$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5f2854a5-a8d3-3b47-b10c-56016fd4464c.roa File: 5f2854a5-a8d3-3b47-b10c-56016fd4464c.roa (raw, json) Hash identifier: 4O0wgbLRNTOu0puOT57OK1BaEam+pcWhHCOxqeT1/f0= Subject key identifier: 0B:B0:1E:A2:24:8F:56:41:05:53:FA:A0:57:F4:F4:20:DF:14:33:A1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A9E96639402B813DD59358920 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5f2854a5-a8d3-3b47-b10c-56016fd4464c.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.33.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:63:94:02:b8:13:dd:59:35:89:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=1f7108de-d201-433a-a945-f68c6f1ec91f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3a:78:0c:fb:c2:93:bc:37:f7:d0:21:9a:ae: e0:df:5d:a2:a2:a1:dc:58:15:aa:2f:43:fe:0d:c3: 91:c4:37:83:50:45:74:c3:13:ab:47:47:93:ba:26: 6d:05:cb:f9:42:90:6d:7e:b0:6a:ff:a9:08:b2:47: 7a:b2:a6:3c:0c:8d:28:61:8c:03:6f:86:55:16:d5: 01:8a:4c:c9:f6:ed:a9:87:09:1d:ed:6f:04:72:8f: c4:81:75:31:9a:97:bd:28:08:83:90:13:35:a2:47: f2:1e:52:23:ae:1b:6a:5d:a6:ad:63:fa:8a:e2:b5: b3:1f:8a:f8:12:50:fc:07:3d:60:85:84:f4:a7:73: 7b:5f:3b:0f:59:a2:09:d9:fb:9b:a2:55:d2:e3:d7: b8:13:46:60:f8:e8:10:ed:58:11:2a:f0:a8:28:e3: 51:82:2b:38:04:7b:44:3c:6a:fc:0a:3f:f0:2e:30: 4b:11:25:64:82:f9:f4:27:47:2c:e8:75:de:fb:e6: d1:a1:b0:8c:f5:d8:80:2d:b8:de:2c:c7:45:4d:07: ef:fc:ea:c5:0a:b6:11:fc:15:3a:9b:11:81:ff:ab: 60:55:4a:66:52:77:ea:f0:14:72:49:f0:48:37:51: 92:de:8a:c9:98:8f:8a:0a:5a:19:39:e8:f7:b9:01: 76:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B0:1E:A2:24:8F:56:41:05:53:FA:A0:57:F4:F4:20:DF:14:33:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5f2854a5-a8d3-3b47-b10c-56016fd4464c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:73:a6:87:17:46:b2:d0:88:18:a4:58:40:e7:8a:bc:b7:04: b0:de:03:2e:75:9f:2b:99:62:94:2f:7d:73:cb:4d:c7:13:78: 71:22:4f:d8:3d:10:cd:0c:a6:d9:15:c3:2a:7a:1c:86:19:6a: 5e:0e:9c:96:f6:2f:f6:1a:bd:fe:b4:a9:1c:76:8d:f4:21:9e: 23:c5:f5:27:65:f2:b2:c2:09:86:44:03:db:2b:ef:3e:7c:db: 7b:4d:55:d7:8a:36:40:f9:dd:a8:98:39:40:9e:cb:e3:91:47: 9d:2b:80:c8:0c:92:80:a9:b3:09:ca:82:1e:46:3e:b2:94:af: f9:08:4c:54:f1:c3:90:a1:8c:97:bf:9c:d3:68:d0:5a:c8:e0: 7b:69:cc:82:73:5c:c8:7a:41:f8:f7:ec:f5:56:27:d8:da:19: 98:8e:e9:8b:dc:ca:65:5d:d7:0e:42:73:c8:c6:0f:60:18:ca: 67:9b:4d:bf:27:80:13:6d:ad:cb:41:7d:51:23:d5:66:c0:c4: 6a:84:bd:f2:df:53:a9:70:ea:bb:26:93:d7:ae:0f:03:79:20: 6a:e3:1b:34:57:08:f8:50:4c:45:49:f4:a7:cb:14:ff:2a:98: 18:56:07:e0:0c:88:60:3f:52:1f:50:fe:1a:29:56:39:7a:87: 78:41:cf:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelmOUArgT3Vk1iSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MWY3MTA4ZGUtZDIwMS00MzNhLWE5NDUtZjY4YzZmMWVjOTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjp4DPvCk7w399Ahmq7g312ioqHcWBWqL0P+ DcORxDeDUEV0wxOrR0eTuiZtBcv5QpBtfrBq/6kIskd6sqY8DI0oYYwDb4ZVFtUB ikzJ9u2phwkd7W8Eco/EgXUxmpe9KAiDkBM1okfyHlIjrhtqXaatY/qK4rWzH4r4 ElD8Bz1ghYT0p3N7XzsPWaIJ2fubolXS49e4E0Zg+OgQ7VgRKvCoKONRgis4BHtE PGr8Cj/wLjBLESVkgvn0J0cs6HXe++bRobCM9diALbjeLMdFTQfv/OrFCrYR/BU6 mxGB/6tgVUpmUnfq8BRySfBIN1GS3orJmI+KCloZOej3uQF2OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuwHqIkj1ZBBVP6oFf09CDfFDOhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWYyODU0YTUtYThkMy0z YjQ3LWIxMGMtNTYwMTZmZDQ0NjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCFkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBzpocXRrLQiBikWEDniry3BLDeAy51nyuZYpQvfXPLTccTeHEiT9g9 EM0MptkVwyp6HIYZal4OnJb2L/Yavf60qRx2jfQhniPF9Sdl8rLCCYZEA9sr7z58 23tNVdeKNkD53aiYOUCey+ORR50rgMgMkoCpswnKgh5GPrKUr/kITFTxw5ChjJe/ nNNo0FrI4HtpzIJzXMh6Qfj37PVWJ9jaGZiO6YvcymVd1w5Cc8jGD2AYymebTb8n gBNtrctBfVEj1WbAxGqEvfLfU6lw6rsmk9euDwN5IGrjGzRXCPhQTEVJ9KfLFP8q mBhWB+AMiGA/Uh9Q/hopVjl6h3hBzyA= -----END CERTIFICATE-----Generated at Sun Aug 24 08:35:39 2025 by rpki-client