$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/33f05718-5754-32b3-9d3f-e96f5e5fccd4.roa File: 33f05718-5754-32b3-9d3f-e96f5e5fccd4.roa (raw, json) Hash identifier: BPt1xIWJ1LFaPjKvKcaGBY3Ztq7/1vnd8J4n5Do4uSQ= Subject key identifier: C6:29:4D:A2:6E:82:83:47:11:DA:F1:03:E7:89:23:1B:A0:FF:32:33 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AC2E12125C658ED80DD92B700 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/33f05718-5754-32b3-9d3f-e96f5e5fccd4.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.153.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:21:25:c6:58:ed:80:dd:92:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=b6f097ac-b364-4b18-82ca-2acae167118c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:24:83:2f:d8:c2:14:cf:20:a1:2e:98:2f:9a: 23:0b:f0:09:8d:e9:cd:03:7e:66:a3:c8:82:31:29: c9:77:b4:ef:85:eb:13:6d:8a:58:a9:63:46:78:aa: ed:fc:8f:f5:ec:a0:8c:97:f7:1b:9a:e3:3e:91:df: e0:73:ba:48:3a:2a:06:a9:76:bb:b7:cb:1c:9b:80: 77:cd:c3:bc:b8:f9:38:f7:ff:b9:a8:67:85:4d:d2: 4c:c2:d2:f8:19:9d:9c:7e:2f:8e:e3:7c:59:f5:21: 31:64:9c:ae:cc:1b:c5:e9:ac:57:d5:f2:fc:ce:58: 1b:a8:8d:cb:11:43:0d:1d:d4:d2:f2:21:7e:3e:5e: e3:75:84:39:e9:fb:6b:ba:6a:96:fb:6f:e7:d9:2d: c1:a1:ac:bc:ff:5b:b3:07:94:9f:a3:88:db:d7:19: e1:c7:09:66:83:7e:0f:a5:70:5c:22:fa:b9:8e:4a: ed:26:54:3f:77:bf:0f:e0:cc:ba:94:cf:83:22:18: 4a:a4:d5:82:84:5a:0c:ec:9c:25:f1:d9:1f:31:de: 62:32:b3:99:5b:7b:99:a0:df:87:3f:b1:9b:0a:50: d9:b6:98:fd:85:04:7b:e4:43:8e:7e:ee:31:02:1c: 34:b0:f2:9b:55:78:3f:5c:28:22:bd:3e:89:d3:a3: 71:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:29:4D:A2:6E:82:83:47:11:DA:F1:03:E7:89:23:1B:A0:FF:32:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/33f05718-5754-32b3-9d3f-e96f5e5fccd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:57:7b:53:d6:a7:a3:3c:7d:36:71:23:35:8e:27:c2:5c:56: 70:66:34:67:95:79:c7:b4:dd:f0:08:be:f1:d3:66:97:c7:d0: c0:a6:37:ae:33:9c:fa:ef:29:66:88:b5:e6:2d:07:e2:ee:a9: 81:43:64:01:6b:33:10:78:87:55:b6:5d:6c:a6:28:7b:e4:43: e4:79:a2:9f:1b:21:7e:a0:95:7e:da:d8:c7:15:06:c2:59:d7: e2:6d:80:64:51:4b:c8:e8:96:71:74:48:ea:09:0f:42:56:e5: a4:ce:9c:f1:9a:6f:a0:98:1e:90:13:be:76:f0:0d:bb:9b:b1: aa:0e:e9:59:db:dd:82:06:e4:62:4b:f2:78:d8:0e:46:3d:a9: 00:1d:c2:9e:0b:bd:51:84:fb:61:d1:cf:13:94:52:4d:3e:4c: 76:fd:d2:92:88:21:bc:53:fe:55:1d:d0:df:60:a0:13:7f:9a: 50:22:06:1b:07:a5:d2:bc:87:45:e8:fa:b0:26:10:05:7e:27: f6:06:ec:04:ae:08:ce:e6:76:5a:7d:8b:b2:82:f7:93:69:a5: 2e:27:fe:d5:20:55:7f:ee:4a:0e:08:c4:7c:10:79:e6:2d:1b: ae:82:34:2c:53:8a:ff:49:e4:c3:f2:a9:e1:5e:90:9d:cc:53: 6e:9e:52:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4SElxljtgN2StwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YjZmMDk3YWMtYjM2NC00YjE4LTgyY2EtMmFjYWUxNjcxMThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjySDL9jCFM8goS6YL5ojC/AJjenNA35mo8iC MSnJd7TvhesTbYpYqWNGeKrt/I/17KCMl/cbmuM+kd/gc7pIOioGqXa7t8scm4B3 zcO8uPk49/+5qGeFTdJMwtL4GZ2cfi+O43xZ9SExZJyuzBvF6axX1fL8zlgbqI3L EUMNHdTS8iF+Pl7jdYQ56ftrumqW+2/n2S3Boay8/1uzB5Sfo4jb1xnhxwlmg34P pXBcIvq5jkrtJlQ/d78P4My6lM+DIhhKpNWChFoM7Jwl8dkfMd5iMrOZW3uZoN+H P7GbClDZtpj9hQR75EOOfu4xAhw0sPKbVXg/XCgivT6J06NxTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYpTaJugoNHEdrxA+eJIxug/zIzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzNmMDU3MTgtNTc1NC0z MmIzLTlkM2YtZTk2ZjVlNWZjY2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJnIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRXe1PWp6M8fTZxIzWOJ8JcVnBmNGeVece03fAIvvHTZpfH0MCmN64z nPrvKWaIteYtB+LuqYFDZAFrMxB4h1W2XWymKHvkQ+R5op8bIX6glX7a2McVBsJZ 1+JtgGRRS8jolnF0SOoJD0JW5aTOnPGab6CYHpATvnbwDbubsaoO6Vnb3YIG5GJL 8njYDkY9qQAdwp4LvVGE+2HRzxOUUk0+THb90pKIIbxT/lUd0N9goBN/mlAiBhsH pdK8h0Xo+rAmEAV+J/YG7ASuCM7mdlp9i7KC95NppS4n/tUgVX/uSg4IxHwQeeYt G66CNCxTiv9J5MPyqeFekJ3MU26eUhI= -----END CERTIFICATE-----Generated at Sun Aug 24 08:43:20 2025 by rpki-client