$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8a8728a-6384-37c5-8183-84d8806052ce.roa File: c8a8728a-6384-37c5-8183-84d8806052ce.roa (raw, json) Hash identifier: kA3EKENgQeIdibT7MF2Ct9ChZ4WoB4EyyOugScFFumI= Subject key identifier: D3:18:05:10:83:CE:FF:93:08:85:98:C1:EC:C2:01:FD:9C:0F:31:37 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AF256995BA607D456FEC7CD00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8a8728a-6384-37c5-8183-84d8806052ce.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.33.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:99:5b:a6:07:d4:56:fe:c7:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=94576bdb-de30-4fba-b475-d033adc4c455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1e:bd:b9:33:c0:0e:dc:b0:d7:30:88:67:cc: 57:a9:87:3c:5e:56:e4:07:80:a0:1a:53:70:fd:ac: 78:de:5a:a3:00:42:87:40:ee:1c:18:26:b4:ac:5b: 7a:76:6d:9b:39:52:03:82:95:8b:1c:af:55:88:62: 1e:93:08:4e:1f:59:a5:92:5f:d1:be:89:28:a7:e5: 2d:02:f2:3c:3d:fd:bd:74:ac:c0:fd:9e:6c:63:9c: 50:a9:15:90:0b:4c:f9:9a:7b:77:b9:1b:03:de:38: f2:76:9e:f0:5c:dd:2f:15:00:c2:0a:54:6e:73:9a: 4f:21:2f:ee:59:6c:4a:bb:63:df:75:74:1a:92:71: f8:8d:98:67:b7:74:9a:d2:86:5b:70:2f:f7:4c:ea: 91:1f:75:eb:7c:7e:48:b2:d1:79:88:a5:e8:9b:54: 26:05:e8:ff:1b:3d:47:79:62:7c:89:d3:35:2c:5a: 18:83:aa:93:27:03:64:e2:cd:31:93:06:01:5c:6b: f7:e8:9a:1f:1c:d7:a7:75:d8:bd:b6:5f:c3:a1:1c: 4e:4a:ea:4b:c7:4b:8e:13:5d:a1:76:32:68:86:88: d5:11:ef:62:ac:ee:37:47:7f:27:d1:02:b6:0a:64: 30:48:b3:b7:73:96:0c:30:08:54:a0:cc:fa:26:36: 97:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:18:05:10:83:CE:FF:93:08:85:98:C1:EC:C2:01:FD:9C:0F:31:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8a8728a-6384-37c5-8183-84d8806052ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:71:34:c7:80:93:18:de:2a:68:63:77:5c:c8:c0:aa:97:0b: d0:a1:a4:c6:f0:46:0c:a4:23:a0:73:38:d1:b9:d3:53:7c:5b: de:06:ab:61:11:a6:87:20:81:b2:8f:3f:e2:9f:b0:0e:2f:04: 00:3b:20:e7:e0:a2:ae:84:94:bf:a1:1a:dd:c5:da:c1:09:c6: 17:b3:26:c0:8b:83:9e:83:4d:39:23:24:70:ca:1f:b2:1e:92: 57:c7:c8:bb:5e:7d:3a:44:5c:c3:bb:16:74:3e:39:09:55:cd: 89:55:0d:15:b3:4e:29:6b:60:0f:6b:41:cd:00:70:21:34:78: 39:90:96:84:cf:4d:9b:bc:f2:6f:a8:08:1d:67:bd:26:ce:92: c1:c8:7f:e3:b1:47:26:c9:51:11:07:3c:de:58:4c:83:4a:5f: 01:b3:9b:a4:ef:10:40:6d:92:ed:dd:a5:66:10:c8:f2:7c:d4: 1e:b6:76:7c:74:64:8f:72:45:5c:96:4c:2c:e5:74:24:2a:ac: af:12:4d:3e:9e:18:89:48:df:96:02:8e:ec:98:58:5a:35:e4: 35:72:27:e5:98:8a:05:2b:e3:21:6c:fb:ab:26:8e:38:0c:b2: 3f:54:0d:88:86:fc:9e:a6:b0:61:61:34:79:3c:60:cf:58:69: 2b:94:f9:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVplbpgfUVv7HzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk OTQ1NzZiZGItZGUzMC00ZmJhLWI0NzUtZDAzM2FkYzRjNDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh69uTPADtyw1zCIZ8xXqYc8XlbkB4CgGlNw /ax43lqjAEKHQO4cGCa0rFt6dm2bOVIDgpWLHK9ViGIekwhOH1mlkl/Rvokop+Ut AvI8Pf29dKzA/Z5sY5xQqRWQC0z5mnt3uRsD3jjydp7wXN0vFQDCClRuc5pPIS/u WWxKu2PfdXQaknH4jZhnt3Sa0oZbcC/3TOqRH3XrfH5IstF5iKXom1QmBej/Gz1H eWJ8idM1LFoYg6qTJwNk4s0xkwYBXGv36JofHNenddi9tl/DoRxOSupLx0uOE12h djJohojVEe9irO43R38n0QK2CmQwSLO3c5YMMAhUoMz6JjaXgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMYBRCDzv+TCIWYwezCAf2cDzE3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzhhODcyOGEtNjM4NC0z N2M1LTgxODMtODRkODgwNjA1MmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdxNMeAkxjeKmhjd1zIwKqXC9ChpMbwRgykI6BzONG501N8W94Gq2ER pocggbKPP+KfsA4vBAA7IOfgoq6ElL+hGt3F2sEJxhezJsCLg56DTTkjJHDKH7Ie klfHyLtefTpEXMO7FnQ+OQlVzYlVDRWzTilrYA9rQc0AcCE0eDmQloTPTZu88m+o CB1nvSbOksHIf+OxRybJUREHPN5YTINKXwGzm6TvEEBtku3dpWYQyPJ81B62dnx0 ZI9yRVyWTCzldCQqrK8STT6eGIlI35YCjuyYWFo15DVyJ+WYigUr4yFs+6smjjgM sj9UDYiG/J6msGFhNHk8YM9YaSuU+Z8= -----END CERTIFICATE-----Generated at Sun Aug 24 06:57:45 2025 by rpki-client