$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7b5ac41d-84f9-3c65-bed3-c388701dbf1d.roa File: 7b5ac41d-84f9-3c65-bed3-c388701dbf1d.roa (raw, json) Hash identifier: +eiFLXnI24JTEYjkbR6wypNSR4BR04r9MMqqQpkSmvE= Subject key identifier: 86:DC:2A:E3:66:1C:E2:85:90:4C:56:54:41:9B:D5:51:DD:FB:59:F2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B0746C8908849BBA40DCA7D80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7b5ac41d-84f9-3c65-bed3-c388701dbf1d.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.33.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:c8:90:88:49:bb:a4:0d:ca:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=17ad53c1-5e5a-4263-b98f-003a06e2c458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c3:67:84:52:8a:d0:b8:86:0b:63:9f:2d:ce: 30:5d:16:95:19:70:75:7c:ad:33:03:83:a1:46:fc: 13:fb:92:5f:75:e0:b5:f8:2f:b0:15:33:2e:b6:30: 66:d9:ed:3e:97:bc:08:d5:b7:31:b1:54:97:16:ab: 5a:17:0f:d5:28:f3:e7:3d:dc:f2:cb:b8:74:a8:ca: b6:62:94:53:3c:8a:a0:a2:38:41:60:d1:6b:9d:c5: 7a:7c:73:bf:1d:a6:23:e6:59:57:01:a8:51:b4:f9: a5:74:74:8c:27:89:6c:54:b7:94:7c:40:9d:00:c9: 19:d2:cd:90:bf:bc:e7:b4:3d:e7:19:bd:d4:a8:10: c1:1a:2a:bf:11:2d:66:cd:11:43:b3:bd:83:25:b9: 95:4e:63:24:7b:43:8d:05:ae:a8:ed:7f:7f:85:3b: 5b:65:01:06:12:88:f4:dc:af:3e:af:5a:d8:e4:73: f1:4c:f8:39:ee:9a:b4:f7:85:c7:b9:28:78:7b:67: 54:2e:4d:e1:17:30:f6:a7:55:0c:95:6d:e8:93:39: 16:fb:df:bd:6a:18:af:04:10:9b:0d:97:40:65:82: 5d:fd:96:e2:88:67:ba:4d:6e:9f:b7:5f:f7:a4:31: ae:73:0f:54:02:f5:13:7e:13:59:72:e9:42:f8:60: 6d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DC:2A:E3:66:1C:E2:85:90:4C:56:54:41:9B:D5:51:DD:FB:59:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7b5ac41d-84f9-3c65-bed3-c388701dbf1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:9d:fd:90:4d:01:3a:35:3b:e1:29:7b:97:92:99:5d:9a:a5: a6:31:7c:84:f7:4e:30:f4:5c:0e:7b:f0:6b:27:d1:68:10:39: 16:6d:56:b1:76:0f:7a:28:92:86:ac:72:2f:5f:dd:a0:06:d8: 4a:56:ba:3a:19:22:0a:ed:e1:08:ca:1a:49:0e:a3:6a:68:7d: cd:64:6b:dd:bb:d6:25:bd:80:4e:57:60:10:6b:c7:3c:a2:1c: 5b:5a:fc:22:91:96:30:d7:19:f4:fe:fc:ea:cf:43:12:6b:2c: 78:09:77:23:cc:f1:d7:80:1d:12:47:36:ba:83:e8:8b:1f:50: 15:0f:fc:25:34:0e:39:d2:d7:38:5c:21:35:72:b3:13:76:0e: e6:ca:f1:2d:c1:bc:65:0c:78:65:14:9f:b1:0c:81:61:92:b1: 9b:37:06:b4:1c:36:11:49:f4:48:23:e0:de:7c:37:bd:a8:8d: 6f:2e:b0:96:5b:63:c6:e5:fe:8d:cd:69:74:bb:29:3c:42:8b: 3b:52:b4:6b:16:a7:95:e2:ec:c8:9d:03:b9:83:5e:bc:0a:d0: da:f8:7c:8f:a7:f8:ac:38:7e:3e:88:0d:36:7e:1c:af:5a:e8: 2e:7f:bc:43:3d:46:fb:ed:d8:a8:74:b2:91:b5:13:a3:75:25: 34:15:60:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRsiQiEm7pA3KfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk MTdhZDUzYzEtNWU1YS00MjYzLWI5OGYtMDAzYTA2ZTJjNDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMNnhFKK0LiGC2OfLc4wXRaVGXB1fK0zA4Oh RvwT+5JfdeC1+C+wFTMutjBm2e0+l7wI1bcxsVSXFqtaFw/VKPPnPdzyy7h0qMq2 YpRTPIqgojhBYNFrncV6fHO/HaYj5llXAahRtPmldHSMJ4lsVLeUfECdAMkZ0s2Q v7zntD3nGb3UqBDBGiq/ES1mzRFDs72DJbmVTmMke0ONBa6o7X9/hTtbZQEGEoj0 3K8+r1rY5HPxTPg57pq094XHuSh4e2dULk3hFzD2p1UMlW3okzkW+9+9ahivBBCb DZdAZYJd/ZbiiGe6TW6ft1/3pDGucw9UAvUTfhNZculC+GBtuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbcKuNmHOKFkExWVEGb1VHd+1nyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2I1YWM0MWQtODRmOS0z YzY1LWJlZDMtYzM4ODcwMWRiZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOd/ZBNATo1O+Epe5eSmV2apaYxfIT3TjD0XA578Gsn0WgQORZtVrF2 D3ookoasci9f3aAG2EpWujoZIgrt4QjKGkkOo2pofc1ka9271iW9gE5XYBBrxzyi HFta/CKRljDXGfT+/OrPQxJrLHgJdyPM8deAHRJHNrqD6IsfUBUP/CU0DjnS1zhc ITVysxN2DubK8S3BvGUMeGUUn7EMgWGSsZs3BrQcNhFJ9Egj4N58N72ojW8usJZb Y8bl/o3NaXS7KTxCiztStGsWp5Xi7MidA7mDXrwK0Nr4fI+n+Kw4fj6IDTZ+HK9a 6C5/vEM9Rvvt2Kh0spG1E6N1JTQVYDA= -----END CERTIFICATE-----Generated at Mon Oct 20 04:31:14 2025 by rpki-client