$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/785ef6c1-0f29-3372-a80f-ce269e76b5bd.roa File: 785ef6c1-0f29-3372-a80f-ce269e76b5bd.roa (raw, json) Hash identifier: maPdv4RYLmgp8xkJvMgkUCc8ypHg4DyhgJvrEf8QevI= Subject key identifier: 58:CF:8A:F6:D3:B1:58:E7:EE:94:2D:0E:6E:A5:80:E0:50:F1:8D:21 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AFAB688B05F4BDC2C67C02500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/785ef6c1-0f29-3372-a80f-ce269e76b5bd.roa Signing time: Tue 26 Aug 2025 01:00:32 +0000 ROA not before: Tue 26 Aug 2025 01:00:32 +0000 ROA not after: Mon 24 Nov 2025 02:00:32 +0000 asID: 8069 IP address blocks: 20.33.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:b6:88:b0:5f:4b:dc:2c:67:c0:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 26 01:00:32 2025 GMT Not After : Nov 24 02:00:32 2025 GMT Subject: CN=ebc2e2ed-c3b8-4f85-b01f-e9577dcc08b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6d:fb:a9:0f:87:e4:7d:81:f3:94:77:68:ae: 91:5e:a5:17:d3:a8:cd:86:6f:59:79:ed:85:69:7c: d4:fe:0f:60:15:05:cc:3a:50:46:53:3f:a0:8a:4a: e8:20:16:86:55:f0:52:bd:af:68:ee:a9:06:de:60: 10:9c:8a:72:5b:1a:e2:f4:41:a3:01:a9:47:8f:28: 19:89:29:d7:b8:e6:5a:49:8a:7c:fc:47:4f:45:50: a5:7f:c5:a2:08:4c:93:f2:8c:67:cc:79:dd:35:6a: f6:37:e8:55:54:ba:09:4f:8e:33:07:51:b5:01:2e: b4:8e:32:0a:2a:0c:11:f7:b4:f2:7f:33:8b:27:f6: 9c:db:39:af:07:3d:96:a1:71:7e:0f:10:45:ca:ca: b2:c1:3c:b9:b4:02:5f:dd:6a:8e:13:30:4f:0a:1b: d8:9f:53:aa:4e:ae:5d:df:42:a8:7b:c4:e4:29:1e: c0:90:58:da:29:23:1c:26:07:5a:e0:07:d3:0d:67: f8:cc:72:6e:32:4b:82:5f:c9:e4:d5:72:ea:86:7f: 80:c8:c7:ac:31:8a:f6:af:74:df:e3:63:e3:f9:b6: 17:63:8b:72:e3:29:df:e8:c3:3f:fe:c5:06:21:54: ca:bf:40:39:0f:93:83:cf:5a:c7:40:c6:f0:6a:ba: ed:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CF:8A:F6:D3:B1:58:E7:EE:94:2D:0E:6E:A5:80:E0:50:F1:8D:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/785ef6c1-0f29-3372-a80f-ce269e76b5bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:6c:83:c1:9e:5b:32:13:38:05:ca:30:9e:e0:a7:1e:14:d1: eb:f2:04:d0:63:b8:f1:11:0f:4d:d9:a7:82:99:03:bc:86:6f: be:9d:60:4b:94:a8:c6:74:05:77:3c:62:00:9e:5f:54:8d:cb: d8:03:72:76:f6:03:69:fd:1f:7a:4e:58:c3:43:05:a0:4c:e3: 08:ed:9c:f4:f9:d7:d8:ea:98:3e:75:8b:65:0c:1a:5c:29:e0: 73:d6:53:d9:20:08:dd:77:a0:7e:02:0a:e7:87:59:0c:e2:d4: d3:8d:3b:b7:d5:59:84:c3:16:17:09:19:98:42:18:90:13:eb: 34:e4:55:1c:9b:d8:b8:b5:11:56:91:34:fd:79:d0:3f:6b:b6: 58:dd:98:2d:61:6a:57:7a:5e:c9:c3:7f:3d:2d:4f:5e:cb:88: 47:f2:9b:c6:0e:d3:50:e8:7b:a1:f4:3c:a4:23:4d:18:34:45: 51:14:27:41:cf:dd:9d:42:d0:f8:c8:63:9d:04:1d:d0:7c:58: 2b:69:c1:3d:5c:7b:7b:b6:80:f3:ef:25:1c:d6:55:33:00:01: 5e:b1:cc:04:fe:71:bc:55:8d:6e:5d:86:8e:bc:b7:2f:53:40: b9:2f:42:31:a3:c3:a6:90:58:60:26:58:41:90:74:ad:55:da: d0:42:9b:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr6toiwX0vcLGfAJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNjAxMDAzMloXDTI1MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk ZWJjMmUyZWQtYzNiOC00Zjg1LWIwMWYtZTk1NzdkY2MwOGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgm37qQ+H5H2B85R3aK6RXqUX06jNhm9Zee2F aXzU/g9gFQXMOlBGUz+gikroIBaGVfBSva9o7qkG3mAQnIpyWxri9EGjAalHjygZ iSnXuOZaSYp8/EdPRVClf8WiCEyT8oxnzHndNWr2N+hVVLoJT44zB1G1AS60jjIK KgwR97TyfzOLJ/ac2zmvBz2WoXF+DxBFysqywTy5tAJf3WqOEzBPChvYn1OqTq5d 30Koe8TkKR7AkFjaKSMcJgda4AfTDWf4zHJuMkuCX8nk1XLqhn+AyMesMYr2r3Tf 42Pj+bYXY4ty4ynf6MM//sUGIVTKv0A5D5ODz1rHQMbwarrt3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjPivbTsVjn7pQtDm6lgOBQ8Y0hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzg1ZWY2YzEtMGYyOS0z MzcyLWE4MGYtY2UyNjllNzZiNWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9sg8GeWzITOAXKMJ7gpx4U0evyBNBjuPERD03Zp4KZA7yGb76dYEuU qMZ0BXc8YgCeX1SNy9gDcnb2A2n9H3pOWMNDBaBM4wjtnPT519jqmD51i2UMGlwp 4HPWU9kgCN13oH4CCueHWQzi1NONO7fVWYTDFhcJGZhCGJAT6zTkVRyb2Li1EVaR NP150D9rtljdmC1hald6XsnDfz0tT17LiEfym8YO01Doe6H0PKQjTRg0RVEUJ0HP 3Z1C0PjIY50EHdB8WCtpwT1ce3u2gPPvJRzWVTMAAV6xzAT+cbxVjW5dho68ty9T QLkvQjGjw6aQWGAmWEGQdK1V2tBCm5E= -----END CERTIFICATE-----Generated at Tue Aug 26 06:46:19 2025 by rpki-client