$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e68b6155-3d36-35e2-bf22-871b49c9a01a.roa File: e68b6155-3d36-35e2-bf22-871b49c9a01a.roa (raw, json) Hash identifier: 9ZSiuPs1PSG3/jvUoW2cbjrukP6D4IocoVnoxWhZkbk= Subject key identifier: FD:E8:95:AB:A1:06:D7:7B:B0:51:8B:2F:4C:70:C8:48:3D:ED:6A:B2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AF521581433D5A4178EE01440 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e68b6155-3d36-35e2-bf22-871b49c9a01a.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.33.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:58:14:33:d5:a4:17:8e:e0:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=91eeebfd-0643-446c-a20b-7dbe48ad5097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:23:47:52:74:b2:2b:95:d4:e9:fa:27:af:c3: cc:0a:eb:74:51:c9:84:cb:8d:a4:d0:43:aa:59:f5: 66:29:7a:c5:c5:b4:f5:c1:de:04:9b:2e:b9:fd:eb: 28:64:77:f2:44:db:04:7a:ea:6c:9a:e3:d7:fb:dc: 5a:01:5b:9c:f7:f0:50:2f:7d:c4:65:d1:42:93:96: ba:d1:7a:2c:87:4a:ad:3d:11:6e:90:dd:54:39:fc: a3:61:14:8e:2a:9b:e2:87:74:f6:4d:ad:d6:69:7b: b1:dd:d2:ec:13:b1:47:44:57:c0:d5:80:b0:10:4f: e2:a4:ab:76:32:b7:f7:96:2a:54:fe:4d:89:7b:da: 10:48:45:ce:db:85:52:2b:ef:43:d6:c7:22:91:66: ae:65:bb:14:ca:74:d2:79:30:25:42:82:19:82:f1: c1:10:1f:37:61:06:46:68:34:36:ba:cb:98:6e:01: d9:82:cf:58:7b:88:82:34:6d:51:4d:f2:64:f7:f4: 4d:1d:56:7e:ef:95:24:3a:d8:b4:f2:2d:7b:d9:1f: 7f:e1:a1:84:80:0a:d5:1d:41:ca:7d:4d:5d:25:41: c5:8f:1e:0f:84:fe:f4:27:d8:a2:65:7d:bb:a1:2c: b5:f4:ab:86:3a:1b:f5:48:d2:81:76:c8:71:f1:79: 02:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E8:95:AB:A1:06:D7:7B:B0:51:8B:2F:4C:70:C8:48:3D:ED:6A:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e68b6155-3d36-35e2-bf22-871b49c9a01a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:0e:8a:fb:48:3a:80:7c:5d:bb:2f:33:2f:ac:fe:c7:61:28: 4c:c4:ea:1d:51:97:a0:d4:e5:71:e5:3e:0a:09:e9:26:b0:8b: 03:da:31:3f:d7:48:8d:a1:d7:22:58:49:40:e1:74:c4:e5:88: 71:60:19:79:9e:5f:75:dd:60:55:5b:a4:c8:a3:2c:1a:5e:95: 82:39:2e:7a:a6:0d:90:8b:fb:cc:ea:52:92:79:3d:73:45:63: e4:4a:8c:af:37:15:09:6a:af:32:ab:88:30:ba:3d:75:ba:fc: 9f:af:9d:48:33:e9:9f:e9:9d:cb:33:f0:f9:6b:6a:86:5a:4f: fd:b7:33:12:6f:93:1c:d8:24:b8:25:e3:27:64:38:fd:7e:4e: 34:95:3d:78:4d:6c:c7:73:9f:56:9f:e3:ed:0c:d5:03:10:52: f9:70:33:32:b0:7e:f8:15:19:56:ea:f5:f2:6f:b2:67:c7:47: 51:52:c9:84:7b:de:8d:ee:d0:bf:1c:0e:e3:2c:51:4d:2c:76: 88:32:a0:2d:8f:93:ff:6d:fd:41:83:78:e4:b5:04:20:52:9b: 55:f2:f4:fe:31:a4:2f:45:ed:68:1f:1e:74:91:fe:02:9b:02: a5:b1:a0:a7:a8:2d:8f:de:aa:95:af:35:88:55:02:89:0b:bf: 4a:69:16:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IVgUM9WkF47gFEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk OTFlZWViZmQtMDY0My00NDZjLWEyMGItN2RiZTQ4YWQ1MDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriNHUnSyK5XU6fonr8PMCut0UcmEy42k0EOq WfVmKXrFxbT1wd4Emy65/esoZHfyRNsEeupsmuPX+9xaAVuc9/BQL33EZdFCk5a6 0Xosh0qtPRFukN1UOfyjYRSOKpvih3T2Ta3WaXux3dLsE7FHRFfA1YCwEE/ipKt2 Mrf3lipU/k2Je9oQSEXO24VSK+9D1scikWauZbsUynTSeTAlQoIZgvHBEB83YQZG aDQ2usuYbgHZgs9Ye4iCNG1RTfJk9/RNHVZ+75UkOti08i172R9/4aGEgArVHUHK fU1dJUHFjx4PhP70J9iiZX27oSy19KuGOhv1SNKBdshx8XkCNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3olauhBtd7sFGLL0xwyEg97WqyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTY4YjYxNTUtM2QzNi0z NWUyLWJmMjItODcxYjQ5YzlhMDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAOivtIOoB8XbsvMy+s/sdhKEzE6h1Rl6DU5XHlPgoJ6SawiwPaMT/X SI2h1yJYSUDhdMTliHFgGXmeX3XdYFVbpMijLBpelYI5LnqmDZCL+8zqUpJ5PXNF Y+RKjK83FQlqrzKriDC6PXW6/J+vnUgz6Z/pncsz8PlraoZaT/23MxJvkxzYJLgl 4ydkOP1+TjSVPXhNbMdzn1af4+0M1QMQUvlwMzKwfvgVGVbq9fJvsmfHR1FSyYR7 3o3u0L8cDuMsUU0sdogyoC2Pk/9t/UGDeOS1BCBSm1Xy9P4xpC9F7WgfHnSR/gKb AqWxoKeoLY/eqpWvNYhVAokLv0ppFg0= -----END CERTIFICATE-----Generated at Sun Aug 24 08:42:01 2025 by rpki-client