$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/437bc310-8748-3d28-b170-0b50da76f3c2.roa File: 437bc310-8748-3d28-b170-0b50da76f3c2.roa (raw, json) Hash identifier: yTdBE1l14UvAnX5uXag/qZ0pJhIAxhs8Oq3wrzAZdz0= Subject key identifier: 73:F5:BB:E4:A0:32:EF:76:04:BC:50:69:60:FC:91:8E:6F:7F:04:83 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B3C51B155F950E26647398F00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/437bc310-8748-3d28-b170-0b50da76f3c2.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:b1:55:f9:50:e2:66:47:39:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=9c3c9ba1-7d5b-4847-888b-aff2f00faa46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:88:f5:fc:4a:8c:50:ff:dd:2e:c9:42:e3:44: 86:c9:3e:81:cf:21:99:cb:b7:80:0f:13:11:1a:79: c5:e3:c4:e0:45:4d:7a:5a:51:15:d7:c3:85:7b:9f: 7c:f7:45:fd:76:b0:5e:07:a6:30:d6:cd:6a:c3:47: f6:05:ae:3d:7e:95:fa:15:f1:32:6a:00:f9:a5:a6: 2b:c8:7d:c5:11:c0:8b:20:70:14:7c:a4:b9:f8:59: 17:3b:52:9f:f6:01:61:67:7c:2c:76:2c:68:e5:2a: af:f1:03:ef:7a:ee:30:75:ba:e3:03:ae:3e:94:79: a7:40:14:9c:5a:4f:45:d8:6d:ec:35:87:a8:ee:85: 84:b3:51:bf:03:8d:e9:0f:99:5c:38:0a:f7:db:90: 3a:66:58:09:81:39:9b:8a:2c:27:bd:9f:50:79:10: 46:ac:cf:69:90:58:a0:7a:d9:f2:ff:12:cf:bb:11: b1:9a:a2:bf:1f:3c:3b:3b:34:00:01:49:0f:41:81: f8:4a:0f:4e:df:71:b3:bc:a0:54:de:91:4b:c6:a8: 30:ca:04:c3:07:81:a4:2b:28:dc:60:e6:e9:3e:57: c2:1a:5d:c0:39:89:ba:99:a2:35:01:90:02:ca:28: 3c:42:7b:72:cd:2d:45:9f:58:2b:a4:fb:78:18:f8: 5d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F5:BB:E4:A0:32:EF:76:04:BC:50:69:60:FC:91:8E:6F:7F:04:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/437bc310-8748-3d28-b170-0b50da76f3c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:f4:63:39:46:5d:50:e3:1b:fe:a7:49:74:bc:f4:27:be:36: 97:8b:73:24:d7:88:f8:e2:8a:08:a0:a2:7b:93:27:2d:ef:65: 56:eb:62:34:0c:16:ac:c6:00:c4:96:a0:a5:d1:a3:07:be:a7: f5:26:2b:8d:02:2f:80:aa:14:2d:b1:5a:d8:e9:91:c8:96:ac: 19:6a:b0:fa:86:ee:38:4b:e8:49:de:90:5a:d0:dc:90:52:a9: 5a:fb:63:7b:9f:29:e5:13:e5:a5:ef:92:5b:b9:66:21:cf:08: 6e:ac:c5:03:59:40:f6:78:e2:ef:ea:86:47:5a:9b:67:5c:e7: 9b:5e:4a:17:73:af:44:b5:37:fa:af:e2:c9:48:e1:b7:73:65: 7d:47:6b:f8:a9:d2:cd:6b:b1:f5:44:40:58:1d:2e:85:ad:b3: 0a:e8:5f:20:d7:18:26:83:e6:d3:8f:24:c4:4f:92:cf:a5:d8: 54:0e:54:fd:9a:11:46:32:59:70:a8:12:ca:e3:18:10:22:cb: 4b:ab:d0:3e:f5:d0:90:22:92:f8:1f:f8:10:2b:96:5d:54:69: c5:c6:be:a0:09:2c:d2:e3:7f:b4:b6:cd:d9:4c:c4:b1:25:dd: 2a:db:88:cc:70:6f:e6:e1:f8:4e:f0:c7:8c:06:39:a4:50:5f: 89:85:18:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8UbFV+VDiZkc5jwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk OWMzYzliYTEtN2Q1Yi00ODQ3LTg4OGItYWZmMmYwMGZhYTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoj1/EqMUP/dLslC40SGyT6BzyGZy7eADxMR GnnF48TgRU16WlEV18OFe59890X9drBeB6Yw1s1qw0f2Ba49fpX6FfEyagD5paYr yH3FEcCLIHAUfKS5+FkXO1Kf9gFhZ3wsdixo5Sqv8QPveu4wdbrjA64+lHmnQBSc Wk9F2G3sNYeo7oWEs1G/A43pD5lcOAr325A6ZlgJgTmbiiwnvZ9QeRBGrM9pkFig etny/xLPuxGxmqK/Hzw7OzQAAUkPQYH4Sg9O33GzvKBU3pFLxqgwygTDB4GkKyjc YObpPlfCGl3AOYm6maI1AZACyig8QntyzS1Fn1grpPt4GPhdcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHP1u+SgMu92BLxQaWD8kY5vfwSDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDM3YmMzMTAtODc0OC0z ZDI4LWIxNzAtMGI1MGRhNzZmM2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHf0YzlGXVDjG/6nSXS89Ce+NpeLcyTXiPjiigigonuTJy3vZVbrYjQM FqzGAMSWoKXRowe+p/UmK40CL4CqFC2xWtjpkciWrBlqsPqG7jhL6EnekFrQ3JBS qVr7Y3ufKeUT5aXvklu5ZiHPCG6sxQNZQPZ44u/qhkdam2dc55teShdzr0S1N/qv 4slI4bdzZX1Ha/ip0s1rsfVEQFgdLoWtswroXyDXGCaD5tOPJMRPks+l2FQOVP2a EUYyWXCoEsrjGBAiy0ur0D710JAikvgf+BArll1UacXGvqAJLNLjf7S2zdlMxLEl 3SrbiMxwb+bh+E7wx4wGOaRQX4mFGEo= -----END CERTIFICATE-----Generated at Mon Oct 20 07:37:15 2025 by rpki-client