$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4b0c2265-c6cc-304f-b1ab-afa0962ddec2.roa File: 4b0c2265-c6cc-304f-b1ab-afa0962ddec2.roa (raw, json) Hash identifier: SfbLFky1oKeVuuZkBC3HJWfU8mpE2sKCY6IV/p2P+9c= Subject key identifier: E8:9F:F3:60:E6:1E:F9:09:56:92:A3:DF:AA:A2:42:D3:73:78:F3:AD Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AC0164D8590FE7266A6472780 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4b0c2265-c6cc-304f-b1ab-afa0962ddec2.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 8069 IP address blocks: 20.33.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:4d:85:90:fe:72:66:a6:47:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=1b0ea0c6-0077-4edf-bc40-edfa89523d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3d:c5:4c:37:3f:21:24:41:05:bf:b9:a7:70: ae:ab:3c:1c:b1:9d:f8:61:a6:47:ca:fa:b0:9c:6d: 70:ff:da:7f:6d:7b:d4:49:92:bd:26:90:77:e2:13: 48:b1:ec:73:39:56:cc:fb:cb:bd:ce:b6:e7:3e:85: 8d:75:1f:d6:c4:d8:4f:56:50:7b:4b:9d:32:e5:d9: d6:a0:6a:9d:72:48:10:a2:0e:a9:86:05:02:d0:be: 75:5d:fa:55:1c:b2:55:77:3a:d3:9a:ea:22:8c:72: 97:81:44:22:94:80:f4:19:b1:81:26:62:60:24:48: 45:e7:a4:22:bb:04:ba:fd:44:64:85:c7:c3:12:5b: 39:b8:93:be:62:b0:90:2d:6f:72:04:55:ae:a2:0c: 07:60:60:23:0c:63:8f:f0:a3:4b:43:ad:ea:2d:9e: d0:c6:bd:06:97:e5:29:d7:0b:57:f6:44:78:3f:cd: 5e:0f:50:0d:94:fe:75:cf:16:8b:1a:2c:ea:1e:f9: 44:1d:8d:1e:32:52:00:69:f8:35:33:53:59:b2:b3: fc:ea:4c:be:7f:fc:19:b2:05:7e:32:ac:d8:45:17: 93:fb:ca:4b:2b:21:58:67:b7:03:ae:22:7a:68:2f: c6:a0:05:4c:b8:68:70:e3:57:87:c1:41:52:cf:de: 10:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9F:F3:60:E6:1E:F9:09:56:92:A3:DF:AA:A2:42:D3:73:78:F3:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4b0c2265-c6cc-304f-b1ab-afa0962ddec2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:30:c8:79:16:d3:06:8d:a7:8f:59:ab:8c:4f:9e:f5:d1:ac: 09:f4:b7:1e:01:0c:44:96:d6:c1:80:94:07:8c:45:7b:15:c5: 53:90:d2:e5:05:d0:5a:8a:43:ea:d4:56:ec:06:ce:ce:b4:58: 26:0d:db:d4:76:f8:cd:64:33:e6:fb:76:e8:92:ee:cb:8a:1c: f0:d9:5f:aa:85:71:cf:91:cf:bd:9a:d9:c2:f2:f2:75:72:1c: 47:ac:39:fa:36:57:bd:52:e4:61:13:bf:73:e0:f5:72:e8:48: c0:a4:6b:a9:5e:29:13:d5:20:12:f9:11:af:f8:9e:51:76:88: 04:17:fa:8e:b2:16:c4:72:e6:9c:85:38:56:bf:e2:56:2d:31: 2e:bc:5e:71:b9:ea:72:2a:40:df:a0:0f:56:5f:82:1c:75:25: b5:ca:bf:42:28:ce:dd:64:62:e5:03:1a:d1:90:85:fd:22:9e: d7:19:71:1b:96:b5:cd:27:ff:ec:1d:a5:2a:22:87:36:d5:33: 73:dc:f6:e6:9b:46:eb:65:f7:95:60:90:93:18:1d:c3:c7:39: fe:0c:08:2e:63:c7:ee:b4:32:7c:ab:f8:a0:e4:a8:02:73:c7: aa:96:29:1c:76:8d:e9:ec:cb:aa:9d:ec:ed:66:cf:ad:2c:18: 72:35:65:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFk2FkP5yZqZHJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MWIwZWEwYzYtMDA3Ny00ZWRmLWJjNDAtZWRmYTg5NTIzZDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT3FTDc/ISRBBb+5p3CuqzwcsZ34YaZHyvqw nG1w/9p/bXvUSZK9JpB34hNIsexzOVbM+8u9zrbnPoWNdR/WxNhPVlB7S50y5dnW oGqdckgQog6phgUC0L51XfpVHLJVdzrTmuoijHKXgUQilID0GbGBJmJgJEhF56Qi uwS6/URkhcfDEls5uJO+YrCQLW9yBFWuogwHYGAjDGOP8KNLQ63qLZ7Qxr0Gl+Up 1wtX9kR4P81eD1ANlP51zxaLGizqHvlEHY0eMlIAafg1M1NZsrP86ky+f/wZsgV+ MqzYRReT+8pLKyFYZ7cDriJ6aC/GoAVMuGhw41eHwUFSz94QEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOif82DmHvkJVpKj36qiQtNzePOtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGIwYzIyNjUtYzZjYy0z MDRmLWIxYWItYWZhMDk2MmRkZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcwyHkW0waNp49Zq4xPnvXRrAn0tx4BDESW1sGAlAeMRXsVxVOQ0uUF 0FqKQ+rUVuwGzs60WCYN29R2+M1kM+b7duiS7suKHPDZX6qFcc+Rz72a2cLy8nVy HEesOfo2V71S5GETv3Pg9XLoSMCka6leKRPVIBL5Ea/4nlF2iAQX+o6yFsRy5pyF OFa/4lYtMS68XnG56nIqQN+gD1Zfghx1JbXKv0Iozt1kYuUDGtGQhf0intcZcRuW tc0n/+wdpSoihzbVM3Pc9uabRutl95VgkJMYHcPHOf4MCC5jx+60Mnyr+KDkqAJz x6qWKRx2jensy6qd7O1mz60sGHI1ZZI= -----END CERTIFICATE-----Generated at Sun Aug 24 06:58:22 2025 by rpki-client