$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/328f79ee-21f4-3729-8164-161b941e3435.roa File: 328f79ee-21f4-3729-8164-161b941e3435.roa (raw, json) Hash identifier: +RAdLpsUN2+HzEtZnGzgwAlhPr+jQ6bSww677vPXqic= Subject key identifier: 03:FA:49:89:83:8A:D8:FC:43:07:53:0F:35:6A:F9:72:88:2F:B1:AB Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B2A2C40FCE9E9EA4E239B9A80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/328f79ee-21f4-3729-8164-161b941e3435.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 8069 IP address blocks: 20.33.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:40:fc:e9:e9:ea:4e:23:9b:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=bc383ba0-e098-4969-9f38-ea11c16bb80a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d2:86:d0:1c:c5:d4:4c:8d:23:91:28:ec:ff: 67:c9:a9:2d:0f:70:38:5c:a5:9f:d6:03:e3:f2:25: 98:bc:8b:4c:23:2c:74:04:09:8f:a0:da:36:3d:22: 01:38:de:d7:aa:e9:75:26:53:8f:f4:f9:8b:34:45: 79:31:f1:07:5a:56:fb:ef:55:e9:0a:94:e7:19:60: 41:66:8e:be:9b:56:6b:bf:81:2f:e7:5f:2a:b0:96: 93:15:39:17:7d:48:cf:b7:d8:41:82:40:60:03:d4: 25:b4:3b:7e:d7:b3:62:29:e2:20:a3:90:f7:ef:68: 4e:2c:55:1f:55:ed:d2:08:ee:75:6b:09:b8:fc:aa: 95:3c:28:ab:bc:8b:fc:37:62:e9:5d:9c:b3:53:72: 7e:9a:83:91:98:c1:8d:8d:5f:6a:f6:25:d1:59:89: 22:0c:e2:59:15:c3:04:ff:81:18:e0:1d:b1:53:d3: cf:6a:e5:c4:9d:30:39:5d:6a:d2:59:f2:78:97:2d: eb:81:05:d9:33:db:dc:0f:26:17:43:c8:be:1d:72: f3:78:4e:a2:30:bc:d7:de:e9:12:19:63:6b:a4:16: 22:33:18:7a:48:b5:eb:e8:06:32:55:ea:4a:4d:fd: b5:93:7a:87:f1:8a:7f:f7:f0:ab:e4:5b:2f:03:e0: 32:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FA:49:89:83:8A:D8:FC:43:07:53:0F:35:6A:F9:72:88:2F:B1:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/328f79ee-21f4-3729-8164-161b941e3435.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:4f:3a:74:16:01:07:fd:63:96:fe:ca:dc:83:66:50:07:e6: e2:2f:1a:e7:15:e1:02:47:ee:1b:42:bd:8b:ff:08:35:53:7e: 53:16:74:c4:37:e0:b2:81:70:a6:08:f3:29:37:0c:2f:2c:f1: ee:ad:76:2e:3e:82:15:5d:f2:2e:a1:95:a6:3f:61:ad:9a:95: f5:1d:bd:42:37:54:96:fb:d9:ec:4e:66:26:a6:77:14:49:71: f9:46:04:81:7a:bf:56:54:f9:5d:c4:98:c7:6d:bd:52:3c:ad: f1:2d:21:b3:85:35:6d:8c:58:68:32:af:d7:91:9f:92:6d:d9: 7b:2f:81:bb:63:94:db:3d:01:dd:01:d5:58:8c:92:3a:6f:df: 52:2b:91:cf:bb:68:c6:43:57:00:47:d1:76:39:8a:a1:09:6e: b3:bd:03:3f:c1:6a:3d:6d:9f:df:be:a6:f3:84:d9:23:b3:e8: b7:0e:d8:56:b6:a8:14:15:40:94:97:80:db:e3:e9:1b:82:24: 5f:2f:25:ad:9f:c6:03:57:1d:0a:47:ec:59:cd:d7:dd:ef:b4: 70:15:57:84:75:ff:6d:4b:11:cb:0e:e9:95:4c:cb:5a:37:b6: 5c:37:cc:9d:9a:5e:5c:e6:9c:09:15:4a:3d:36:88:2f:cb:b6: 06:64:d6:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLED86enqTiObmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk YmMzODNiYTAtZTA5OC00OTY5LTlmMzgtZWExMWMxNmJiODBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktKG0BzF1EyNI5Eo7P9nyaktD3A4XKWf1gPj 8iWYvItMIyx0BAmPoNo2PSIBON7Xqul1JlOP9PmLNEV5MfEHWlb771XpCpTnGWBB Zo6+m1Zrv4Ev518qsJaTFTkXfUjPt9hBgkBgA9QltDt+17NiKeIgo5D372hOLFUf Ve3SCO51awm4/KqVPCirvIv8N2LpXZyzU3J+moORmMGNjV9q9iXRWYkiDOJZFcME /4EY4B2xU9PPauXEnTA5XWrSWfJ4ly3rgQXZM9vcDyYXQ8i+HXLzeE6iMLzX3ukS GWNrpBYiMxh6SLXr6AYyVepKTf21k3qH8Yp/9/Cr5FsvA+AyLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAP6SYmDitj8QwdTDzVq+XKIL7GrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzI4Zjc5ZWUtMjFmNC0z NzI5LTgxNjQtMTYxYjk0MWUzNDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxPOnQWAQf9Y5b+ytyDZlAH5uIvGucV4QJH7htCvYv/CDVTflMWdMQ3 4LKBcKYI8yk3DC8s8e6tdi4+ghVd8i6hlaY/Ya2alfUdvUI3VJb72exOZiamdxRJ cflGBIF6v1ZU+V3EmMdtvVI8rfEtIbOFNW2MWGgyr9eRn5Jt2XsvgbtjlNs9Ad0B 1ViMkjpv31Irkc+7aMZDVwBH0XY5iqEJbrO9Az/Baj1tn9++pvOE2SOz6LcO2Fa2 qBQVQJSXgNvj6RuCJF8vJa2fxgNXHQpH7FnN193vtHAVV4R1/21LEcsO6ZVMy1o3 tlw3zJ2aXlzmnAkVSj02iC/LtgZk1qo= -----END CERTIFICATE-----Generated at Mon Oct 20 02:11:29 2025 by rpki-client