$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/80e82465-c9d4-3c99-a3bc-a70a5dfd93f8.roa File: 80e82465-c9d4-3c99-a3bc-a70a5dfd93f8.roa (raw, json) Hash identifier: pdjEnCUCfSLWLRQLEmtojAKN7+pVK3HC0YplZLWcpvQ= Subject key identifier: D9:9A:5D:F7:4D:19:AA:96:98:02:11:95:BB:63:22:FF:2B:42:FF:03 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B84E78A417B641FF3E18A5780 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/80e82465-c9d4-3c99-a3bc-a70a5dfd93f8.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 8069 IP address blocks: 20.33.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:8a:41:7b:64:1f:f3:e1:8a:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=25e2d606-3ef3-41d6-9556-9f46650f50cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d3:0d:d1:24:ad:71:21:a4:55:20:34:70:ab: 67:b1:9d:99:11:eb:b1:af:4f:26:13:28:a6:a8:a6: c0:0c:db:8b:ba:c9:eb:5a:0d:e3:41:62:e7:a7:9b: 7c:04:72:1c:46:9e:d4:a4:7b:85:81:9a:96:5c:a0: d9:c1:8b:ed:6f:92:ec:b2:a3:ec:33:13:5c:b7:ce: 00:99:97:2c:0a:3d:96:ac:b7:07:11:9a:57:4b:50: c5:d4:9b:54:23:6f:aa:62:d5:16:d9:a8:c7:b9:95: 47:d9:ee:5e:77:9d:f5:96:79:b7:9f:3d:6e:33:2a: 74:1e:57:ce:4d:28:d2:1d:bf:46:57:6d:20:e3:04: 53:aa:70:b5:a2:c9:9d:88:7e:cf:6f:aa:db:88:28: 9b:b8:31:15:12:bf:8e:7a:06:63:88:00:ab:86:10: 13:49:03:9b:36:22:d4:12:06:f3:e6:34:65:6c:51: 76:83:d6:09:a3:79:49:7f:ce:77:59:37:7f:2e:f8: f7:b5:25:fe:68:69:d5:af:bd:88:16:34:99:6d:40: d9:97:d8:41:51:b0:f4:22:59:04:b8:07:9c:80:45: a5:2b:00:41:6c:51:9c:15:05:c8:62:12:df:13:a6: f3:eb:4b:44:7a:36:8c:0e:a4:be:72:ca:d3:04:91: 68:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9A:5D:F7:4D:19:AA:96:98:02:11:95:BB:63:22:FF:2B:42:FF:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/80e82465-c9d4-3c99-a3bc-a70a5dfd93f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:a3:ef:5e:4c:b9:99:c4:2d:86:60:20:0c:80:fc:25:5b:29: be:e9:69:d5:5f:83:da:20:38:ad:63:2a:c9:2b:d8:b0:11:64: be:38:58:07:36:be:8e:8f:19:7b:d1:50:53:de:b9:49:0d:4d: 93:a0:17:86:9b:08:84:73:b8:f1:d9:6e:30:dd:f9:27:b4:cc: 1d:c8:7a:67:f6:f5:71:92:d6:75:15:9b:3d:53:4d:9b:f9:d1: db:dc:12:4d:58:bf:ea:88:29:ed:ee:79:2b:26:d7:52:09:b4: c0:bb:1a:15:04:c0:f4:1f:19:d8:c2:72:fa:7b:0f:f4:48:fd: 3b:16:b4:6a:be:d6:50:6b:5b:73:7a:ce:8a:9f:cd:75:89:ae: 5c:b3:6a:36:47:b5:6e:37:12:b1:37:f3:0b:64:60:62:6c:e7: 86:7e:1d:c3:0f:af:99:f4:ac:8b:94:23:62:34:05:f5:d7:04: c8:9a:83:f3:ad:50:96:35:01:0a:65:c3:b6:8d:7b:3c:ff:f8: d3:78:e3:d3:03:59:e4:fa:25:49:66:25:ff:48:c1:c3:e5:08: b5:d0:00:66:42:96:7e:be:50:db:eb:4b:30:05:a5:79:8a:ff: e8:fe:cc:60:f4:55:3f:7d:fa:65:a5:19:62:51:54:83:5b:d7: d8:a9:ec:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54pBe2Qf8+GKV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MjVlMmQ2MDYtM2VmMy00MWQ2LTk1NTYtOWY0NjY1MGY1MGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9MN0SStcSGkVSA0cKtnsZ2ZEeuxr08mEyim qKbADNuLusnrWg3jQWLnp5t8BHIcRp7UpHuFgZqWXKDZwYvtb5LssqPsMxNct84A mZcsCj2WrLcHEZpXS1DF1JtUI2+qYtUW2ajHuZVH2e5ed531lnm3nz1uMyp0HlfO TSjSHb9GV20g4wRTqnC1osmdiH7Pb6rbiCibuDEVEr+OegZjiACrhhATSQObNiLU Egbz5jRlbFF2g9YJo3lJf853WTd/Lvj3tSX+aGnVr72IFjSZbUDZl9hBUbD0IlkE uAecgEWlKwBBbFGcFQXIYhLfE6bz60tEejaMDqS+csrTBJFohwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmaXfdNGaqWmAIRlbtjIv8rQv8DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODBlODI0NjUtYzlkNC0z Yzk5LWEzYmMtYTcwYTVkZmQ5M2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuj715MuZnELYZgIAyA/CVbKb7padVfg9ogOK1jKskr2LARZL44WAc2 vo6PGXvRUFPeuUkNTZOgF4abCIRzuPHZbjDd+Se0zB3Iemf29XGS1nUVmz1TTZv5 0dvcEk1Yv+qIKe3ueSsm11IJtMC7GhUEwPQfGdjCcvp7D/RI/TsWtGq+1lBrW3N6 zoqfzXWJrlyzajZHtW43ErE38wtkYGJs54Z+HcMPr5n0rIuUI2I0BfXXBMiag/Ot UJY1AQplw7aNezz/+NN449MDWeT6JUlmJf9IwcPlCLXQAGZCln6+UNvrSzAFpXmK /+j+zGD0VT99+mWlGWJRVINb19ip7P0= -----END CERTIFICATE-----Generated at Mon Oct 20 07:26:18 2025 by rpki-client