$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/17797fbe-976b-3a44-971c-5db64cddcfc1.roa File: 17797fbe-976b-3a44-971c-5db64cddcfc1.roa (raw, json) Hash identifier: +A2PbYk3i/WJ6GFxjG6fCSuRT6b8xDMsfq0flAM2vIs= Subject key identifier: 05:D2:6A:74:E5:09:F3:B3:2B:91:43:06:8F:30:5C:28:F9:6A:9D:EC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B0CDC225BFC26B92BED981A00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/17797fbe-976b-3a44-971c-5db64cddcfc1.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 8069 IP address blocks: 20.33.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:22:5b:fc:26:b9:2b:ed:98:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=251822ae-9dfb-469c-9eb7-5195e712bad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c1:45:d3:6b:b2:9c:ad:a1:ff:52:8f:85:3d: 48:d2:ef:79:dd:68:06:31:e1:5b:13:11:55:01:d9: ee:82:88:71:4e:14:61:38:f4:8c:b6:fe:5b:02:9b: c7:35:99:56:73:09:44:13:72:5c:19:83:75:36:43: 44:37:27:5b:7d:a3:87:2d:14:2c:28:fa:5d:0b:53: ef:69:4e:11:05:38:ab:65:f7:61:15:43:e7:46:a5: ba:df:a1:c6:59:3f:ca:1b:d7:4e:05:ca:fd:c6:e2: 8c:53:92:86:19:8b:54:76:88:0e:43:53:a2:83:7f: 9d:47:84:a4:99:50:27:e3:d3:cd:6b:1b:54:09:06: 02:17:13:c6:03:41:49:ce:5f:1a:b3:c3:80:6a:f6: bd:09:6f:30:c5:bf:a2:a2:60:a6:cf:a2:89:f9:dd: c2:82:8b:dd:d0:dd:8e:5e:42:8a:7d:0e:9e:e9:55: b2:2e:12:94:67:1f:5a:b8:90:d3:c6:3b:c4:7f:13: 0e:cf:67:c3:ca:c7:a2:e4:64:e0:91:8d:2f:e2:96: bb:fe:24:d2:f7:bc:26:77:9d:4e:75:47:ef:4e:f9: 8d:e2:48:5f:55:72:ec:fb:b1:2b:af:b9:43:ae:0f: 64:9c:41:e4:49:65:af:35:29:f2:f4:8e:7b:40:1e: a9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D2:6A:74:E5:09:F3:B3:2B:91:43:06:8F:30:5C:28:F9:6A:9D:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/17797fbe-976b-3a44-971c-5db64cddcfc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:a0:27:5e:a2:fe:9d:ce:d4:ba:7b:b5:60:27:3c:20:d9:77: 0d:07:76:d7:0f:76:62:d3:8c:dc:9e:29:00:7c:3d:ab:de:92: d4:3a:55:4c:1c:9e:a8:4b:e7:d7:35:26:42:87:80:0a:84:ff: c9:d5:8d:80:3a:9c:4c:a7:1b:03:9a:08:5b:8f:77:14:78:fe: e5:82:7a:7d:a5:b2:12:ae:a2:e3:3c:cb:08:c3:0a:ce:a4:e4: b0:34:91:83:f9:10:73:63:f5:6b:05:94:f6:5e:70:2f:1a:8b: 81:23:d9:f4:96:2f:51:42:62:4c:fa:58:ab:90:85:86:a6:44: 1b:a6:cb:1a:b3:e7:4d:24:09:44:63:a0:02:b8:0f:64:06:ff: 2c:75:f7:ec:23:92:7d:76:e7:ef:6b:81:19:de:69:1d:32:3e: 79:08:64:fb:d7:c5:0c:31:20:3e:a5:61:72:3a:76:60:dc:f9: c0:3e:8b:b9:36:f4:72:a9:60:cf:52:90:5d:03:4e:0a:15:c2: de:7b:7b:e1:08:3c:79:c1:56:38:93:d5:17:73:9e:1b:bd:4a: df:ed:8d:a9:fb:97:b6:6d:84:02:89:f8:26:b8:c0:27:00:8c: 38:10:e8:a9:73:84:a9:05:c2:6a:d8:3b:51:68:32:72:2c:c0: bd:79:3f:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3CJb/Ca5K+2YGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk MjUxODIyYWUtOWRmYi00NjljLTllYjctNTE5NWU3MTJiYWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38FF02uynK2h/1KPhT1I0u953WgGMeFbExFV AdnugohxThRhOPSMtv5bApvHNZlWcwlEE3JcGYN1NkNENydbfaOHLRQsKPpdC1Pv aU4RBTirZfdhFUPnRqW636HGWT/KG9dOBcr9xuKMU5KGGYtUdogOQ1Oig3+dR4Sk mVAn49PNaxtUCQYCFxPGA0FJzl8as8OAava9CW8wxb+iomCmz6KJ+d3Cgovd0N2O XkKKfQ6e6VWyLhKUZx9auJDTxjvEfxMOz2fDysei5GTgkY0v4pa7/iTS97wmd51O dUfvTvmN4khfVXLs+7Err7lDrg9knEHkSWWvNSny9I57QB6plQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXSanTlCfOzK5FDBo8wXCj5ap3sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTc3OTdmYmUtOTc2Yi0z YTQ0LTk3MWMtNWRiNjRjZGRjZmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWgJ16i/p3O1Lp7tWAnPCDZdw0HdtcPdmLTjNyeKQB8PavektQ6VUwc nqhL59c1JkKHgAqE/8nVjYA6nEynGwOaCFuPdxR4/uWCen2lshKuouM8ywjDCs6k 5LA0kYP5EHNj9WsFlPZecC8ai4Ej2fSWL1FCYkz6WKuQhYamRBumyxqz500kCURj oAK4D2QG/yx19+wjkn125+9rgRneaR0yPnkIZPvXxQwxID6lYXI6dmDc+cA+i7k2 9HKpYM9SkF0DTgoVwt57e+EIPHnBVjiT1Rdznhu9St/tjan7l7ZthAKJ+Ca4wCcA jDgQ6KlzhKkFwmrYO1FoMnIswL15P3A= -----END CERTIFICATE-----Generated at Mon Oct 20 12:36:46 2025 by rpki-client