$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c80d730-c27b-37ad-b9bc-220b32e6a0b1.roa File: 6c80d730-c27b-37ad-b9bc-220b32e6a0b1.roa (raw, json) Hash identifier: 9hgzLUXCS5ArvDqXC0d4fV7IUZjKjyiHUSIdaqQQ/8s= Subject key identifier: 60:B1:14:D3:17:76:4B:16:7E:9F:26:7B:30:00:11:51:3E:CD:D1:79 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B047C1CE53816EA8EDA593180 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c80d730-c27b-37ad-b9bc-220b32e6a0b1.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:1c:e5:38:16:ea:8e:da:59:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=22aad41d-ca56-4bcd-9ab9-ceb5f0c697d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cc:a6:ff:ac:1a:a2:70:32:97:3c:eb:1d:70: 7d:60:50:73:b1:4b:20:bb:b3:0b:09:95:68:a5:ce: a5:11:b9:e7:1d:d3:f8:e8:d7:1b:0b:25:f5:6e:d5: 07:2a:c5:2e:ee:10:db:74:4d:1b:1d:a6:b2:28:19: c2:05:76:57:7d:52:b5:d0:6e:33:41:16:95:0f:ba: a7:21:a1:04:f1:d6:17:85:7a:71:d0:fd:8f:7a:06: 0b:fc:11:4d:9e:63:4e:c5:ff:91:84:15:59:ee:7a: fd:f5:db:69:80:15:1f:6b:88:08:53:87:67:a1:29: 42:64:7b:c6:b7:f8:11:23:bc:1f:34:0c:43:84:f2: 83:74:e0:d4:e7:1b:1a:44:b0:64:2d:4e:7e:21:60: 24:47:11:9d:58:67:33:01:aa:97:2d:d2:1d:7d:ef: 45:92:c4:60:36:0c:9f:3d:34:0d:42:74:2d:bc:1f: 87:69:f3:e7:68:f8:05:e7:a7:17:a3:1b:da:af:48: cd:d9:ef:3a:dd:1f:58:43:30:7f:74:87:f6:73:02: 7d:a3:b0:af:6a:d5:46:e0:45:05:1b:cc:65:2a:8c: d2:1a:c1:b9:fc:1c:29:d3:f1:88:c7:da:44:ab:f7: ee:27:34:7d:4b:57:22:e2:8c:4c:eb:72:8d:39:5f: e2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B1:14:D3:17:76:4B:16:7E:9F:26:7B:30:00:11:51:3E:CD:D1:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c80d730-c27b-37ad-b9bc-220b32e6a0b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:19:32:5e:26:fe:f8:17:b5:1a:f6:94:b2:e9:8c:55:39:1b: 1c:96:8a:f5:a6:e9:59:c8:84:88:e3:da:47:80:0c:a8:a3:11: 01:8c:89:b3:c4:cb:92:98:24:fb:8d:ed:9d:89:86:6d:39:fb: 2e:9f:7d:1a:ed:b0:cf:29:de:5a:c5:f0:af:c3:ea:69:6d:4c: fb:4d:d2:d0:97:d6:11:07:fb:a6:3a:b4:30:a9:7a:94:d5:73: cb:f6:b2:e8:a1:85:3b:bd:bf:40:b5:46:ee:0c:7b:c4:9e:7f: 36:6a:cd:1a:e2:51:a1:4f:9f:32:1d:7c:c2:5c:17:f7:7c:b1: 0a:6a:27:14:78:5b:10:24:d5:59:0d:8f:f6:0a:11:72:ec:16: 93:f5:42:93:61:bf:33:00:43:e6:52:3b:b1:15:df:dc:2b:2a: 6f:26:6f:cf:c9:9f:eb:a9:07:f4:30:6a:c5:41:a9:af:18:3f: 1b:ae:cb:5e:27:06:a8:3c:df:2b:67:44:b7:15:12:95:9d:27: bc:53:58:ab:52:ce:8f:d2:2c:99:d1:8d:0a:83:ff:92:dc:9f: 98:8e:ea:77:6b:1a:f4:45:40:37:d2:28:11:0a:c1:33:f6:1c: c5:53:ab:39:ab:b4:12:32:a7:08:13:3e:58:33:a1:bd:13:9d: 87:b4:e7:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfBzlOBbqjtpZMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk MjJhYWQ0MWQtY2E1Ni00YmNkLTlhYjktY2ViNWYwYzY5N2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicym/6waonAylzzrHXB9YFBzsUsgu7MLCZVo pc6lEbnnHdP46NcbCyX1btUHKsUu7hDbdE0bHaayKBnCBXZXfVK10G4zQRaVD7qn IaEE8dYXhXpx0P2PegYL/BFNnmNOxf+RhBVZ7nr99dtpgBUfa4gIU4dnoSlCZHvG t/gRI7wfNAxDhPKDdODU5xsaRLBkLU5+IWAkRxGdWGczAaqXLdIdfe9FksRgNgyf PTQNQnQtvB+HafPnaPgF56cXoxvar0jN2e863R9YQzB/dIf2cwJ9o7CvatVG4EUF G8xlKozSGsG5/Bwp0/GIx9pEq/fuJzR9S1ci4oxM63KNOV/i4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCxFNMXdksWfp8mezAAEVE+zdF5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmM4MGQ3MzAtYzI3Yi0z N2FkLWI5YmMtMjIwYjMyZTZhMGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAZMl4m/vgXtRr2lLLpjFU5GxyWivWm6VnIhIjj2keADKijEQGMibPE y5KYJPuN7Z2Jhm05+y6ffRrtsM8p3lrF8K/D6mltTPtN0tCX1hEH+6Y6tDCpepTV c8v2suihhTu9v0C1Ru4Me8SefzZqzRriUaFPnzIdfMJcF/d8sQpqJxR4WxAk1VkN j/YKEXLsFpP1QpNhvzMAQ+ZSO7EV39wrKm8mb8/Jn+upB/QwasVBqa8YPxuuy14n Bqg83ytnRLcVEpWdJ7xTWKtSzo/SLJnRjQqD/5Lcn5iO6ndrGvRFQDfSKBEKwTP2 HMVTqzmrtBIypwgTPlgzob0TnYe0548= -----END CERTIFICATE-----Generated at Mon Oct 20 02:03:13 2025 by rpki-client