$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3c589ef7-d75d-3bfa-8141-2f00031c4044.roa File: 3c589ef7-d75d-3bfa-8141-2f00031c4044.roa (raw, json) Hash identifier: 47BEGA02XdgkRjSkQ/MzSSVAWfHDGlAcDJn9tjBrgWE= Subject key identifier: 15:CC:45:32:FA:C3:77:A0:88:86:9A:B3:B0:A0:50:AE:6F:79:73:6D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AF5216510692CE9BA4D051800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3c589ef7-d75d-3bfa-8141-2f00031c4044.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.33.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:65:10:69:2c:e9:ba:4d:05:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=e1901d1c-7736-4582-822c-1e64b3d46806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:91:3c:e0:14:60:0c:97:0c:e2:bc:88:68:dd: ab:a1:24:5c:ec:01:e1:99:88:46:79:a0:fd:5b:db: 40:e1:6e:6f:a3:4f:2a:3e:b0:84:fd:87:25:b1:34: 1d:04:66:39:b5:6e:58:18:1b:8a:37:b4:10:48:25: b3:26:c2:96:ad:69:b4:8d:8c:ad:6a:e1:5b:08:b4: 24:d5:da:cf:b4:0b:6a:c1:36:ed:30:e9:6a:42:ce: 7c:0f:76:12:cd:70:76:6d:00:62:1a:20:d1:a1:7c: dd:82:3b:c1:9f:f9:c7:e6:db:a1:73:a2:9f:84:d7: 76:59:a6:7d:bd:70:c8:b2:ff:ca:0f:8d:7a:cc:c4: bf:d3:e7:46:ea:dc:4f:03:43:46:59:72:f7:de:8d: 40:83:a8:ec:ed:75:64:2c:cc:d2:04:0f:cc:51:b7: 4e:e0:15:ad:a4:de:dd:e1:40:80:6e:7a:77:fd:2d: 8d:be:be:6e:76:f3:bb:0e:ab:8b:bd:1f:6a:cc:93: fb:c7:58:aa:24:e4:45:af:58:bb:89:55:95:1e:ea: 1b:3f:cf:48:62:4b:1d:eb:5c:08:42:33:f6:4a:6d: d6:e9:1c:18:38:61:4f:10:31:14:42:60:f3:0e:5e: 96:ad:9a:64:52:80:b5:06:2a:02:91:61:ed:92:63: cf:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:CC:45:32:FA:C3:77:A0:88:86:9A:B3:B0:A0:50:AE:6F:79:73:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3c589ef7-d75d-3bfa-8141-2f00031c4044.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:88:ce:3f:6b:d8:c5:96:c9:4d:87:e8:f7:64:27:ca:41:58: c8:a2:ad:9f:69:ba:c1:b9:4b:2f:65:e8:4e:63:da:ba:84:86: 93:84:64:b5:cc:54:a7:82:d2:27:33:53:71:80:cd:61:01:4a: cf:2f:f8:7e:14:0c:56:95:e5:e5:d3:1b:15:b5:48:5e:a2:0e: 94:6f:90:70:ec:eb:cd:f5:af:ec:71:96:ac:80:5d:2e:0f:c1: 40:ba:5a:dd:6c:ac:cb:be:2f:9c:05:e9:69:08:70:74:d4:34: f9:3f:82:4c:f5:9f:2d:1e:2b:e3:4a:9c:e0:92:f8:f6:a5:0c: 7e:5c:e1:00:b1:0e:53:15:47:7c:96:25:d2:b5:1a:53:43:68: 23:ed:d8:6d:b9:e4:6b:1c:a8:8c:ab:32:7d:ac:c9:77:4d:70: 71:a5:41:67:13:e3:88:a2:c7:47:83:19:c1:15:88:5d:43:6a: 95:fa:08:e8:e9:07:ec:f6:6a:c3:c5:02:23:5b:95:4d:4d:fc: af:8e:b4:c0:05:40:a3:80:8e:82:e8:75:a5:18:2f:97:75:39: 80:b3:ca:9d:9b:63:54:73:25:ba:da:49:18:25:41:e0:f1:14: 75:8a:01:1a:11:e2:94:28:86:21:1c:4f:47:b4:eb:eb:2b:26: da:a9:90:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IWUQaSzpuk0FGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTE5MDFkMWMtNzczNi00NTgyLTgyMmMtMWU2NGIzZDQ2ODA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpE84BRgDJcM4ryIaN2roSRc7AHhmYhGeaD9 W9tA4W5vo08qPrCE/YclsTQdBGY5tW5YGBuKN7QQSCWzJsKWrWm0jYytauFbCLQk 1drPtAtqwTbtMOlqQs58D3YSzXB2bQBiGiDRoXzdgjvBn/nH5tuhc6KfhNd2WaZ9 vXDIsv/KD416zMS/0+dG6txPA0NGWXL33o1Ag6js7XVkLMzSBA/MUbdO4BWtpN7d 4UCAbnp3/S2Nvr5udvO7DquLvR9qzJP7x1iqJORFr1i7iVWVHuobP89IYksd61wI QjP2Sm3W6RwYOGFPEDEUQmDzDl6WrZpkUoC1BioCkWHtkmPPRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXMRTL6w3egiIaas7CgUK5veXNtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2M1ODllZjctZDc1ZC0z YmZhLTgxNDEtMmYwMDAzMWM0MDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqIzj9r2MWWyU2H6PdkJ8pBWMiirZ9pusG5Sy9l6E5j2rqEhpOEZLXM VKeC0iczU3GAzWEBSs8v+H4UDFaV5eXTGxW1SF6iDpRvkHDs6831r+xxlqyAXS4P wUC6Wt1srMu+L5wF6WkIcHTUNPk/gkz1ny0eK+NKnOCS+PalDH5c4QCxDlMVR3yW JdK1GlNDaCPt2G255GscqIyrMn2syXdNcHGlQWcT44iix0eDGcEViF1DapX6COjp B+z2asPFAiNblU1N/K+OtMAFQKOAjoLodaUYL5d1OYCzyp2bY1RzJbraSRglQeDx FHWKARoR4pQohiEcT0e06+srJtqpkPs= -----END CERTIFICATE-----Generated at Sun Aug 24 06:58:10 2025 by rpki-client