$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eabcdd13-5aa9-3cdd-925b-8749506e0bec.roa File: eabcdd13-5aa9-3cdd-925b-8749506e0bec.roa (raw, json) Hash identifier: aQWSfSgkPf5xXCGHSdLGd9e+0u6UwKv3TOLUfSsGwog= Subject key identifier: 02:48:D0:4B:05:B2:A3:90:B3:61:12:22:03:55:B8:A2:17:64:BC:A2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AFAB6882A7916B5ABE75C7780 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eabcdd13-5aa9-3cdd-925b-8749506e0bec.roa Signing time: Tue 26 Aug 2025 01:00:32 +0000 ROA not before: Tue 26 Aug 2025 01:00:32 +0000 ROA not after: Mon 24 Nov 2025 02:00:32 +0000 asID: 8069 IP address blocks: 20.33.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:b6:88:2a:79:16:b5:ab:e7:5c:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 26 01:00:32 2025 GMT Not After : Nov 24 02:00:32 2025 GMT Subject: CN=8403393e-429a-4e85-afa8-54a0cbefa6f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:46:23:ca:13:a8:ac:46:4f:e5:88:4b:12:b2: 36:c1:cc:66:91:ed:75:f1:c8:8d:2d:7e:92:b2:e6: 27:25:7b:52:1d:06:d5:43:42:a4:c4:68:96:90:a7: 22:31:60:d6:29:6d:fe:db:73:18:2b:89:41:fb:f3: 8c:94:ad:6d:36:a0:1f:0d:90:15:8a:ea:a2:76:be: d9:e7:21:f6:d3:50:f4:3f:d6:4b:f5:87:f3:ec:d1: ba:21:3b:f0:ca:b2:f9:13:17:1a:da:9c:0f:b9:59: 2d:23:4e:3c:4b:ad:7e:29:cb:e8:3f:c7:c3:ed:31: 1f:2e:99:24:2f:75:ab:00:d0:64:43:9e:31:d5:72: 28:43:cd:70:4c:59:1e:63:d5:80:91:fb:69:ec:a3: 78:de:9c:c5:95:33:2d:b3:3a:88:95:0f:07:98:53: 78:f0:29:09:9b:bc:71:e0:df:d4:a5:c5:cf:fa:c7: 5f:0b:d9:ff:67:d0:e4:b2:0c:24:3f:eb:f9:83:e3: 01:21:a4:7b:40:b6:f6:31:8c:0c:a3:b4:18:cc:23: 02:84:7e:14:11:75:81:6e:fb:be:84:5e:03:bb:48: 20:ad:26:2c:65:93:19:0d:85:99:e1:b7:57:d4:bd: b5:22:26:17:03:85:4f:1e:c9:df:51:4e:c5:90:ee: 01:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:48:D0:4B:05:B2:A3:90:B3:61:12:22:03:55:B8:A2:17:64:BC:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eabcdd13-5aa9-3cdd-925b-8749506e0bec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:ed:20:d4:ad:16:ca:4c:d6:d4:24:21:9c:ba:b6:43:e0:c8: ad:53:3f:6b:66:67:a8:3e:14:0a:0d:a5:d4:91:07:52:ce:7c: 26:b7:88:38:1d:06:63:04:31:a0:43:60:5b:91:69:5b:87:22: 4f:3a:08:51:b6:57:87:24:e2:8d:e2:11:b8:1e:70:78:77:0d: 6a:e9:bc:08:df:76:56:ab:14:b0:96:7b:bc:55:d0:a9:67:6f: f5:4d:0f:4a:fe:72:a6:a0:18:8e:71:af:f7:bf:57:ac:38:f3: 64:74:4b:e9:38:8b:40:24:e4:f8:2d:6f:fa:a0:1f:28:81:5b: 10:12:98:a7:df:25:5e:1f:82:be:c0:60:2f:20:21:be:77:a3: c8:25:6f:9a:3e:77:47:5d:f5:0b:65:e6:34:00:08:ec:22:f9: e6:52:6e:38:d1:cc:2d:92:cb:e7:cd:56:46:a7:4a:89:3e:c5: e6:e4:04:c5:df:1f:f4:2e:b4:b1:da:84:78:6f:29:ec:da:b3: b0:d9:70:62:bc:50:57:14:31:3c:93:06:bc:3b:31:d0:6b:6d: 86:b2:7c:54:23:04:5b:b2:6f:09:49:d5:5e:4e:f3:de:aa:6c: ba:ad:44:4a:ef:4d:46:ca:18:aa:b2:dc:0e:e6:ed:b9:c3:d9: fa:d4:61:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr6togqeRa1q+dcd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNjAxMDAzMloXDTI1MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk ODQwMzM5M2UtNDI5YS00ZTg1LWFmYTgtNTRhMGNiZWZhNmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0YjyhOorEZP5YhLErI2wcxmke118ciNLX6S suYnJXtSHQbVQ0KkxGiWkKciMWDWKW3+23MYK4lB+/OMlK1tNqAfDZAViuqidr7Z 5yH201D0P9ZL9Yfz7NG6ITvwyrL5Exca2pwPuVktI048S61+KcvoP8fD7TEfLpkk L3WrANBkQ54x1XIoQ81wTFkeY9WAkftp7KN43pzFlTMtszqIlQ8HmFN48CkJm7xx 4N/UpcXP+sdfC9n/Z9DksgwkP+v5g+MBIaR7QLb2MYwMo7QYzCMChH4UEXWBbvu+ hF4Du0ggrSYsZZMZDYWZ4bdX1L21IiYXA4VPHsnfUU7FkO4B1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJI0EsFsqOQs2ESIgNVuKIXZLyiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWFiY2RkMTMtNWFhOS0z Y2RkLTkyNWItODc0OTUwNmUwYmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjtINStFspM1tQkIZy6tkPgyK1TP2tmZ6g+FAoNpdSRB1LOfCa3iDgd BmMEMaBDYFuRaVuHIk86CFG2V4ck4o3iEbgecHh3DWrpvAjfdlarFLCWe7xV0Kln b/VND0r+cqagGI5xr/e/V6w482R0S+k4i0Ak5Pgtb/qgHyiBWxASmKffJV4fgr7A YC8gIb53o8glb5o+d0dd9Qtl5jQACOwi+eZSbjjRzC2Sy+fNVkanSok+xebkBMXf H/QutLHahHhvKezas7DZcGK8UFcUMTyTBrw7MdBrbYayfFQjBFuybwlJ1V5O896q bLqtRErvTUbKGKqy3A7m7bnD2frUYcI= -----END CERTIFICATE-----Generated at Tue Aug 26 06:48:15 2025 by rpki-client