$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/443e89df-a57e-3b68-968d-fefcb5b931ef.roa File: 443e89df-a57e-3b68-968d-fefcb5b931ef.roa (raw, json) Hash identifier: 1fbvs0Z+ZFrMb+YHceiZQzdbHHdgQOih9EA59KIZ09o= Subject key identifier: 0A:DE:53:2D:E5:F0:B0:93:AD:BB:40:54:A5:ED:56:03:8D:95:15:4A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AF6868F1006DB6B4996B5E400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/443e89df-a57e-3b68-968d-fefcb5b931ef.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.33.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:8f:10:06:db:6b:49:96:b5:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=2a7ae42f-2b92-4567-8e17-2bbf883f6028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:78:f0:82:2a:a8:95:4e:86:85:b0:cb:21:ce: be:09:a0:1d:c0:ee:25:6c:c3:3d:e6:60:04:46:94: 30:47:6b:26:12:7b:d6:2e:dc:a5:42:29:63:c7:ab: 69:3c:94:67:60:fb:cc:f8:0e:83:bc:70:bc:b4:53: 9c:ea:69:b3:2a:cc:7a:c6:f7:94:56:05:62:5f:40: 87:a2:23:20:0c:1b:7d:97:bf:44:54:2e:c2:b9:85: 57:6a:84:8a:b3:3d:5c:a0:12:b2:8f:89:b5:10:b6: 45:16:5b:75:31:25:9d:c6:99:63:01:7a:ef:1e:d5: be:fe:f4:14:00:61:17:6f:23:eb:c0:64:bb:91:b2: d4:43:13:61:2e:0d:d3:d7:cc:8b:42:df:4b:ae:01: ff:89:bc:99:de:be:0f:49:0a:02:48:50:3d:7b:0c: c5:65:c6:36:2b:8d:ba:99:4c:d1:cd:94:80:16:03: e6:9d:da:41:61:d2:5d:ef:c6:68:a0:31:ff:d3:bb: be:9a:d4:ba:83:d5:11:ba:be:20:76:a8:ed:0a:48: 54:42:b5:bf:3c:92:ed:92:82:be:7f:a1:3d:0b:f6: 9d:42:10:a6:4d:51:11:b1:71:67:30:1a:de:5b:04: 27:87:8e:54:2b:4b:46:a6:de:5e:e8:7d:fa:19:86: ca:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DE:53:2D:E5:F0:B0:93:AD:BB:40:54:A5:ED:56:03:8D:95:15:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/443e89df-a57e-3b68-968d-fefcb5b931ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:9e:30:8d:1c:ba:aa:b1:96:fd:a5:f9:1f:6b:8a:00:36:f7: 2b:dc:ca:79:9f:c3:9f:91:44:36:9f:79:92:53:6d:d0:48:fb: 99:77:d2:15:01:53:de:e3:66:fa:3a:ef:e7:d1:b7:8b:c3:26: 1e:3a:5f:85:c8:86:23:8b:85:9c:d2:72:ee:d9:7f:10:e7:4b: ab:8b:9c:aa:86:01:26:48:68:51:66:a7:5d:5c:68:31:25:42: 05:c6:47:d2:05:ea:18:b6:43:bd:21:3d:25:90:0f:a8:cf:ce: a9:3c:40:6f:49:9c:28:47:fa:20:2f:bc:1b:b6:ee:30:45:8e: 44:6e:53:cb:bb:22:0f:ec:cb:3a:e9:53:4f:5d:52:e8:ce:ba: 8a:31:c6:fb:b5:c3:ea:26:ee:47:a0:18:ab:16:61:6e:55:6f: 80:ba:6d:b7:1a:bc:f6:3f:77:d8:aa:d9:ff:b3:be:fa:d4:84: 28:02:35:f5:0b:81:8e:aa:c5:3b:5d:56:0c:d6:2f:92:c2:57: 0f:0d:d0:50:5b:61:56:75:a8:cb:95:94:e8:2c:4d:a2:b4:d1: 4b:ad:31:9c:b2:16:c7:85:31:5d:d1:01:2f:0c:50:47:d2:02: 22:b5:dc:cc:45:06:18:89:52:57:55:a6:b5:55:5a:e7:f0:06: cf:95:86:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2ho8QBttrSZa15AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk MmE3YWU0MmYtMmI5Mi00NTY3LThlMTctMmJiZjg4M2Y2MDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3jwgiqolU6GhbDLIc6+CaAdwO4lbMM95mAE RpQwR2smEnvWLtylQiljx6tpPJRnYPvM+A6DvHC8tFOc6mmzKsx6xveUVgViX0CH oiMgDBt9l79EVC7CuYVXaoSKsz1coBKyj4m1ELZFFlt1MSWdxpljAXrvHtW+/vQU AGEXbyPrwGS7kbLUQxNhLg3T18yLQt9LrgH/ibyZ3r4PSQoCSFA9ewzFZcY2K426 mUzRzZSAFgPmndpBYdJd78ZooDH/07u+mtS6g9URur4gdqjtCkhUQrW/PJLtkoK+ f6E9C/adQhCmTVERsXFnMBreWwQnh45UK0tGpt5e6H36GYbKkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAreUy3l8LCTrbtAVKXtVgONlRVKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDQzZTg5ZGYtYTU3ZS0z YjY4LTk2OGQtZmVmY2I1YjkzMWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCF2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKeMI0cuqqxlv2l+R9rigA29yvcynmfw5+RRDafeZJTbdBI+5l30hUB U97jZvo67+fRt4vDJh46X4XIhiOLhZzScu7ZfxDnS6uLnKqGASZIaFFmp11caDEl QgXGR9IF6hi2Q70hPSWQD6jPzqk8QG9JnChH+iAvvBu27jBFjkRuU8u7Ig/syzrp U09dUujOuooxxvu1w+om7kegGKsWYW5Vb4C6bbcavPY/d9iq2f+zvvrUhCgCNfUL gY6qxTtdVgzWL5LCVw8N0FBbYVZ1qMuVlOgsTaK00UutMZyyFseFMV3RAS8MUEfS AiK13MxFBhiJUldVprVVWufwBs+Vhlo= -----END CERTIFICATE-----Generated at Tue Aug 26 06:37:24 2025 by rpki-client