2:3f:80:a8:46:b1:84:a6:4e:50:df:a1:6d:e2:17:51:9a: a5:cd:ce:c3:bc:5b:64:c5:1e:64:8a:dd:45:21:b2:15:2c:97: 0b:ec:50:37:e2:d2:6e:fc:4e:44:44:07:02:2c:94:d2:09:47: e0:64:f9:7f:a9:86:16:79:12:c8:59:8b:3a:18:0b:57:12:bb: 22:12:65:1f:2d:54:8f:0e:58:a5:d3:56:96:f4:b0:4c:1c:b7: 67:e0:5f:81:ef:ce:42:70:7e:d1:e8:7b:84:f8:8b:7d:84:29: 7a:ad:9c:d0:b8:c9:10:48:30:d5:88:74:15:ab:13:64:ab:f1: 28:54:43:90:22:c7:ba:5f:09:46:25:6b:ae:36:2c:9c:00:9a: 01:54:d8:e3:fc:09:b9:2c:88:7a:af:36:fe:15:97:b5:9d:73: eb:ca:96:44:3d:01:13:27:cd:d7:20:bc:f4:a5:45:77:4a:59: a6:ad:fc:bb:4e:9c:90:7b:ae:c0:55:31:12:49:91:64:60:49: 95:ef:0b:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFkznO209xW6WRIgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MjI5MGMzMzUtNjQxZC00Mzc1LTgxOGMtODg3ZDY3YTcwZWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHkkuVgEIMdOuCivadyva0B1t+wJWX2nOHmb 05/lcHMeyzsQtqob/7PZlInRhQinK7mK59wo4zdUcre2wWK8iOpaFqsY1q5oE0sb FT6nnBKfK5EUxK23OUHTGZc3xpOII2yo88bLNMF14IK2BX6W+mAdC8BXr8JlRoEd gTCI61pkVtWtMzklla/E3lBUQH7YqL+8PCuNK3y98sdOQ8zRY5uToZbKeJlA9rC7 sIFaTb09d5t9TB7nKlAgAYB2RcZdK3cZ+xD7Vg6j9LTpC//AYfsG2WyfqLZSjwLs G0jRZdrOGEDamlzoIMkTnOc1IVnrv4y0Td7a1D7Xf6UgeWjxPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPuZBWiDA+q1o+W7J2SkrxjOhY6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTRjNzFkYWUtNmUxOS0z YzkzLTlmMTEtOTRiOGRhZDI0MzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoboSJwJRR9VfA/ywt+MbnQWHD+r/nfa/FsG0Urx+VHgXyeh9lPa/oK caagiMUqhKWi76965neiP4CoRrGEpk5Q36Ft4hdRmqXNzsO8W2TFHmSK3UUhshUs lwvsUDfi0m78TkREBwIslNIJR+Bk+X+phhZ5EshZizoYC1cSuyISZR8tVI8OWKXT Vpb0sEwct2fgX4HvzkJwftHoe4T4i32EKXqtnNC4yRBIMNWIdBWrE2Sr8ShUQ5Ai x7pfCUYla642LJwAmgFU2OP8CbksiHqvNv4Vl7Wdc+vKlkQ9ARMnzdcgvPSlRXdK Waat/LtOnJB7rsBVMRJJkWRgSZXvC/k= -----END CERTIFICATE-----Generated at Sun Aug 24 08:42:00 2025 by rpki-client