$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f56bf73f-550c-3213-b02a-ab4cbaae84c4.roa File: f56bf73f-550c-3213-b02a-ab4cbaae84c4.roa (raw, json) Hash identifier: GxTl4FKqcpNWspbiLBsuO7g0ONUKE8xlEfgIM1legMk= Subject key identifier: FA:1F:74:15:CD:90:7F:6C:0E:28:44:EF:24:B7:8D:12:46:27:FC:CB Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AF68690BCCBB33AA0ACCF0A80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f56bf73f-550c-3213-b02a-ab4cbaae84c4.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.33.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:90:bc:cb:b3:3a:a0:ac:cf:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=c8e2ad32-fc66-4b49-ab2b-f7c9a800609b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d8:a0:2a:9b:96:59:cc:30:16:56:59:d3:af: 5e:05:ce:70:ea:88:4a:16:cc:5f:5e:2c:36:11:fc: 21:f5:9f:b9:e3:32:aa:27:70:bf:dd:6a:be:b3:29: ba:db:ec:83:8d:e6:8e:cb:c8:cf:56:7a:ad:79:fa: 8c:cc:58:4b:10:a4:46:81:29:9b:4c:ab:ea:6f:fb: 9d:77:fe:3c:c0:a1:77:94:cb:19:ea:bc:49:2a:47: ac:b3:c4:3a:27:06:a3:d7:02:bb:15:23:b4:64:04: c4:3d:a4:e2:38:eb:f3:c8:8d:27:bb:f2:a6:bb:5d: 5a:76:55:7a:a8:a7:4c:cb:b4:79:91:e4:37:c5:bc: a6:04:a6:48:a6:87:c7:4b:9c:87:fa:74:14:09:e3: 60:4e:80:bf:c9:9b:1e:21:1a:1f:a2:18:86:ef:90: d1:f8:c9:7e:7e:9b:0d:43:42:6a:46:6b:d3:c2:34: e8:fa:19:b2:df:95:22:b2:72:8e:17:c7:09:4f:4b: aa:fa:c9:30:99:61:bf:5f:00:14:3b:dc:41:e8:01: bd:7f:f0:42:7e:b1:bc:d4:c3:05:38:7a:99:9c:a9: 7b:cf:1f:7a:d0:6c:27:d7:a6:a0:03:29:cb:dd:ee: 1a:af:8c:85:31:3a:4c:95:b1:89:d7:28:c9:e4:45: ab:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1F:74:15:CD:90:7F:6C:0E:28:44:EF:24:B7:8D:12:46:27:FC:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f56bf73f-550c-3213-b02a-ab4cbaae84c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:8d:4e:02:d1:14:e7:b6:3e:c8:27:81:67:8c:64:d3:e0:1d: ff:63:24:a8:ab:0a:db:a6:75:d1:86:e0:6a:af:5f:64:05:9d: 4a:f2:07:8b:3d:2f:b9:22:42:c4:9a:65:25:19:f9:c1:74:f3: c0:92:70:0f:c5:58:d7:91:08:18:e0:bb:ac:1b:d8:6f:0f:7a: 61:2d:d6:08:fe:88:17:28:fb:0b:0a:fe:8c:4a:92:f9:c2:21: 7b:83:ab:3b:da:3c:6a:3e:ee:a3:cd:fc:cd:55:37:38:cc:aa: aa:11:39:db:69:b4:36:48:e8:ed:c9:15:1a:6f:4b:91:1a:d3: 6e:43:cc:91:64:d0:98:8b:bc:3f:94:97:5b:5c:3e:49:48:23: b8:1c:f2:ee:db:f0:88:24:8f:63:9c:f4:db:48:02:4b:fd:81: 8a:fa:2a:0d:28:e4:0b:f9:17:64:4d:fa:74:10:3f:82:f2:0c: 75:23:09:84:66:25:fc:8e:24:55:82:4b:c6:30:4e:3a:c6:3f: 19:0c:15:c2:2f:20:7f:1d:80:42:13:96:18:ae:d2:62:03:f4: 8e:a1:9b:86:58:7d:ec:c9:55:48:e5:aa:d9:ba:39:b3:41:eb: e6:f9:2a:8a:81:ff:64:b4:67:a5:3e:5d:d8:db:2d:32:0b:40: 2a:2b:2b:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2hpC8y7M6oKzPCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk YzhlMmFkMzItZmM2Ni00YjQ5LWFiMmItZjdjOWE4MDA2MDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9igKpuWWcwwFlZZ069eBc5w6ohKFsxfXiw2 Efwh9Z+54zKqJ3C/3Wq+sym62+yDjeaOy8jPVnqtefqMzFhLEKRGgSmbTKvqb/ud d/48wKF3lMsZ6rxJKkess8Q6Jwaj1wK7FSO0ZATEPaTiOOvzyI0nu/Kmu11adlV6 qKdMy7R5keQ3xbymBKZIpofHS5yH+nQUCeNgToC/yZseIRofohiG75DR+Ml+fpsN Q0JqRmvTwjTo+hmy35UisnKOF8cJT0uq+skwmWG/XwAUO9xB6AG9f/BCfrG81MMF OHqZnKl7zx960Gwn16agAynL3e4ar4yFMTpMlbGJ1yjJ5EWrbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPofdBXNkH9sDihE7yS3jRJGJ/zLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjU2YmY3M2YtNTUwYy0z MjEzLWIwMmEtYWI0Y2JhYWU4NGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCF0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6NTgLRFOe2PsgngWeMZNPgHf9jJKirCtumddGG4GqvX2QFnUryB4s9 L7kiQsSaZSUZ+cF088CScA/FWNeRCBjgu6wb2G8PemEt1gj+iBco+wsK/oxKkvnC IXuDqzvaPGo+7qPN/M1VNzjMqqoROdtptDZI6O3JFRpvS5Ea025DzJFk0JiLvD+U l1tcPklII7gc8u7b8Igkj2Oc9NtIAkv9gYr6Kg0o5Av5F2RN+nQQP4LyDHUjCYRm JfyOJFWCS8YwTjrGPxkMFcIvIH8dgEITlhiu0mID9I6hm4ZYfezJVUjlqtm6ObNB 6+b5KoqB/2S0Z6U+XdjbLTILQCorKwE= -----END CERTIFICATE-----Generated at Tue Aug 26 06:35:04 2025 by rpki-client