$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2f4b3421-ca06-34d3-ad50-682de9195829.roa File: 2f4b3421-ca06-34d3-ad50-682de9195829.roa (raw, json) Hash identifier: IWV9EwntsgVvR3f2tKLDQryNY+S7o1cNOqVaomcoA0w= Subject key identifier: 02:46:DA:AC:AB:FC:C6:10:F5:96:AE:B1:26:40:20:02:E4:27:F9:3C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AF52158624B866E306E8A4500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2f4b3421-ca06-34d3-ad50-682de9195829.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.33.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:58:62:4b:86:6e:30:6e:8a:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=ff2c8c61-3f62-486b-8d37-84ae4b0f52c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:99:fb:f0:66:98:88:c5:c4:82:ff:b3:c8:18: 64:a4:3f:0f:c7:cb:89:26:01:97:7b:67:42:da:dd: 4f:3e:f6:3e:2d:ce:cc:0f:a7:9f:15:37:05:c5:90: 35:e6:97:fc:fe:af:aa:d5:08:95:33:d9:81:db:6b: 31:a1:b7:8b:d5:d1:6e:ac:16:2f:e3:73:0c:9c:f4: c9:a4:c4:cd:3d:72:8b:fb:e4:69:40:dd:4c:43:ea: 3b:c2:2a:af:65:a2:84:0a:22:c0:9b:d3:f6:bd:51: 90:13:ae:de:27:d4:b3:41:09:31:d4:aa:4d:43:24: c2:d4:44:28:b1:70:6f:fb:08:1c:70:8a:f3:b9:dd: da:2f:c1:b3:e7:22:17:9c:13:63:25:b1:b9:ba:94: 7c:6f:e5:45:d8:ad:3e:82:d0:6f:7f:11:9e:29:fb: 8a:80:f1:16:a8:17:bc:06:b5:4b:1e:32:a5:92:36: f6:f0:77:cc:c2:bf:22:f5:4c:c1:1c:5e:92:78:b4: 4d:d0:ea:5d:03:82:07:c4:b3:04:79:f3:32:47:1a: f9:13:7a:38:4e:2f:b3:b0:b6:92:08:03:fe:a5:7a: 71:eb:28:61:50:b4:15:09:e1:16:b9:f9:6d:b0:49: 19:5e:5b:95:e5:02:69:47:61:da:45:05:b6:c8:a4: 26:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:46:DA:AC:AB:FC:C6:10:F5:96:AE:B1:26:40:20:02:E4:27:F9:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2f4b3421-ca06-34d3-ad50-682de9195829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:44:86:a4:6c:c4:3e:5e:eb:87:bd:26:15:34:04:3a:f8:95: 87:9b:74:4a:86:d9:7f:25:5a:4b:3e:50:d5:71:6b:ac:6e:2f: ed:56:68:6f:49:5c:21:ef:6a:6a:56:e3:6e:6d:75:7e:4b:c4: 58:24:fa:ce:e4:c4:12:45:0b:84:fc:5d:a4:87:48:7e:fd:db: c6:0b:75:a0:35:1b:84:48:2b:25:45:e8:7f:3a:d6:db:70:45: ec:84:b4:1e:95:50:78:b5:88:b3:a6:0f:32:fe:4b:a3:1c:73: 6a:c1:ca:84:84:25:f6:86:87:83:b1:78:58:56:ce:d4:6d:d3: 57:52:c0:61:ff:8a:6f:aa:2c:ee:5e:ca:14:81:79:fb:63:f5: 14:82:85:e6:ea:ac:31:f1:d2:15:56:b1:63:41:6c:1c:00:6e: 97:b4:91:17:dc:d0:6e:9c:39:55:fd:93:9e:78:a9:07:a4:97: 73:00:ef:c4:64:9e:be:68:08:24:1c:ce:b6:7d:ef:e7:b6:d0: 8d:76:05:fe:2b:d3:b8:7d:88:2d:29:7f:f4:c4:a9:9d:7a:87: 5d:89:43:0c:9c:4f:12:88:7b:09:20:26:cf:20:76:07:e0:19: c6:09:6f:50:ef:6d:f8:91:37:e7:2f:2d:8f:58:3c:41:24:1a: 9c:a8:ac:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IVhiS4ZuMG6KRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZmYyYzhjNjEtM2Y2Mi00ODZiLThkMzctODRhZTRiMGY1MmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pn78GaYiMXEgv+zyBhkpD8Px8uJJgGXe2dC 2t1PPvY+Lc7MD6efFTcFxZA15pf8/q+q1QiVM9mB22sxobeL1dFurBYv43MMnPTJ pMTNPXKL++RpQN1MQ+o7wiqvZaKECiLAm9P2vVGQE67eJ9SzQQkx1KpNQyTC1EQo sXBv+wgccIrzud3aL8Gz5yIXnBNjJbG5upR8b+VF2K0+gtBvfxGeKfuKgPEWqBe8 BrVLHjKlkjb28HfMwr8i9UzBHF6SeLRN0OpdA4IHxLMEefMyRxr5E3o4Ti+zsLaS CAP+pXpx6yhhULQVCeEWufltsEkZXluV5QJpR2HaRQW2yKQmSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJG2qyr/MYQ9ZausSZAIALkJ/k8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMmY0YjM0MjEtY2EwNi0z NGQzLWFkNTAtNjgyZGU5MTk1ODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVEhqRsxD5e64e9JhU0BDr4lYebdEqG2X8lWks+UNVxa6xuL+1WaG9J XCHvampW425tdX5LxFgk+s7kxBJFC4T8XaSHSH7928YLdaA1G4RIKyVF6H861ttw ReyEtB6VUHi1iLOmDzL+S6Mcc2rByoSEJfaGh4OxeFhWztRt01dSwGH/im+qLO5e yhSBeftj9RSChebqrDHx0hVWsWNBbBwAbpe0kRfc0G6cOVX9k554qQekl3MA78Rk nr5oCCQczrZ97+e20I12Bf4r07h9iC0pf/TEqZ16h12JQwycTxKIewkgJs8gdgfg GcYJb1DvbfiRN+cvLY9YPEEkGpyorLI= -----END CERTIFICATE-----Generated at Sun Aug 24 06:57:19 2025 by rpki-client