$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7cbce0d9-041b-3c5c-87e4-357878aadde8.roa File: 7cbce0d9-041b-3c5c-87e4-357878aadde8.roa (raw, json) Hash identifier: lPSI2RG3/Ee7YbKCSovMhmvphOq1VMrbBwqPPGDeFKM= Subject key identifier: 5F:53:4C:5E:35:13:85:5F:77:F0:35:2F:1D:D3:52:4D:6C:11:DB:D9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B84E78A62043AA78E76CAC400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7cbce0d9-041b-3c5c-87e4-357878aadde8.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 8069 IP address blocks: 20.33.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:8a:62:04:3a:a7:8e:76:ca:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=de73bfe3-5812-4b61-9f24-147aba8f89ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:24:dc:69:e5:27:37:10:12:e6:0d:2f:28:d7: d4:07:0f:0b:b5:46:ac:1b:19:ec:6f:dd:14:f2:fd: 87:2b:5b:94:bd:cf:e0:5b:3c:d5:cc:2b:b7:58:b1: a9:9b:76:07:8c:71:36:2c:e4:56:51:1c:d1:cb:b3: e6:4a:e7:be:56:4a:a6:f7:ac:3d:ef:41:11:92:d6: fc:d4:a7:44:ec:66:73:fe:ec:55:92:30:0f:d6:62: ac:e2:fd:a2:3e:58:02:e6:41:f2:ad:d5:24:b3:91: 1b:4b:2e:d2:4c:41:64:2e:f9:8b:56:ad:de:81:65: c1:04:84:64:6c:62:34:4a:2f:a4:35:4a:fe:e3:0c: 63:b6:41:a4:40:98:59:98:64:88:2e:26:ab:a5:ed: 92:9f:32:0c:da:98:78:cc:27:74:93:63:93:45:10: 49:9a:26:2e:97:a9:0f:2e:ef:14:e3:9e:52:cb:2e: 2a:d0:7d:67:23:c2:66:77:c2:bf:0a:cd:ec:ef:52: 41:29:5e:7f:ce:26:45:4d:40:76:ae:0d:04:13:a5: ce:f9:8a:54:ef:f5:15:7d:be:98:db:57:1e:30:ea: 28:a0:4f:af:f2:d4:df:81:78:95:23:66:8d:fa:b3: b3:68:c5:6f:06:bc:15:a4:e5:a7:95:27:ce:77:4e: 60:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:53:4C:5E:35:13:85:5F:77:F0:35:2F:1D:D3:52:4D:6C:11:DB:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7cbce0d9-041b-3c5c-87e4-357878aadde8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:4f:8a:7d:e9:a0:3d:d9:86:6b:70:15:8b:cb:40:0c:b1:2d: 97:bd:0f:74:c5:53:ad:57:a7:77:a2:9c:dd:37:b4:22:16:2b: ac:d9:6a:29:53:5f:7f:8f:8d:7b:e3:78:76:73:66:d1:08:a6: 20:d1:28:a6:a5:21:26:fd:67:a8:d4:3c:7b:d2:a3:8f:e9:6b: 7e:2b:82:38:44:53:68:ae:e9:02:ad:b0:df:ae:93:5e:ef:30: 76:58:74:37:0f:75:75:c4:74:32:78:d3:b0:db:dc:2c:c7:d6: f3:75:6e:1c:23:41:52:da:ae:87:b4:c0:d9:5e:de:19:2c:df: cc:7d:4c:50:58:05:2d:a9:62:8d:60:eb:80:ef:ad:ee:6b:24: 0f:e5:6a:77:7e:a2:8d:8f:ee:46:41:d4:9e:4b:29:b2:09:15: bd:c4:d8:cc:de:51:63:9f:25:95:f7:82:69:8f:8f:15:78:bd: a2:37:cd:81:3d:3a:23:30:16:86:46:ee:da:a4:f4:f2:1b:64: 43:d6:c3:13:06:19:99:39:96:b1:4b:4a:d3:ed:7f:e7:6f:cc: 46:cc:3e:c8:08:84:57:13:ca:36:47:05:1d:be:7a:99:b5:7e: d2:05:0d:78:cc:31:28:1c:1c:04:cb:2e:7d:5e:d4:35:9f:75: 42:e0:fb:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54piBDqnjnbKxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZGU3M2JmZTMtNTgxMi00YjYxLTlmMjQtMTQ3YWJhOGY4OWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiTcaeUnNxAS5g0vKNfUBw8LtUasGxnsb90U 8v2HK1uUvc/gWzzVzCu3WLGpm3YHjHE2LORWURzRy7PmSue+Vkqm96w970ERktb8 1KdE7GZz/uxVkjAP1mKs4v2iPlgC5kHyrdUks5EbSy7STEFkLvmLVq3egWXBBIRk bGI0Si+kNUr+4wxjtkGkQJhZmGSILiarpe2SnzIM2ph4zCd0k2OTRRBJmiYul6kP Lu8U455Syy4q0H1nI8Jmd8K/Cs3s71JBKV5/ziZFTUB2rg0EE6XO+YpU7/UVfb6Y 21ceMOoooE+v8tTfgXiVI2aN+rOzaMVvBrwVpOWnlSfOd05g3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9TTF41E4Vfd/A1Lx3TUk1sEdvZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2NiY2UwZDktMDQxYi0z YzVjLTg3ZTQtMzU3ODc4YWFkZGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZPin3poD3ZhmtwFYvLQAyxLZe9D3TFU61Xp3einN03tCIWK6zZailT X3+PjXvjeHZzZtEIpiDRKKalISb9Z6jUPHvSo4/pa34rgjhEU2iu6QKtsN+uk17v MHZYdDcPdXXEdDJ407Db3CzH1vN1bhwjQVLaroe0wNle3hks38x9TFBYBS2pYo1g 64Dvre5rJA/land+oo2P7kZB1J5LKbIJFb3E2MzeUWOfJZX3gmmPjxV4vaI3zYE9 OiMwFoZG7tqk9PIbZEPWwxMGGZk5lrFLStPtf+dvzEbMPsgIhFcTyjZHBR2+epm1 ftIFDXjMMSgcHATLLn1e1DWfdULg+0M= -----END CERTIFICATE-----Generated at Tue Oct 21 02:00:20 2025 by rpki-client