$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4eb720e4-01b2-3f16-8642-849e970123c0.roa File: 4eb720e4-01b2-3f16-8642-849e970123c0.roa (raw, json) Hash identifier: RuZN5zl+48EZy8tzr49l1r4SfGhsKZeCkECa7JREPUc= Subject key identifier: A4:52:D4:16:11:B5:6B:2A:FF:61:70:AE:A9:F4:9A:09:B5:D4:41:B7 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B84E789A29F1BA8212178F47C Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4eb720e4-01b2-3f16-8642-849e970123c0.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 8069 IP address blocks: 20.33.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:89:a2:9f:1b:a8:21:21:78:f4:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=bc7bfe61-d398-4cd0-ab7d-149f1468e061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4d:06:0b:de:e2:d4:2f:2e:2d:c1:37:d6:42: 7c:89:1b:ae:c0:e4:e8:18:3b:f6:b1:68:95:1d:b7: 08:51:8c:24:04:af:ac:c2:5e:25:28:a1:cd:7c:b2: 65:5f:ff:1f:cd:22:0a:88:21:a0:65:2f:2a:48:77: 37:de:f5:d8:63:b1:17:6d:de:81:e3:84:31:7c:d5: 67:95:84:00:5a:7b:52:01:70:e3:cc:21:e6:62:b7: a0:c8:d3:19:82:7d:9f:de:0a:d2:3b:a5:1d:8d:77: 05:2c:d1:a0:ce:d4:57:5f:43:c4:6e:49:ce:dd:d3: 43:de:e8:b2:61:d5:fe:b7:2a:1f:ba:9b:b1:46:5b: 0f:7a:27:65:bb:70:79:c8:94:c2:2f:5b:d6:0b:a0: 81:9a:e8:fe:68:0b:3e:32:6f:23:cd:1a:68:f5:77: e8:24:31:1e:eb:88:3e:4d:b9:b6:1c:e0:f6:25:8c: da:3c:df:c5:c8:5a:6e:25:e1:80:a3:11:9f:f7:10: 5d:5e:8e:93:1b:d2:6d:58:f8:90:2b:a4:cc:5d:fd: 8a:32:21:3a:7d:23:79:90:c3:9f:0f:43:d9:d2:d7: 2f:6d:cc:80:c1:07:94:a0:c5:74:52:94:40:7a:21: 6f:05:35:f4:ab:41:db:bf:e6:42:42:0b:e8:ca:53: 6c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:52:D4:16:11:B5:6B:2A:FF:61:70:AE:A9:F4:9A:09:B5:D4:41:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4eb720e4-01b2-3f16-8642-849e970123c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:f4:c1:9e:4a:5a:f0:40:33:f2:58:6a:60:c4:9f:63:ac:59: fb:34:2b:3c:0e:5a:a7:64:9e:83:08:17:9b:95:e7:7e:71:d9: c9:8a:ea:b6:64:dc:a2:0f:19:4a:67:b4:37:44:f7:08:38:dd: d0:73:76:c1:bd:09:97:9d:b8:f6:ea:0b:dd:9f:6d:f9:15:5c: 7e:f5:ba:4b:8d:5c:f2:96:61:b8:df:9c:db:8e:5f:d7:78:8b: 11:a5:2c:7c:b8:2d:be:a3:c9:db:ef:9d:e7:ed:ce:1e:67:8f: 8d:7e:fd:94:f2:19:67:ee:7e:53:2d:4a:00:a5:3f:07:27:07: 90:1c:1e:21:23:87:b2:4c:34:75:bf:de:44:76:13:4f:af:d6: c9:2f:86:fb:62:71:54:c0:50:7a:ab:79:37:10:ba:7f:ee:07: 8a:01:10:14:c1:bf:86:73:d6:bc:bc:34:bd:ee:f7:60:57:a1: ed:17:8e:65:1e:51:a4:f6:01:da:d3:de:8c:ae:3a:bf:d0:78: 9f:98:2a:34:f2:b1:19:db:6f:45:31:47:64:f7:89:7d:7c:49: 33:e6:4e:7d:21:54:bc:4c:43:3f:31:71:c9:51:ab:31:5a:4e: 8e:c8:f2:0f:5f:a0:ec:a6:9f:b4:1c:95:8b:7b:b4:9f:90:bf: 25:ad:38:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54minxuoISF49HwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk YmM3YmZlNjEtZDM5OC00Y2QwLWFiN2QtMTQ5ZjE0NjhlMDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgU0GC97i1C8uLcE31kJ8iRuuwOToGDv2sWiV HbcIUYwkBK+swl4lKKHNfLJlX/8fzSIKiCGgZS8qSHc33vXYY7EXbd6B44QxfNVn lYQAWntSAXDjzCHmYregyNMZgn2f3grSO6UdjXcFLNGgztRXX0PEbknO3dND3uiy YdX+tyofupuxRlsPeidlu3B5yJTCL1vWC6CBmuj+aAs+Mm8jzRpo9XfoJDEe64g+ Tbm2HOD2JYzaPN/FyFpuJeGAoxGf9xBdXo6TG9JtWPiQK6TMXf2KMiE6fSN5kMOf D0PZ0tcvbcyAwQeUoMV0UpRAeiFvBTX0q0Hbv+ZCQgvoylNsdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRS1BYRtWsq/2Fwrqn0mgm11EG3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGViNzIwZTQtMDFiMi0z ZjE2LTg2NDItODQ5ZTk3MDEyM2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKn0wZ5KWvBAM/JYamDEn2OsWfs0KzwOWqdknoMIF5uV535x2cmK6rZk 3KIPGUpntDdE9wg43dBzdsG9CZeduPbqC92fbfkVXH71ukuNXPKWYbjfnNuOX9d4 ixGlLHy4Lb6jydvvneftzh5nj41+/ZTyGWfuflMtSgClPwcnB5AcHiEjh7JMNHW/ 3kR2E0+v1skvhvticVTAUHqreTcQun/uB4oBEBTBv4Zz1ry8NL3u92BXoe0XjmUe UaT2AdrT3oyuOr/QeJ+YKjTysRnbb0UxR2T3iX18STPmTn0hVLxMQz8xcclRqzFa To7I8g9foOymn7QclYt7tJ+QvyWtOHA= -----END CERTIFICATE-----Generated at Mon Oct 20 01:58:53 2025 by rpki-client