$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28bd1686-b68e-31a7-9161-87cf47c9fc8f.roa File: 28bd1686-b68e-31a7-9161-87cf47c9fc8f.roa (raw, json) Hash identifier: gSbPHSQCQlcjiefLjvv0/x7lYgRqm73whXazfiLtjCw= Subject key identifier: 89:1E:D4:68:A5:82:D0:85:51:4C:F8:F1:E7:BA:6E:75:72:B0:7A:80 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B0CDC22768FABEC607C359E80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28bd1686-b68e-31a7-9161-87cf47c9fc8f.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 8069 IP address blocks: 20.33.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:22:76:8f:ab:ec:60:7c:35:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=b9599182-686b-427b-b215-d6df0863fce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bc:35:da:06:20:ac:60:f9:89:c1:ec:d7:dd: c5:d3:a1:92:d9:cd:50:d4:e3:0b:66:8e:fa:4b:55: 1f:c4:3d:10:f1:ae:b2:c4:67:8a:2f:80:85:7c:89: 1f:9e:cf:d5:58:78:70:49:e1:6d:1e:81:19:c2:21: 9e:61:1d:fd:bd:b3:ae:be:75:1d:33:b3:64:36:e5: 57:32:c7:22:d4:15:45:0c:7f:0d:05:16:db:ae:ca: 91:d1:03:e0:94:2d:a4:a9:62:29:e3:d8:31:2d:73: d5:24:1d:8e:2c:cf:29:53:58:35:f6:bd:74:1a:15: 79:a4:f8:04:55:ca:50:6d:0f:9c:e7:a2:7a:68:56: 7d:9d:1b:a9:d2:77:a7:57:ff:1e:1f:a7:0e:16:bc: 4d:e5:ea:41:a8:7f:1e:1c:45:04:f7:79:49:ca:dc: 4d:69:28:85:eb:c5:fa:dd:df:84:75:eb:c3:bf:79: ff:46:28:f6:0e:2a:8b:4a:46:a2:e2:15:f6:f0:bc: a2:da:2d:8d:25:cb:4b:2e:67:f1:b7:e6:e4:29:fc: da:8c:08:d4:78:fb:75:6f:1f:be:ce:03:55:83:e3: 8f:17:3e:87:f1:5f:09:e5:d6:50:7b:89:d2:1a:83: 24:0f:6c:bb:e9:6f:01:51:8d:8d:22:a3:59:35:5b: 3e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:1E:D4:68:A5:82:D0:85:51:4C:F8:F1:E7:BA:6E:75:72:B0:7A:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28bd1686-b68e-31a7-9161-87cf47c9fc8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:7c:12:fa:d8:43:de:70:22:7b:85:27:45:8b:3b:84:c5:9f: 16:49:ac:80:c6:75:af:ed:bc:7a:5b:dc:2a:84:96:d7:a0:ca: 9f:8d:e9:d8:e3:b0:e1:2b:77:91:34:9f:ba:f3:41:e9:78:ac: 8e:71:d9:a9:db:85:b8:b6:a9:b1:4e:5c:5b:19:2a:85:5a:65: a3:f2:05:f4:15:bd:18:1f:2d:92:45:d6:6d:4e:43:6e:ae:c4: 42:be:81:52:68:d6:43:62:c7:52:0c:88:5a:1e:7e:04:30:c4: bb:4b:10:88:3c:d2:86:8a:36:2e:e6:0e:20:41:0f:9a:48:53: 0c:55:f0:bc:9d:dd:07:bd:a9:e6:5e:cd:41:85:df:b2:ac:c7: 30:3e:3d:0d:9d:af:a4:a5:c7:34:ef:7b:9e:e0:6b:fe:0d:4d: 69:1a:79:15:4b:94:24:0f:68:28:e3:6f:14:d9:15:9d:c1:ec: c9:90:98:b8:4b:5b:eb:5b:3f:2f:66:66:0f:c7:14:65:26:db: 02:76:74:2a:8b:04:d3:d7:2c:45:3d:f9:b2:1c:54:0d:09:cf: 5b:33:2a:f7:6a:cf:a6:1b:3c:62:d9:2b:be:aa:ec:8e:5b:f0: bc:6f:e1:32:71:c1:d0:1d:25:78:65:bd:92:77:95:34:85:aa: b7:1d:f7:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3CJ2j6vsYHw1noAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk Yjk1OTkxODItNjg2Yi00MjdiLWIyMTUtZDZkZjA4NjNmY2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbw12gYgrGD5icHs193F06GS2c1Q1OMLZo76 S1UfxD0Q8a6yxGeKL4CFfIkfns/VWHhwSeFtHoEZwiGeYR39vbOuvnUdM7NkNuVX Msci1BVFDH8NBRbbrsqR0QPglC2kqWIp49gxLXPVJB2OLM8pU1g19r10GhV5pPgE VcpQbQ+c56J6aFZ9nRup0nenV/8eH6cOFrxN5epBqH8eHEUE93lJytxNaSiF68X6 3d+EdevDv3n/Rij2DiqLSkai4hX28Lyi2i2NJctLLmfxt+bkKfzajAjUePt1bx++ zgNVg+OPFz6H8V8J5dZQe4nSGoMkD2y76W8BUY2NIqNZNVs+LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIke1GilgtCFUUz48ee6bnVysHqAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjhiZDE2ODYtYjY4ZS0z MWE3LTkxNjEtODdjZjQ3YzlmYzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJB8EvrYQ95wInuFJ0WLO4TFnxZJrIDGda/tvHpb3CqEltegyp+N6djj sOErd5E0n7rzQel4rI5x2anbhbi2qbFOXFsZKoVaZaPyBfQVvRgfLZJF1m1OQ26u xEK+gVJo1kNix1IMiFoefgQwxLtLEIg80oaKNi7mDiBBD5pIUwxV8Lyd3Qe9qeZe zUGF37KsxzA+PQ2dr6SlxzTve57ga/4NTWkaeRVLlCQPaCjjbxTZFZ3B7MmQmLhL W+tbPy9mZg/HFGUm2wJ2dCqLBNPXLEU9+bIcVA0Jz1szKvdqz6YbPGLZK76q7I5b 8Lxv4TJxwdAdJXhlvZJ3lTSFqrcd9/0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:04:26 2025 by rpki-client