$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3024c24c-377f-3c3d-9a0a-06ffed47fa68.roa File: 3024c24c-377f-3c3d-9a0a-06ffed47fa68.roa (raw, json) Hash identifier: zdV7TlXI7KQh8VieOM2FBtADvsrhWIy5jc4d2f1mJnw= Subject key identifier: E4:34:F1:91:92:24:45:88:4E:6F:80:10:85:84:25:51:17:52:2D:E7 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B52A7599C86F0A013E4FD1540 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3024c24c-377f-3c3d-9a0a-06ffed47fa68.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.33.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:59:9c:86:f0:a0:13:e4:fd:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=1e50679b-3571-4145-85c5-31d25d073902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:14:c2:e1:69:85:2b:2c:9f:61:69:78:f8:61: 7e:14:c0:81:90:07:9a:e6:e7:3e:a6:f1:60:32:fe: 3a:16:b7:15:ed:83:59:8e:f2:85:dd:f9:11:89:70: b2:8a:2a:58:0a:3a:ef:47:83:dd:20:b0:11:c4:da: 33:ba:9a:80:85:66:ee:67:f6:5a:ee:57:c6:bc:40: 07:63:01:18:e0:3b:63:2a:e8:73:65:0e:0d:f8:87: 0e:0c:5a:10:bc:81:fd:3a:92:06:a8:7e:4a:5c:2d: 2b:da:5f:28:37:51:97:bf:fa:e9:66:f0:70:9d:18: 4b:a5:0d:e7:e1:57:9a:12:8b:33:00:69:f9:24:a2: cf:79:7a:dd:e8:f6:ae:bf:ff:7b:5c:07:e6:38:dc: aa:5f:32:3a:21:16:50:c9:0e:6f:73:8c:67:af:7c: e6:cc:31:a0:22:ed:c0:f8:f7:4c:12:69:6e:a2:90: 7c:8c:bc:bc:80:f5:eb:df:f2:2f:f0:76:9f:0a:a5: 7f:44:01:ae:0d:44:0b:58:ba:23:50:9e:0f:c4:fa: e5:fa:cd:31:91:94:ee:c6:12:d8:6f:63:2d:8a:b0: 43:e8:8a:60:1a:8d:2c:7f:db:91:45:fd:1a:6e:b0: b5:c4:7f:60:eb:01:0c:32:c8:c5:bc:b7:28:66:69: 53:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:34:F1:91:92:24:45:88:4E:6F:80:10:85:84:25:51:17:52:2D:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3024c24c-377f-3c3d-9a0a-06ffed47fa68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:f1:6b:2f:49:73:d7:ee:6e:3e:fa:d2:1f:a2:06:d9:28:cc: 2b:56:9a:a1:29:ed:fb:63:02:8c:9a:08:e1:7f:e6:80:71:99: 5d:b6:53:1d:88:c6:8b:de:ab:2e:49:00:e1:ea:ff:09:af:a5: 60:66:ea:8f:2c:93:f5:9c:32:5b:3e:ad:ca:b5:0a:b7:f0:3a: 0d:11:d3:66:06:3a:23:4f:9b:e7:89:54:88:9f:1b:19:29:52: 3f:68:a3:b7:e9:9c:ac:0f:01:34:c4:c5:59:6a:41:f1:0d:83: df:11:e5:8c:24:a9:92:a8:43:72:63:15:0e:57:8e:d3:94:d3: a9:79:b6:77:f3:83:6e:d3:6e:85:bb:21:d8:da:c2:34:b2:5a: ab:36:07:2c:94:f6:22:e3:5b:b9:5f:8c:ed:4c:23:3f:06:5c: 56:c1:94:13:dc:05:03:99:39:d3:2a:d4:79:1a:32:a2:2c:85: a6:64:8b:a3:02:d6:a3:6b:34:69:84:fa:fc:2d:2b:d2:8c:1b: b4:ef:20:96:62:47:9a:06:71:3f:00:e8:cd:bf:0b:98:88:2c: d5:2b:10:46:2a:69:5d:e7:4f:1e:6b:ce:12:94:da:5b:7c:de: b8:16:d5:9d:2c:ed:3d:8c:84:cd:66:48:b1:6e:2b:9f:8e:84: b5:cb:d2:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1mchvCgE+T9FUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk MWU1MDY3OWItMzU3MS00MTQ1LTg1YzUtMzFkMjVkMDczOTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBTC4WmFKyyfYWl4+GF+FMCBkAea5uc+pvFg Mv46FrcV7YNZjvKF3fkRiXCyiipYCjrvR4PdILARxNozupqAhWbuZ/Za7lfGvEAH YwEY4DtjKuhzZQ4N+IcODFoQvIH9OpIGqH5KXC0r2l8oN1GXv/rpZvBwnRhLpQ3n 4VeaEoszAGn5JKLPeXrd6Pauv/97XAfmONyqXzI6IRZQyQ5vc4xnr3zmzDGgIu3A +PdMEmluopB8jLy8gPXr3/Iv8HafCqV/RAGuDUQLWLojUJ4PxPrl+s0xkZTuxhLY b2MtirBD6IpgGo0sf9uRRf0abrC1xH9g6wEMMsjFvLcoZmlTZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQ08ZGSJEWITm+AEIWEJVEXUi3nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzAyNGMyNGMtMzc3Zi0z YzNkLTlhMGEtMDZmZmVkNDdmYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALxay9Jc9fubj760h+iBtkozCtWmqEp7ftjAoyaCOF/5oBxmV22Ux2I xoveqy5JAOHq/wmvpWBm6o8sk/WcMls+rcq1CrfwOg0R02YGOiNPm+eJVIifGxkp Uj9oo7fpnKwPATTExVlqQfENg98R5YwkqZKoQ3JjFQ5XjtOU06l5tnfzg27TboW7 IdjawjSyWqs2ByyU9iLjW7lfjO1MIz8GXFbBlBPcBQOZOdMq1HkaMqIshaZki6MC 1qNrNGmE+vwtK9KMG7TvIJZiR5oGcT8A6M2/C5iILNUrEEYqaV3nTx5rzhKU2lt8 3rgW1Z0s7T2MhM1mSLFuK5+OhLXL0vU= -----END CERTIFICATE-----Generated at Mon Oct 20 14:58:06 2025 by rpki-client