$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eed63971-c454-3755-9b04-dc093f311036.roa File: eed63971-c454-3755-9b04-dc093f311036.roa (raw, json) Hash identifier: ylg82wewwYyVJ3fdrh/xjo4dlDVxJLGQlrMB4LwxsGk= Subject key identifier: 8F:74:8C:A3:26:9B:0E:97:D3:63:10:9C:6D:4B:F2:7B:A2:E1:5A:63 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AF25699821B2A3BEB9B22F780 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eed63971-c454-3755-9b04-dc093f311036.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.33.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:99:82:1b:2a:3b:eb:9b:22:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=3ab9dfab-b03e-460e-9ec3-1cd618c4310f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:db:48:5b:cf:56:6e:25:57:f4:c4:6f:65:40: 3f:60:97:a3:e5:e6:6d:65:9f:a6:ff:b3:9b:8e:ac: 07:64:43:22:39:20:29:fd:c2:ed:d0:f9:22:41:1a: aa:50:2b:34:7e:97:d0:f9:6a:d4:0c:bb:75:cb:5a: 6a:c9:50:81:f3:9c:b5:07:e7:97:bf:30:31:06:76: a1:76:cf:fc:60:14:3b:33:3d:3d:a0:b3:54:14:af: ac:0e:31:74:a8:45:88:d6:c0:a4:ab:22:fa:7f:ef: 3f:cb:6a:2d:70:50:95:0b:6d:d8:24:24:69:bd:f5: e1:03:a2:f6:ca:f5:bc:3c:da:2b:b6:4f:8d:ac:3f: 7b:1e:ff:ed:81:b2:dc:9a:8f:ed:bb:ce:a1:75:94: be:1f:fd:9a:6e:cd:56:f0:a0:08:4d:6f:ee:1b:59: 3b:93:43:d6:71:89:97:4d:6a:17:50:fc:c2:4e:e6: 93:8b:d4:f6:4c:c2:ee:75:f0:8c:c5:6d:21:55:e3: de:63:88:71:02:5b:f7:06:18:b7:04:95:1e:39:86: c4:a1:57:d9:d8:5d:aa:d4:65:8d:20:5d:c7:44:5b: 8d:42:24:c6:8e:29:77:03:c9:09:44:c8:b0:80:43: 61:bc:58:05:20:b5:24:b2:b8:b5:e1:b7:b2:1f:d3: 47:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:74:8C:A3:26:9B:0E:97:D3:63:10:9C:6D:4B:F2:7B:A2:E1:5A:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eed63971-c454-3755-9b04-dc093f311036.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:45:4b:56:9b:74:1c:c4:8f:d1:c1:a5:21:b3:eb:e4:00:f0: 63:64:08:fb:10:5b:41:f0:6f:0b:9c:99:cc:e5:b5:ed:55:e2: 79:dd:dc:6e:5c:27:34:44:5b:45:07:7d:a3:9f:64:4c:26:de: f8:16:96:a4:19:97:10:66:e0:c6:27:54:3c:d0:69:a3:1c:cc: 4f:45:f8:32:ca:14:8d:06:a5:e6:8e:51:8b:cd:0c:c8:2f:bb: b5:ca:d1:40:c9:62:21:74:28:7c:01:45:bf:8d:64:92:d4:17: 7c:f9:40:5b:00:3d:66:76:e4:f9:a8:8c:2d:16:6b:ba:2f:cc: a8:8d:c4:a1:ab:bc:77:d1:c9:4c:aa:b0:0f:e6:62:ac:28:00: 53:20:fb:81:2a:7b:69:48:bb:68:5e:37:a7:1f:e2:8e:30:1d: 2a:17:59:7e:00:e5:8e:7c:82:1b:a5:9e:75:ce:22:eb:73:bb: 4d:a4:40:2d:0a:e0:ef:7f:5d:5f:02:fb:26:fa:9e:0b:4c:39: 73:a4:d1:05:96:9f:e8:d4:25:5a:ce:42:18:05:3e:7a:fb:5b: c2:ef:5b:3b:02:39:63:00:53:58:73:0a:20:05:ba:ec:ec:b8: 8b:74:03:18:ce:e1:ce:5f:63:ac:a8:9f:bc:7d:4e:72:c4:99: 2c:59:ae:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVpmCGyo765si94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk M2FiOWRmYWItYjAzZS00NjBlLTllYzMtMWNkNjE4YzQzMTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdtIW89WbiVX9MRvZUA/YJej5eZtZZ+m/7Ob jqwHZEMiOSAp/cLt0PkiQRqqUCs0fpfQ+WrUDLt1y1pqyVCB85y1B+eXvzAxBnah ds/8YBQ7Mz09oLNUFK+sDjF0qEWI1sCkqyL6f+8/y2otcFCVC23YJCRpvfXhA6L2 yvW8PNortk+NrD97Hv/tgbLcmo/tu86hdZS+H/2abs1W8KAITW/uG1k7k0PWcYmX TWoXUPzCTuaTi9T2TMLudfCMxW0hVePeY4hxAlv3Bhi3BJUeOYbEoVfZ2F2q1GWN IF3HRFuNQiTGjil3A8kJRMiwgENhvFgFILUksri14beyH9NHXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI90jKMmmw6X02MQnG1L8nui4VpjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWVkNjM5NzEtYzQ1NC0z NzU1LTliMDQtZGMwOTNmMzExMDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCErMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFFS1abdBzEj9HBpSGz6+QA8GNkCPsQW0Hwbwucmczlte1V4nnd3G5c JzREW0UHfaOfZEwm3vgWlqQZlxBm4MYnVDzQaaMczE9F+DLKFI0GpeaOUYvNDMgv u7XK0UDJYiF0KHwBRb+NZJLUF3z5QFsAPWZ25PmojC0Wa7ovzKiNxKGrvHfRyUyq sA/mYqwoAFMg+4Eqe2lIu2heN6cf4o4wHSoXWX4A5Y58ghulnnXOIutzu02kQC0K 4O9/XV8C+yb6ngtMOXOk0QWWn+jUJVrOQhgFPnr7W8LvWzsCOWMAU1hzCiAFuuzs uIt0AxjO4c5fY6yon7x9TnLEmSxZrgw= -----END CERTIFICATE-----Generated at Sun Aug 24 08:43:10 2025 by rpki-client