$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0d49e71e-15ef-35d8-87b6-e8933f1ce4d7.roa File: 0d49e71e-15ef-35d8-87b6-e8933f1ce4d7.roa (raw, json) Hash identifier: UKwiPLydDisM8GNFLcG1dFBZEqZvbN+sP24A37DBzDA= Subject key identifier: 47:66:01:45:F1:38:3C:A9:D0:B1:52:22:6C:BA:5E:58:8A:01:F3:C0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B0746C8B4520383C9A536CD80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0d49e71e-15ef-35d8-87b6-e8933f1ce4d7.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.33.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:c8:b4:52:03:83:c9:a5:36:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=54a18081-21b7-4eb7-934e-3cc2c60de978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c5:45:38:b0:5a:55:08:0b:3a:3b:ea:61:4e: d3:d8:25:ef:e0:98:be:08:65:18:0a:f0:72:50:36: 41:35:bc:17:67:94:15:df:23:d3:8d:db:11:74:fb: 04:cd:ed:e0:4a:94:11:df:82:64:1c:74:30:cf:57: 03:82:3e:0d:26:a8:5f:74:41:2e:dc:eb:44:3d:29: 1d:be:4d:c0:2d:86:c6:fa:2a:2e:39:46:0d:ab:9d: 60:97:cc:2b:00:d5:40:8c:07:05:d9:94:fc:f6:b0: 57:a8:01:c3:30:41:a6:83:62:ff:7a:1f:e3:76:05: a2:2f:83:cf:1c:62:a6:d5:ea:5f:0f:a1:3f:6f:20: cd:f7:ea:94:c9:6e:f6:4d:cf:58:f9:ee:3a:e3:85: db:b9:b5:a6:68:08:14:62:76:83:49:ae:3e:6d:f7: 31:12:35:d2:61:b9:c8:79:70:db:e6:30:32:ba:4a: db:f8:67:2e:58:e6:51:98:ed:d3:1e:0f:d4:04:ac: d1:78:ed:8a:cb:42:59:0e:4b:bd:b3:f5:3e:93:74: 1e:54:c6:a6:85:ce:92:26:10:0e:b0:1d:2b:11:7a: 2a:1f:6f:f6:75:17:28:a0:21:60:73:88:68:09:7b: a3:ca:86:ca:64:83:b1:80:71:83:02:34:4c:ec:7d: 39:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:66:01:45:F1:38:3C:A9:D0:B1:52:22:6C:BA:5E:58:8A:01:F3:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0d49e71e-15ef-35d8-87b6-e8933f1ce4d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:76:78:be:63:61:3d:95:aa:81:9d:92:37:e0:33:86:85:46: 56:08:66:3b:67:47:60:fc:f6:39:ba:67:a4:3a:88:99:72:ab: 71:78:6b:af:5c:c1:db:7c:0e:23:69:0d:0f:d4:1a:42:88:25: 93:9a:55:5a:d9:58:f2:3c:cd:00:5f:c0:e8:cd:88:00:8f:e6: 1a:e9:0b:29:07:69:10:f8:9a:e2:0e:f0:c0:82:17:31:bd:f6: 42:a8:bd:49:e0:68:dd:ca:ef:29:59:a6:38:da:2c:56:21:0e: ec:a8:8e:a0:41:a1:d6:1c:f9:96:9a:d7:47:f4:74:d2:d5:dd: 07:b6:6b:45:e5:ed:22:21:a2:48:6d:fd:15:7e:9e:3d:7a:08: c1:a3:d5:aa:1e:90:73:e7:62:5b:8e:3c:ed:99:a8:7a:0e:c1: be:35:d5:30:f8:12:50:00:f8:96:7f:0d:47:79:fc:e1:a2:07: 61:d9:d7:92:a7:f5:6c:88:e5:1e:26:f9:07:08:41:24:56:7c: 86:f3:62:50:83:e0:26:ef:3d:d2:e7:35:92:81:2e:f2:7b:c3: 74:4c:8e:dc:a1:e3:37:df:d5:a8:70:66:0e:38:cd:a7:03:57: d9:9f:63:07:ea:64:6d:fe:fe:99:14:6d:47:54:86:19:8a:62: 54:4d:c0:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRsi0UgODyaU2zYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk NTRhMTgwODEtMjFiNy00ZWI3LTkzNGUtM2NjMmM2MGRlOTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sVFOLBaVQgLOjvqYU7T2CXv4Ji+CGUYCvBy UDZBNbwXZ5QV3yPTjdsRdPsEze3gSpQR34JkHHQwz1cDgj4NJqhfdEEu3OtEPSkd vk3ALYbG+iouOUYNq51gl8wrANVAjAcF2ZT89rBXqAHDMEGmg2L/eh/jdgWiL4PP HGKm1epfD6E/byDN9+qUyW72Tc9Y+e4644XbubWmaAgUYnaDSa4+bfcxEjXSYbnI eXDb5jAyukrb+GcuWOZRmO3THg/UBKzReO2Ky0JZDku9s/U+k3QeVMamhc6SJhAO sB0rEXoqH2/2dRcooCFgc4hoCXujyobKZIOxgHGDAjRM7H05/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdmAUXxODyp0LFSImy6XliKAfPAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMGQ0OWU3MWUtMTVlZi0z NWQ4LTg3YjYtZTg5MzNmMWNlNGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACB2eL5jYT2VqoGdkjfgM4aFRlYIZjtnR2D89jm6Z6Q6iJlyq3F4a69c wdt8DiNpDQ/UGkKIJZOaVVrZWPI8zQBfwOjNiACP5hrpCykHaRD4muIO8MCCFzG9 9kKovUngaN3K7ylZpjjaLFYhDuyojqBBodYc+Zaa10f0dNLV3Qe2a0Xl7SIhokht /RV+nj16CMGj1aoekHPnYluOPO2ZqHoOwb411TD4ElAA+JZ/DUd5/OGiB2HZ15Kn 9WyI5R4m+QcIQSRWfIbzYlCD4CbvPdLnNZKBLvJ7w3RMjtyh4zff1ahwZg44zacD V9mfYwfqZG3+/pkUbUdUhhmKYlRNwLI= -----END CERTIFICATE-----Generated at Mon Oct 20 09:55:07 2025 by rpki-client