$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/826b271f-edee-3676-98e4-6d4c334e95f2.roa File: 826b271f-edee-3676-98e4-6d4c334e95f2.roa (raw, json) Hash identifier: DEwjF1TBkFDGFvahJBLFjBQeKbll/tYiaMZl7ls7Vj8= Subject key identifier: 13:E6:33:26:53:79:98:7B:0E:D0:42:89:28:91:29:A9:D8:9F:85:2A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AF68691CD78196D5D0A587EE0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/826b271f-edee-3676-98e4-6d4c334e95f2.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.33.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:91:cd:78:19:6d:5d:0a:58:7e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=3b0b0c84-0879-41bd-aa6c-dfef9cb2aec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:47:28:70:59:72:5e:92:34:7d:d6:e5:6b:ea: dc:2b:80:e0:24:ae:d5:e4:ed:2a:92:4b:85:08:29: 5f:9a:2f:04:c5:39:75:31:44:a9:b8:3b:bd:6d:6c: 4b:11:33:f8:3a:25:63:ba:61:8a:39:93:28:ae:86: e7:c3:d9:3d:2e:8a:31:f0:fe:c3:6d:66:51:4f:cb: f9:af:a3:2e:92:14:65:16:d0:b3:1e:cb:d6:0e:54: 63:a9:c9:e1:b4:c2:10:87:db:41:c9:1e:c6:6f:a7: 9a:5f:3c:44:bb:23:1f:45:95:81:8e:02:92:19:a3: 7c:84:a0:98:28:66:42:13:8c:2c:9f:8d:7e:f3:69: f7:15:37:45:9c:fd:66:91:b4:31:f7:99:3e:aa:37: c1:14:e7:11:2a:b0:ca:18:0b:e4:64:01:70:45:b6: 82:4d:e1:2a:3f:d8:08:12:22:ed:bc:e2:7d:f8:d6: 53:76:bf:fc:87:bb:10:3c:31:50:f0:9f:be:64:09: fd:45:73:cf:76:aa:8b:75:a6:f4:88:1c:5c:c7:10: 9d:dd:d6:54:08:e9:8a:0d:de:19:f5:f2:e9:51:5c: a9:21:f6:dd:f6:1b:43:c9:6d:c9:84:95:a9:a5:e7: 21:30:a7:ef:9c:77:2c:5b:3e:f1:55:3e:5c:10:f7: f3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E6:33:26:53:79:98:7B:0E:D0:42:89:28:91:29:A9:D8:9F:85:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/826b271f-edee-3676-98e4-6d4c334e95f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:37:56:4f:7c:8b:3a:a0:31:7d:29:3c:61:1b:59:0c:d3:f3: 00:a3:78:a1:d8:73:90:a1:8d:2b:56:5c:2d:b9:d3:32:61:36: 2d:f8:53:9c:f3:67:b5:45:2d:c7:63:0e:55:78:c1:bc:34:ee: 5e:02:8b:02:0e:49:20:16:dc:f8:52:60:46:c0:cf:aa:47:eb: cc:b8:2e:51:49:b8:fb:7e:e4:56:a8:45:a9:65:f5:20:1f:37: 7c:36:f0:f0:dd:83:d0:e7:b5:ac:72:52:08:bd:d0:43:41:de: 03:df:e4:ac:df:72:65:38:b0:29:20:6b:54:61:3f:34:d2:28: 11:51:1c:5e:8c:46:08:86:fa:fa:b3:b0:03:70:09:99:9b:40: c6:4b:7a:86:1a:9a:cf:cb:f2:1f:78:68:ef:e5:08:79:c2:03: 31:0c:15:99:fc:d6:08:00:d4:f0:15:3e:c5:d4:e1:c8:6a:e9: 52:ec:07:8b:28:ea:55:f3:52:22:08:c0:6b:cb:3c:87:29:1d: 19:c4:e1:b0:a2:e9:d9:17:d7:38:8d:1a:b2:85:db:67:21:1b: a7:62:35:76:77:88:20:04:6e:ee:38:7d:21:1e:08:d7:73:ac: 3e:61:f5:77:79:fc:e5:2e:e5:b9:4c:0b:06:01:10:04:ce:72: 51:9e:a4:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2hpHNeBltXQpYfuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk M2IwYjBjODQtMDg3OS00MWJkLWFhNmMtZGZlZjljYjJhZWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUcocFlyXpI0fdbla+rcK4DgJK7V5O0qkkuF CClfmi8ExTl1MUSpuDu9bWxLETP4OiVjumGKOZMorobnw9k9Loox8P7DbWZRT8v5 r6MukhRlFtCzHsvWDlRjqcnhtMIQh9tByR7Gb6eaXzxEuyMfRZWBjgKSGaN8hKCY KGZCE4wsn41+82n3FTdFnP1mkbQx95k+qjfBFOcRKrDKGAvkZAFwRbaCTeEqP9gI EiLtvOJ9+NZTdr/8h7sQPDFQ8J++ZAn9RXPPdqqLdab0iBxcxxCd3dZUCOmKDd4Z 9fLpUVypIfbd9htDyW3JhJWppechMKfvnHcsWz7xVT5cEPfzoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPmMyZTeZh7DtBCiSiRKanYn4UqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODI2YjI3MWYtZWRlZS0z Njc2LTk4ZTQtNmQ0YzMzNGU5NWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQ3Vk98izqgMX0pPGEbWQzT8wCjeKHYc5ChjStWXC250zJhNi34U5zz Z7VFLcdjDlV4wbw07l4CiwIOSSAW3PhSYEbAz6pH68y4LlFJuPt+5FaoRall9SAf N3w28PDdg9DntaxyUgi90ENB3gPf5KzfcmU4sCkga1RhPzTSKBFRHF6MRgiG+vqz sANwCZmbQMZLeoYams/L8h94aO/lCHnCAzEMFZn81ggA1PAVPsXU4chq6VLsB4so 6lXzUiIIwGvLPIcpHRnE4bCi6dkX1ziNGrKF22chG6diNXZ3iCAEbu44fSEeCNdz rD5h9Xd5/OUu5blMCwYBEATOclGepA8= -----END CERTIFICATE-----Generated at Tue Aug 26 06:43:41 2025 by rpki-client