$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5bf04b00-bd2b-33b8-9872-6c352ab3e042.roa File: 5bf04b00-bd2b-33b8-9872-6c352ab3e042.roa (raw, json) Hash identifier: PJbYVXgKRvshpGIOpn4ZVStl0Eh9HqXuDOeG5gr2Xr4= Subject key identifier: F0:1D:49:4F:73:D1:3D:A3:85:32:E5:16:FF:D5:1E:F1:B5:9A:D2:6C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B92DD43B3470905B01726B380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5bf04b00-bd2b-33b8-9872-6c352ab3e042.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.33.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:43:b3:47:09:05:b0:17:26:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=58a17341-775d-4da8-a969-4dfee51af66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:70:a1:7e:cb:58:a7:c0:e6:54:ac:49:94:dc: 25:ad:8d:1a:1a:eb:cd:d2:c8:3b:f7:c2:b0:5c:bd: ee:a1:6e:f1:05:ff:4d:b8:1c:77:f1:e4:61:28:c4: 8b:3e:f7:87:bb:1d:00:f0:ff:38:17:eb:0b:32:bb: 9e:b4:e9:f2:e7:d7:4d:bb:79:f9:46:6a:42:a0:07: 74:6b:09:f2:d2:11:79:bd:e7:36:ff:3f:76:45:8e: 4b:8f:d6:1e:c4:84:ee:5e:65:a8:6a:97:a6:ad:20: 8c:ef:b1:57:0f:00:cb:50:66:af:f2:a7:7d:a0:de: 41:e1:1c:3f:18:68:2a:b0:d2:30:22:fe:70:4d:08: 80:26:e5:c4:71:c8:ed:8f:eb:43:5f:1f:45:33:52: de:ab:b2:05:0c:f5:02:67:71:5d:cd:9b:2f:58:ee: 77:48:65:27:f3:43:40:96:60:16:47:7c:90:66:74: 7a:8e:8b:d9:fb:b3:8a:ce:14:27:37:75:fc:82:6c: c0:a4:6e:8f:08:a3:ce:d2:e3:90:22:32:51:2e:45: ef:42:a3:81:78:7e:35:3e:06:cf:d0:e9:fa:65:d7: 34:30:84:b3:7e:0c:00:62:b5:3b:38:ac:d1:3c:b2: 1f:95:4b:a4:3e:17:a1:b9:37:9e:24:92:7a:c2:ba: 4e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:1D:49:4F:73:D1:3D:A3:85:32:E5:16:FF:D5:1E:F1:B5:9A:D2:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5bf04b00-bd2b-33b8-9872-6c352ab3e042.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:3d:ad:b3:55:86:ff:58:e5:0c:9e:f0:44:48:23:90:45:da: e5:00:ec:50:41:57:06:58:b2:a4:dd:cc:37:bf:c1:b5:a8:3c: 44:11:2f:e0:73:b9:c9:8b:cc:24:71:59:5d:6e:3a:fe:f9:1b: 7f:07:bb:7a:b7:8f:36:dd:d6:bf:90:4c:cc:d5:c4:1d:1d:5c: 98:73:31:e0:44:95:5b:3f:01:07:0e:68:9b:84:d8:19:33:ed: da:ea:76:03:77:07:be:53:fa:c8:bd:da:a2:80:65:b0:34:48: 65:6e:6b:2f:14:4e:a5:1a:fc:9a:1b:0b:1c:81:04:90:f0:3a: fc:c0:81:08:94:a1:04:b7:e3:28:ab:55:e1:6b:65:87:ab:6c: 16:e2:9c:a5:10:d1:53:80:9c:4d:a4:d4:8f:5a:93:ef:33:e3: ff:34:9e:8b:f8:c5:54:17:38:0d:8e:43:8f:48:1b:25:63:ba: 2d:38:d9:a1:62:87:5a:16:1e:28:38:02:db:d6:ee:f0:81:76: 04:41:68:c7:0a:90:d5:73:6f:82:58:5e:58:ff:11:64:87:c5: b0:48:85:7e:8c:71:7e:7b:67:ee:66:0e:b7:1c:2f:d9:da:2f: e7:a2:03:da:a8:00:b5:87:d6:3d:50:15:0a:59:dc:40:f1:b0: ac:cd:98:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3UOzRwkFsBcms4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk NThhMTczNDEtNzc1ZC00ZGE4LWE5NjktNGRmZWU1MWFmNjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXChfstYp8DmVKxJlNwlrY0aGuvN0sg798Kw XL3uoW7xBf9NuBx38eRhKMSLPveHux0A8P84F+sLMruetOny59dNu3n5RmpCoAd0 awny0hF5vec2/z92RY5Lj9YexITuXmWoapemrSCM77FXDwDLUGav8qd9oN5B4Rw/ GGgqsNIwIv5wTQiAJuXEccjtj+tDXx9FM1Leq7IFDPUCZ3FdzZsvWO53SGUn80NA lmAWR3yQZnR6jovZ+7OKzhQnN3X8gmzApG6PCKPO0uOQIjJRLkXvQqOBeH41PgbP 0On6Zdc0MISzfgwAYrU7OKzRPLIflUukPhehuTeeJJJ6wrpO/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAdSU9z0T2jhTLlFv/VHvG1mtJsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWJmMDRiMDAtYmQyYi0z M2I4LTk4NzItNmMzNTJhYjNlMDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCHiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACI9rbNVhv9Y5Qye8ERII5BF2uUA7FBBVwZYsqTdzDe/wbWoPEQRL+Bz ucmLzCRxWV1uOv75G38Hu3q3jzbd1r+QTMzVxB0dXJhzMeBElVs/AQcOaJuE2Bkz 7drqdgN3B75T+si92qKAZbA0SGVuay8UTqUa/JobCxyBBJDwOvzAgQiUoQS34yir VeFrZYerbBbinKUQ0VOAnE2k1I9ak+8z4/80nov4xVQXOA2OQ49IGyVjui042aFi h1oWHig4AtvW7vCBdgRBaMcKkNVzb4JYXlj/EWSHxbBIhX6McX57Z+5mDrccL9na L+eiA9qoALWH1j1QFQpZ3EDxsKzNmBc= -----END CERTIFICATE-----Generated at Mon Oct 20 07:36:59 2025 by rpki-client