$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5f2854a5-a8d3-3b47-b10c-56016fd4464c.roa File: 5f2854a5-a8d3-3b47-b10c-56016fd4464c.roa (raw, json) Hash identifier: Eh5w45DqrbGTY2B2ptVEPwmMOCkEA1HqnkCMAyZwSKc= Subject key identifier: 3F:74:86:9E:AF:F8:C8:5C:A7:4B:A2:0E:28:4B:29:34:C0:3A:D3:74 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B7F525CC834DC55164F13C700 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5f2854a5-a8d3-3b47-b10c-56016fd4464c.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 8069 IP address blocks: 20.33.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:5c:c8:34:dc:55:16:4f:13:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=ea178b46-9098-4096-809a-a3179492c400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3d:ac:77:7f:9e:9d:0c:30:58:3d:b6:a7:aa: a9:f3:bd:2d:39:d0:45:e7:54:0b:36:f4:d5:23:9f: 8b:2c:98:cb:d9:fe:ca:63:d0:96:6c:74:c4:3d:b0: c4:20:9a:3b:92:03:28:cb:cc:ea:06:89:b2:55:0c: 10:7e:0c:99:6b:9d:bf:d1:a9:f3:06:79:55:0f:15: 8d:cb:ea:ef:92:77:4e:42:f4:78:39:6c:b7:b3:a5: 04:01:5a:da:ba:82:a3:f0:ad:82:ee:5c:cd:89:f7: 1b:45:6f:5a:f0:36:ab:a0:dc:be:da:95:9a:25:7a: 95:4b:16:5f:d2:29:1d:90:03:c4:77:ae:34:ff:05: 96:18:75:9b:be:4a:ed:19:cd:a2:ba:71:53:17:04: 89:de:7b:b0:06:4d:1a:ba:dd:63:6a:28:5a:80:8c: 17:23:2d:be:51:5b:51:3f:bc:b9:b3:2f:03:b9:61: 78:e5:1d:42:4f:86:9f:f8:76:6e:9f:71:dd:02:ae: c9:af:66:cd:af:8a:e8:12:0f:fe:e2:d9:17:f4:79: 47:87:4c:9d:96:40:f6:1b:38:6f:95:7a:43:60:77: 9d:23:36:25:cb:9b:6c:33:c6:73:2c:a3:97:42:cc: 1c:ae:16:b8:40:03:8b:82:c1:45:cb:e3:0e:de:02: df:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:74:86:9E:AF:F8:C8:5C:A7:4B:A2:0E:28:4B:29:34:C0:3A:D3:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5f2854a5-a8d3-3b47-b10c-56016fd4464c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:f9:ab:a4:f9:f6:f4:45:af:51:2a:43:82:db:0e:b0:5f:37: 19:62:cf:d1:1d:be:a3:ed:18:b7:66:ff:b8:b6:e6:ff:c1:e8: 38:7e:7f:44:f3:c6:ec:8a:a3:02:cf:60:17:8a:fe:82:08:c6: 81:05:28:93:45:86:cd:2f:ac:95:42:6c:63:f3:5f:3b:0e:ba: 8f:69:9a:5e:31:67:a7:8e:e3:6d:d9:de:e4:1d:67:79:28:0f: d2:4f:a7:62:35:cc:2d:e0:ce:af:ad:7a:41:b9:03:1b:98:63: 83:fe:43:98:57:7f:e1:b5:3a:43:4f:c2:fd:89:08:d0:4b:88: 80:c8:63:58:a7:de:28:07:2b:e7:90:4a:86:da:c2:89:96:de: 1b:68:1d:ae:df:90:b1:2f:db:8d:56:9f:39:83:77:10:49:d1: 50:0b:fb:3a:1d:52:f1:34:a9:66:23:98:3f:fe:7d:a4:e0:e3: 67:7c:eb:22:df:f7:13:46:e7:34:80:20:51:d5:75:77:fd:73: 7e:cd:06:07:7f:aa:1a:f6:64:1c:93:5b:92:b5:d2:c4:27:5f: c0:dc:f5:eb:44:b0:f8:21:68:6c:fe:78:44:af:a8:9e:92:7d: d9:ae:32:51:a1:ec:f4:90:15:9e:ca:d3:b5:f9:20:82:80:d8: 6b:2c:2c:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UlzINNxVFk8TxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZWExNzhiNDYtOTA5OC00MDk2LTgwOWEtYTMxNzk0OTJjNDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgz2sd3+enQwwWD22p6qp870tOdBF51QLNvTV I5+LLJjL2f7KY9CWbHTEPbDEIJo7kgMoy8zqBomyVQwQfgyZa52/0anzBnlVDxWN y+rvkndOQvR4OWy3s6UEAVrauoKj8K2C7lzNifcbRW9a8DaroNy+2pWaJXqVSxZf 0ikdkAPEd640/wWWGHWbvkrtGc2iunFTFwSJ3nuwBk0aut1jaihagIwXIy2+UVtR P7y5sy8DuWF45R1CT4af+HZun3HdAq7Jr2bNr4roEg/+4tkX9HlHh0ydlkD2Gzhv lXpDYHedIzYly5tsM8ZzLKOXQswcrha4QAOLgsFFy+MO3gLfYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD90hp6v+Mhcp0uiDihLKTTAOtN0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWYyODU0YTUtYThkMy0z YjQ3LWIxMGMtNTYwMTZmZDQ0NjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCFkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJP5q6T59vRFr1EqQ4LbDrBfNxliz9EdvqPtGLdm/7i25v/B6Dh+f0Tz xuyKowLPYBeK/oIIxoEFKJNFhs0vrJVCbGPzXzsOuo9pml4xZ6eO423Z3uQdZ3ko D9JPp2I1zC3gzq+tekG5AxuYY4P+Q5hXf+G1OkNPwv2JCNBLiIDIY1in3igHK+eQ SobawomW3htoHa7fkLEv241WnzmDdxBJ0VAL+zodUvE0qWYjmD/+faTg42d86yLf 9xNG5zSAIFHVdXf9c37NBgd/qhr2ZByTW5K10sQnX8Dc9etEsPghaGz+eESvqJ6S fdmuMlGh7PSQFZ7K07X5IIKA2GssLGc= -----END CERTIFICATE-----Generated at Mon Oct 20 09:46:55 2025 by rpki-client