$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34bf3447-2505-34e1-be37-4e4a4628389b.roa File: 34bf3447-2505-34e1-be37-4e4a4628389b.roa (raw, json) Hash identifier: tYr34DfMCHWjIfbh3l/9skZCT/nr48wEQHIgCJFcxf4= Subject key identifier: 72:72:08:89:BB:C4:AE:AC:A2:95:B0:3B:9F:44:18:EF:72:66:39:A9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B92DD43C4118DEFB973213080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34bf3447-2505-34e1-be37-4e4a4628389b.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.33.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:43:c4:11:8d:ef:b9:73:21:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=baa3c7d2-c848-4646-ac02-aec497cf546c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f7:7b:8b:af:39:d8:11:52:0e:2c:4b:12:c3: 4a:81:97:90:b2:c8:cd:96:2c:f2:52:4f:00:6f:d3: 4a:b4:51:c8:e7:e0:1d:b4:4c:62:e3:80:46:06:98: ff:11:dd:a4:4f:86:eb:56:f4:9f:1f:79:ed:e6:5a: 76:93:18:ac:e0:ed:14:fc:75:e4:c6:e3:52:a5:1e: ab:ff:13:f7:9f:b6:16:fb:89:4f:03:0f:9c:e7:58: f8:14:45:1b:f5:3f:91:8b:30:c8:bd:99:5e:ae:4f: 42:41:fa:c9:14:61:61:bb:a9:c1:5e:69:65:88:e0: 6c:74:79:3c:a1:aa:0e:2d:38:6f:a6:20:ae:90:e2: 8d:d4:e4:eb:bf:f2:33:47:18:c6:05:04:7f:18:0a: fb:d0:3b:f6:d3:98:82:18:24:1d:f0:57:5f:23:00: 82:5e:58:78:9a:f9:f2:6a:ba:2d:0d:11:c5:c1:49: 1d:49:66:ce:3b:b0:ec:98:b5:02:2b:f0:d8:dd:c7: 6b:16:8c:c4:25:ce:5c:23:42:4e:99:2a:94:a5:a8: 34:92:03:5e:06:44:88:ab:fd:34:07:5c:be:af:a7: 99:64:d3:8a:c4:95:d9:d1:53:0e:08:37:d5:7d:3d: 6f:37:16:8d:83:1f:f5:1b:02:42:22:4e:52:6b:6f: 6c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:72:08:89:BB:C4:AE:AC:A2:95:B0:3B:9F:44:18:EF:72:66:39:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34bf3447-2505-34e1-be37-4e4a4628389b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:e2:f7:48:59:38:d5:c9:76:c5:b0:f1:e5:d4:4c:f0:4f:c6: 49:58:63:0e:34:d6:f3:fb:c2:cc:3b:56:3b:34:5c:e5:a3:ba: ee:7f:9a:1e:1c:76:61:64:1b:e7:75:96:f8:c3:48:c8:de:08: ba:2b:a5:d3:68:c6:c7:d8:33:ef:c1:99:eb:47:ee:19:63:0c: 1c:7c:9d:34:29:59:36:f0:fb:dd:ff:b6:bb:fa:62:1b:66:27: b2:89:80:b2:29:65:aa:c2:07:50:84:e3:36:0e:3e:14:dd:b2: 82:1e:16:3a:e6:68:be:65:83:fb:02:d9:6d:7f:3b:4f:7b:80: 86:f9:b2:82:fd:16:4a:db:1e:ad:1f:e4:07:f3:b7:6f:cf:1a: 5d:aa:49:f0:8a:5b:a0:97:60:0c:8a:e6:45:50:38:18:ce:21: 71:69:4f:2b:06:18:f7:8a:7a:ee:f2:92:79:28:5e:07:f0:cb: 1a:e4:cb:b9:9e:bb:7e:15:c7:66:91:85:ce:95:54:b8:fe:37: aa:40:a6:43:49:00:4b:bd:45:84:5c:06:6e:f3:c9:8c:e5:ea: ee:36:79:e1:86:d3:ec:ed:a1:15:00:4a:fe:a9:de:5a:f2:a4: de:1d:78:7e:d0:b7:b2:6d:ff:90:45:47:08:87:d5:73:de:94: 42:76:bf:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3UPEEY3vuXMhMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk YmFhM2M3ZDItYzg0OC00NjQ2LWFjMDItYWVjNDk3Y2Y1NDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/d7i6852BFSDixLEsNKgZeQssjNlizyUk8A b9NKtFHI5+AdtExi44BGBpj/Ed2kT4brVvSfH3nt5lp2kxis4O0U/HXkxuNSpR6r /xP3n7YW+4lPAw+c51j4FEUb9T+RizDIvZlerk9CQfrJFGFhu6nBXmlliOBsdHk8 oaoOLThvpiCukOKN1OTrv/IzRxjGBQR/GAr70Dv205iCGCQd8FdfIwCCXlh4mvny arotDRHFwUkdSWbOO7DsmLUCK/DY3cdrFozEJc5cI0JOmSqUpag0kgNeBkSIq/00 B1y+r6eZZNOKxJXZ0VMOCDfVfT1vNxaNgx/1GwJCIk5Sa29sAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJyCIm7xK6sopWwO59EGO9yZjmpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzRiZjM0NDctMjUwNS0z NGUxLWJlMzctNGU0YTQ2MjgzODliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCHkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGni90hZONXJdsWw8eXUTPBPxklYYw401vP7wsw7Vjs0XOWjuu5/mh4c dmFkG+d1lvjDSMjeCLorpdNoxsfYM+/BmetH7hljDBx8nTQpWTbw+93/trv6Yhtm J7KJgLIpZarCB1CE4zYOPhTdsoIeFjrmaL5lg/sC2W1/O097gIb5soL9FkrbHq0f 5Afzt2/PGl2qSfCKW6CXYAyK5kVQOBjOIXFpTysGGPeKeu7yknkoXgfwyxrky7me u34Vx2aRhc6VVLj+N6pApkNJAEu9RYRcBm7zyYzl6u42eeGG0+ztoRUASv6p3lry pN4deH7Qt7Jt/5BFRwiH1XPelEJ2v04= -----END CERTIFICATE-----Generated at Mon Oct 20 18:18:34 2025 by rpki-client