$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/47d92f21-0ef1-382a-9fcb-b959cc71d765.roa File: 47d92f21-0ef1-382a-9fcb-b959cc71d765.roa (raw, json) Hash identifier: JVSkaZ2aOiXJ1PrWf90tGPyhwokwHFmfkh9RRtyitpw= Subject key identifier: 59:D6:67:F3:FE:1E:DD:6B:9E:B6:38:AC:AB:73:F2:49:F7:BE:17:94 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B1C36D43335BD43F8C205C680 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/47d92f21-0ef1-382a-9fcb-b959cc71d765.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.33.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:d4:33:35:bd:43:f8:c2:05:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=1d3959ff-28d1-4015-9b8a-93f644986af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:de:fe:d5:32:3d:38:57:6a:53:f9:06:bc:93: 85:57:ee:44:91:59:93:47:38:a3:94:9b:2a:19:98: 39:42:e1:71:16:e0:76:11:21:bb:e8:94:b8:89:a4: 7e:b3:a2:e9:b0:81:e2:92:4d:7a:75:29:a4:34:23: 04:56:c6:27:21:6c:6c:54:45:85:3d:a6:71:13:94: 10:be:1f:a2:66:8f:fc:76:a0:73:f9:78:b2:b1:4c: d2:ff:f6:a4:e8:eb:ad:e6:e5:91:c2:94:b8:58:48: f9:37:c6:e4:46:d5:bb:ef:7a:f8:c1:e8:5a:cb:16: 9e:b0:0d:bc:d6:c9:0c:9f:a1:99:f5:fb:b2:f7:c9: ab:b4:90:bd:f1:5a:fb:63:d5:7d:50:45:a6:ee:7c: 67:62:b1:93:aa:87:99:a3:fc:b7:ac:fa:11:03:c6: d3:7e:2c:d5:65:04:e5:4d:16:94:67:fe:12:9b:a0: 6c:ee:08:c0:27:a5:e5:74:55:4a:34:a1:40:0d:55: 70:52:ca:84:dd:5b:49:a4:f9:6f:34:82:b7:7d:5e: 09:a4:dc:bd:28:99:21:2e:ec:41:b1:55:4c:44:e4: 0b:d4:03:04:aa:81:e9:d1:56:c1:9f:3a:a3:e5:da: de:35:c2:6e:0b:68:ca:6e:1c:2a:ad:af:e6:55:9a: a9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D6:67:F3:FE:1E:DD:6B:9E:B6:38:AC:AB:73:F2:49:F7:BE:17:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/47d92f21-0ef1-382a-9fcb-b959cc71d765.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:51:6f:d4:57:64:c6:4a:f1:63:9b:ab:c8:44:97:d7:4d:24: cd:d2:68:ad:ba:bb:47:3c:3d:9a:28:3e:e5:ce:a9:33:2f:5b: f6:47:af:e3:85:c1:81:cb:84:98:cd:f2:d3:06:12:42:99:12: cd:b1:d6:d2:a9:19:88:90:00:01:07:97:21:95:38:31:f5:9d: 27:c4:d5:e1:9e:06:98:fc:f9:0d:32:6c:05:f0:92:4f:ce:e1: d6:10:f0:65:2a:74:b3:b2:af:5f:15:00:f4:ab:2d:41:d8:1e: e5:5b:cd:e4:71:d3:ff:3b:5e:ab:57:1d:f3:93:a0:e7:b8:2d: 62:27:94:ec:c5:33:ef:f9:a6:a0:0e:17:3a:fd:22:24:78:b7: 92:63:a7:3c:2a:62:73:d1:15:d2:6b:a5:bc:c1:a2:dc:78:f9: 3e:2d:43:c3:8b:ec:7f:56:a4:4b:86:c0:92:05:91:fc:6c:95: 6a:6a:58:41:e5:ff:c1:ef:f4:ba:50:be:51:a7:52:c5:a1:95: bc:e3:7f:a6:41:d2:e4:b7:a1:f7:80:77:d5:2c:fe:05:65:7f: a1:a8:a2:95:9d:c8:62:f4:26:3e:45:1d:0b:35:99:d8:a4:26: fa:df:e5:1d:23:4e:7c:5a:8c:be:3b:d4:f0:11:b6:93:71:56: 9a:73:bf:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNtQzNb1D+MIFxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MWQzOTU5ZmYtMjhkMS00MDE1LTliOGEtOTNmNjQ0OTg2YWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyd7+1TI9OFdqU/kGvJOFV+5EkVmTRzijlJsq GZg5QuFxFuB2ESG76JS4iaR+s6LpsIHikk16dSmkNCMEVsYnIWxsVEWFPaZxE5QQ vh+iZo/8dqBz+XiysUzS//ak6Out5uWRwpS4WEj5N8bkRtW773r4wehayxaesA28 1skMn6GZ9fuy98mrtJC98Vr7Y9V9UEWm7nxnYrGTqoeZo/y3rPoRA8bTfizVZQTl TRaUZ/4Sm6Bs7gjAJ6XldFVKNKFADVVwUsqE3VtJpPlvNIK3fV4JpNy9KJkhLuxB sVVMROQL1AMEqoHp0VbBnzqj5dreNcJuC2jKbhwqra/mVZqppQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnWZ/P+Ht1rnrY4rKtz8kn3vheUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDdkOTJmMjEtMGVmMS0z ODJhLTlmY2ItYjk1OWNjNzFkNzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItRb9RXZMZK8WObq8hEl9dNJM3SaK26u0c8PZooPuXOqTMvW/ZHr+OF wYHLhJjN8tMGEkKZEs2x1tKpGYiQAAEHlyGVODH1nSfE1eGeBpj8+Q0ybAXwkk/O 4dYQ8GUqdLOyr18VAPSrLUHYHuVbzeRx0/87XqtXHfOToOe4LWInlOzFM+/5pqAO Fzr9IiR4t5JjpzwqYnPRFdJrpbzBotx4+T4tQ8OL7H9WpEuGwJIFkfxslWpqWEHl /8Hv9LpQvlGnUsWhlbzjf6ZB0uS3ofeAd9Us/gVlf6GoopWdyGL0Jj5FHQs1mdik Jvrf5R0jTnxajL471PARtpNxVppzvz8= -----END CERTIFICATE-----Generated at Mon Oct 20 04:35:20 2025 by rpki-client