$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/381bcb89-cd14-3ba1-bceb-260f97ff62e2.roa File: 381bcb89-cd14-3ba1-bceb-260f97ff62e2.roa (raw, json) Hash identifier: UgyteproOTXW/YQCvMIQfCpDrWagR/8jFV0GrBKaUw4= Subject key identifier: 87:4F:53:F0:EA:8D:ED:54:36:5A:90:5C:3A:0A:2D:04:E8:66:BE:F8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AC0164D72934EFD37DDD53480 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/381bcb89-cd14-3ba1-bceb-260f97ff62e2.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 8069 IP address blocks: 20.33.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:4d:72:93:4e:fd:37:dd:d5:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=52bd5a5e-c2a0-4e76-a773-b6479aabd602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fb:43:e6:8d:00:27:a5:b8:c4:a5:d5:63:ca: 86:aa:ca:d7:49:95:2f:30:d2:ea:15:c1:08:ca:60: da:34:f4:ff:c6:1b:44:b9:c5:e9:3a:73:5b:06:d1: 60:bb:8d:06:0e:99:e0:88:be:6f:4b:4d:02:87:91: 72:b1:00:4a:06:3c:ab:25:62:5e:49:cf:56:a4:7b: 20:d7:9b:ff:a0:d4:ee:d9:0d:a1:45:9e:50:85:91: 83:47:be:42:bb:0c:71:af:f1:db:51:db:14:89:31: fd:bb:20:14:cc:32:76:69:f6:7a:6c:95:a9:f5:c4: 59:f0:00:30:9a:26:7b:23:bf:d5:82:60:a9:c7:65: af:50:db:b0:ae:4c:bb:76:9c:e4:59:94:b3:a2:8c: d5:8b:e2:d7:7f:2c:7f:ee:46:12:90:87:c1:cd:f8: fe:7a:11:e8:96:cf:c9:9b:a1:6a:6b:39:e6:8d:b8: 74:08:b1:31:d4:5a:36:4a:46:b1:3b:f1:28:02:d4: b4:50:90:ff:32:0c:7e:f6:45:4f:73:9d:b5:81:6e: 4f:66:b8:b9:5e:16:7e:2d:53:38:76:e6:65:a0:64: 64:a4:68:25:72:59:ae:af:12:56:9a:b6:b2:1c:50: 51:b5:56:45:0a:bb:ff:35:7f:2a:46:1c:08:ba:86: 9d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4F:53:F0:EA:8D:ED:54:36:5A:90:5C:3A:0A:2D:04:E8:66:BE:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/381bcb89-cd14-3ba1-bceb-260f97ff62e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:72:ca:de:73:01:f5:20:56:85:86:55:e5:cd:33:42:b0:da: c6:74:e9:a8:22:28:5b:77:0b:29:28:0b:5c:ed:7e:39:2e:cb: 03:03:fb:10:6f:94:6d:3a:3a:33:72:b7:2b:f1:4a:c6:d7:3f: 82:7c:81:10:54:90:50:1a:05:64:45:f9:66:fc:88:9a:9d:1d: b8:43:b0:d5:40:f8:68:69:a1:c2:de:00:59:0b:83:68:8d:e7: dd:8d:17:2f:df:c8:18:fc:70:ef:3c:00:76:d0:76:cb:e9:49: c9:25:e3:bb:5d:ed:5d:cd:0a:2c:df:40:19:60:d8:24:fa:96: 76:0f:aa:9e:13:2b:d6:d4:e9:2c:0e:e2:47:a4:e7:77:3a:be: 82:6c:dd:6a:79:2c:d1:63:0d:c0:07:82:df:b2:c8:67:8e:d0: 66:26:d2:5f:6b:bc:30:62:69:43:af:5b:68:4f:30:2c:27:7a: 07:17:4f:90:63:14:34:73:09:b7:ca:0f:bb:35:c4:5b:05:06: 31:ed:06:5a:07:0f:75:3b:7c:0b:36:1f:a4:3e:e8:3e:56:48: d2:79:61:1c:8b:10:a0:93:4d:36:04:7e:e3:40:8f:76:89:0d: 20:02:b2:da:a7:fb:b4:0f:45:a0:d2:dc:5b:6d:3a:a8:12:85: 67:f8:0b:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFk1yk079N93VNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk NTJiZDVhNWUtYzJhMC00ZTc2LWE3NzMtYjY0NzlhYWJkNjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPtD5o0AJ6W4xKXVY8qGqsrXSZUvMNLqFcEI ymDaNPT/xhtEucXpOnNbBtFgu40GDpngiL5vS00Ch5FysQBKBjyrJWJeSc9WpHsg 15v/oNTu2Q2hRZ5QhZGDR75Cuwxxr/HbUdsUiTH9uyAUzDJ2afZ6bJWp9cRZ8AAw miZ7I7/VgmCpx2WvUNuwrky7dpzkWZSzoozVi+LXfyx/7kYSkIfBzfj+ehHols/J m6Fqaznmjbh0CLEx1Fo2SkaxO/EoAtS0UJD/Mgx+9kVPc521gW5PZri5XhZ+LVM4 duZloGRkpGglclmurxJWmrayHFBRtVZFCrv/NX8qRhwIuoad5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdPU/Dqje1UNlqQXDoKLQToZr74MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzgxYmNiODktY2QxNC0z YmExLWJjZWItMjYwZjk3ZmY2MmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJyyt5zAfUgVoWGVeXNM0Kw2sZ06agiKFt3CykoC1ztfjkuywMD+xBv lG06OjNytyvxSsbXP4J8gRBUkFAaBWRF+Wb8iJqdHbhDsNVA+GhpocLeAFkLg2iN 592NFy/fyBj8cO88AHbQdsvpSckl47td7V3NCizfQBlg2CT6lnYPqp4TK9bU6SwO 4kek53c6voJs3Wp5LNFjDcAHgt+yyGeO0GYm0l9rvDBiaUOvW2hPMCwnegcXT5Bj FDRzCbfKD7s1xFsFBjHtBloHD3U7fAs2H6Q+6D5WSNJ5YRyLEKCTTTYEfuNAj3aJ DSACstqn+7QPRaDS3FttOqgShWf4C/o= -----END CERTIFICATE-----Generated at Sun Aug 24 06:58:16 2025 by rpki-client