$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/23b75267-e060-3ff2-ab61-3a6b5a13ee1d.roa File: 23b75267-e060-3ff2-ab61-3a6b5a13ee1d.roa (raw, json) Hash identifier: CSMjqtGR4GIHmjb2aUPAvE3ZD+Sezpf0avPwdkWwtIg= Subject key identifier: E2:4A:21:F6:E3:A5:1E:FF:7D:5B:5F:DC:8B:C9:EF:B9:E7:B8:4C:60 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AF6868FB2A430FB3D1BA6D400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/23b75267-e060-3ff2-ab61-3a6b5a13ee1d.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.33.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:8f:b2:a4:30:fb:3d:1b:a6:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=de7164e5-b547-43e9-9599-620c408fe4bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:17:3a:de:f9:4e:ec:98:e0:7f:ec:66:a0:24: 66:d7:a3:cd:9d:6b:3c:01:da:4e:50:a5:f4:59:fe: 91:fa:8d:62:47:c2:84:6d:58:2d:20:17:8d:53:7e: 70:58:fb:51:f0:df:3f:34:66:a2:cf:c7:98:b9:73: e3:19:a2:7f:2a:03:97:14:79:e0:ce:01:0d:df:85: ee:c6:ee:cb:e6:6a:d3:bf:2f:80:ba:7f:0e:89:4a: 40:c2:38:be:e6:4c:cd:83:37:c8:f8:53:92:c8:fc: ed:cf:74:98:5c:85:d7:25:3c:61:d4:b9:64:66:58: ff:d1:df:29:6e:8c:24:33:10:e6:0f:54:9e:5a:74: 80:18:16:d3:b4:c4:49:a9:d3:c7:87:92:1e:19:22: 54:61:a2:e4:7b:34:65:f6:ee:ff:92:2a:2c:6a:eb: b1:9b:66:c1:50:14:d9:41:d4:b6:b0:2f:6a:56:52: 2e:10:e3:d8:b7:d1:a8:87:4e:95:af:4a:29:24:ee: b7:9b:b8:49:e7:06:c0:bb:21:04:a9:2c:a5:cc:5a: 4e:33:f4:04:14:1d:60:9d:87:52:5a:eb:0f:c5:96: 28:fd:c6:0c:f6:0f:26:5b:1e:bb:81:e5:90:8b:a5: d1:0c:f7:3e:f0:a9:f9:54:51:ee:91:f3:7e:c3:94: b2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4A:21:F6:E3:A5:1E:FF:7D:5B:5F:DC:8B:C9:EF:B9:E7:B8:4C:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/23b75267-e060-3ff2-ab61-3a6b5a13ee1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:ee:1f:1d:8b:a7:01:7f:5f:17:d7:8f:41:6b:2e:6d:52:a3: c1:b5:7a:9d:0b:80:6a:2d:af:9f:1f:27:4f:7a:27:d9:71:a6: 8c:2b:89:fa:31:66:ab:7a:3e:12:ad:36:d7:a3:2d:63:5d:07: ca:61:02:7f:f4:30:f2:18:49:45:9c:1d:ee:4f:aa:9c:d4:a1: b7:0c:01:e1:97:31:04:bc:86:3d:b1:b5:6b:12:b8:3c:42:d3: 17:15:64:d3:5d:18:b5:88:4d:d6:69:17:0e:e3:cf:84:94:33: 40:7f:58:95:2c:34:ed:4c:b1:92:30:1f:9b:50:a1:ff:57:f7: 92:a3:2c:64:3a:a8:23:0c:1b:41:86:af:01:6f:6f:5a:bb:89: 0f:3a:e9:20:33:32:00:38:d6:36:b7:18:68:5b:91:bc:90:6f: 7f:ba:e2:5d:9f:fc:15:93:c6:ce:9c:70:01:46:3a:07:45:bb: a8:8e:91:f9:e5:b7:fd:8c:29:a8:e7:10:bf:e7:ab:2d:88:14: bb:00:60:b3:7b:1e:fe:92:46:a1:5f:eb:2b:5f:13:ba:f3:f3: 24:2f:73:f8:83:07:9b:f5:93:72:d0:c8:fc:c9:cd:67:28:af: 7e:de:7a:03:45:a6:db:fc:ea:ed:9e:97:e0:2e:63:11:28:0b: 1c:b6:a5:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2ho+ypDD7PRum1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk ZGU3MTY0ZTUtYjU0Ny00M2U5LTk1OTktNjIwYzQwOGZlNGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBc63vlO7Jjgf+xmoCRm16PNnWs8AdpOUKX0 Wf6R+o1iR8KEbVgtIBeNU35wWPtR8N8/NGaiz8eYuXPjGaJ/KgOXFHngzgEN34Xu xu7L5mrTvy+Aun8OiUpAwji+5kzNgzfI+FOSyPztz3SYXIXXJTxh1LlkZlj/0d8p bowkMxDmD1SeWnSAGBbTtMRJqdPHh5IeGSJUYaLkezRl9u7/kiosauuxm2bBUBTZ QdS2sC9qVlIuEOPYt9Goh06Vr0opJO63m7hJ5wbAuyEEqSylzFpOM/QEFB1gnYdS WusPxZYo/cYM9g8mWx67geWQi6XRDPc+8Kn5VFHukfN+w5SyPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJKIfbjpR7/fVtf3IvJ77nnuExgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjNiNzUyNjctZTA2MC0z ZmYyLWFiNjEtM2E2YjVhMTNlZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/uHx2LpwF/XxfXj0FrLm1So8G1ep0LgGotr58fJ096J9lxpowrifox Zqt6PhKtNtejLWNdB8phAn/0MPIYSUWcHe5PqpzUobcMAeGXMQS8hj2xtWsSuDxC 0xcVZNNdGLWITdZpFw7jz4SUM0B/WJUsNO1MsZIwH5tQof9X95KjLGQ6qCMMG0GG rwFvb1q7iQ866SAzMgA41ja3GGhbkbyQb3+64l2f/BWTxs6ccAFGOgdFu6iOkfnl t/2MKajnEL/nqy2IFLsAYLN7Hv6SRqFf6ytfE7rz8yQvc/iDB5v1k3LQyPzJzWco r37eegNFptv86u2el+AuYxEoCxy2pWc= -----END CERTIFICATE-----Generated at Tue Aug 26 06:45:48 2025 by rpki-client