$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e7304ed-6a65-3b88-9065-69c0045b65f3.roa File: 6e7304ed-6a65-3b88-9065-69c0045b65f3.roa (raw, json) Hash identifier: us8BaRs76H7H1LXU4jqOu+8Nxtg4XTwvLbOWa4my/vk= Subject key identifier: 7F:38:72:B0:B8:7C:22:AE:79:EE:40:D7:A0:8F:30:D8:FD:C9:F2:3E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B2A2C40E9EA44919B43153EC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e7304ed-6a65-3b88-9065-69c0045b65f3.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 8069 IP address blocks: 20.33.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:40:e9:ea:44:91:9b:43:15:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=45d7f27a-4a0f-4efb-9d16-746bfbab319a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:78:8f:1c:52:01:e7:7b:ff:fb:1b:1a:b6:d3: e9:9d:f4:64:1e:2c:2d:cb:14:b3:91:88:34:c8:12: fe:e7:b5:05:30:8e:55:d4:9a:13:75:2e:b3:07:e1: c2:3d:e4:e1:fd:80:3d:2f:d6:0f:a2:a3:82:82:a9: a4:09:ad:84:53:4b:26:3f:e5:10:19:74:71:82:c6: 3e:d5:15:ef:0d:55:a6:06:0e:ee:63:82:5a:b8:25: d1:79:34:4c:e3:7f:c3:4d:84:a9:42:3a:16:11:fd: 3b:43:99:fc:79:92:48:08:ec:ed:2e:a6:23:b7:d9: 2b:b0:d7:02:1d:37:fa:0e:e8:7f:35:94:14:3c:e3: 3b:89:0f:b6:22:2b:c4:c5:04:f1:e5:64:83:29:da: e6:3c:f9:1c:da:62:e7:ee:a8:f1:d2:9b:56:b9:7c: ab:7c:51:d0:9a:57:ff:d6:a3:bf:2b:63:a0:a2:60: 16:3f:7a:17:d9:22:ea:cb:fe:4b:26:84:05:ff:5a: 1b:6a:b9:f7:d9:5a:93:ee:14:9a:1a:9b:bd:49:ef: c7:a1:67:04:a2:fb:1f:c4:51:11:ea:57:da:5a:ba: 7f:22:78:8f:26:34:d3:2d:6b:a2:e5:f2:74:6a:93: 94:91:8e:09:59:31:68:7e:82:d3:43:59:f6:3f:0d: f5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:38:72:B0:B8:7C:22:AE:79:EE:40:D7:A0:8F:30:D8:FD:C9:F2:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e7304ed-6a65-3b88-9065-69c0045b65f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:b0:ee:b3:53:d5:82:01:5c:e2:59:4c:8c:2b:99:5e:49:28: e2:74:93:d9:9e:ac:46:33:1e:f6:eb:68:a1:b4:40:e9:34:02: ce:a9:50:23:ec:bb:b8:53:46:7d:63:23:a8:32:dc:14:8e:ba: 7d:c5:3e:ad:e2:a4:82:c4:95:54:3c:a1:37:59:1e:25:9d:e5: 6c:af:59:7c:96:58:ae:0c:db:5f:1f:d9:a8:f2:d7:8c:a8:77: a9:d9:a8:b0:1e:d5:50:e8:e4:f1:c9:a6:02:f4:77:d4:df:c3: 0c:f3:b6:b0:8e:4b:8b:53:25:5b:e8:f0:35:23:0a:fa:09:53: 99:76:5a:38:c0:bf:49:49:42:4a:15:23:56:d7:bb:0b:c3:93: 10:82:c2:87:25:fb:07:83:2d:1b:50:fb:33:41:25:9b:c5:d0: 6e:e6:36:44:6d:b3:21:87:55:34:9e:4c:21:de:65:64:5b:b3: 58:c7:e7:e4:6f:8c:bd:e8:c0:60:e7:a0:f2:27:52:c3:61:1f: c2:cc:51:46:1d:96:89:2a:54:64:97:93:d9:42:04:49:af:54: 76:f0:f1:03:53:9e:2f:36:d7:b2:36:11:4d:c1:e9:e2:5f:06: ba:21:6a:c3:99:6b:45:1b:a5:03:ac:2d:cb:1c:8c:2e:15:eb: b1:42:9a:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEDp6kSRm0MVPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk NDVkN2YyN2EtNGEwZi00ZWZiLTlkMTYtNzQ2YmZiYWIzMTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXiPHFIB53v/+xsattPpnfRkHiwtyxSzkYg0 yBL+57UFMI5V1JoTdS6zB+HCPeTh/YA9L9YPoqOCgqmkCa2EU0smP+UQGXRxgsY+ 1RXvDVWmBg7uY4JauCXReTRM43/DTYSpQjoWEf07Q5n8eZJICOztLqYjt9krsNcC HTf6Duh/NZQUPOM7iQ+2IivExQTx5WSDKdrmPPkc2mLn7qjx0ptWuXyrfFHQmlf/ 1qO/K2OgomAWP3oX2SLqy/5LJoQF/1obarn32VqT7hSaGpu9Se/HoWcEovsfxFER 6lfaWrp/IniPJjTTLWui5fJ0apOUkY4JWTFofoLTQ1n2Pw31UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH84crC4fCKuee5A16CPMNj9yfI+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmU3MzA0ZWQtNmE2NS0z Yjg4LTkwNjUtNjljMDA0NWI2NWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqw7rNT1YIBXOJZTIwrmV5JKOJ0k9merEYzHvbraKG0QOk0As6pUCPs u7hTRn1jI6gy3BSOun3FPq3ipILElVQ8oTdZHiWd5WyvWXyWWK4M218f2ajy14yo d6nZqLAe1VDo5PHJpgL0d9TfwwzztrCOS4tTJVvo8DUjCvoJU5l2WjjAv0lJQkoV I1bXuwvDkxCCwocl+weDLRtQ+zNBJZvF0G7mNkRtsyGHVTSeTCHeZWRbs1jH5+Rv jL3owGDnoPInUsNhH8LMUUYdlokqVGSXk9lCBEmvVHbw8QNTni8217I2EU3B6eJf BrohasOZa0UbpQOsLcscjC4V67FCmrE= -----END CERTIFICATE-----Generated at Mon Oct 20 02:09:54 2025 by rpki-client