$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/848376e0-ddab-3a49-a842-785182b9be6b.roa File: 848376e0-ddab-3a49-a842-785182b9be6b.roa (raw, json) Hash identifier: RFA4aEKMaNdXfr/WFb26alKPPb5UFhU67x09q34aCCg= Subject key identifier: 83:F8:C6:65:51:16:6B:68:F9:BF:94:8C:4C:84:5A:F3:0E:93:07:91 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B047C1DACB2FE64A8ED756C40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/848376e0-ddab-3a49-a842-785182b9be6b.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:1d:ac:b2:fe:64:a8:ed:75:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=a9c301a9-8d4b-434c-81b1-5a28c39b7a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:77:fc:27:3d:20:c4:29:36:0f:35:9c:dd:fd: eb:8a:d9:0e:b9:7b:d6:d6:4e:30:58:af:d2:78:bd: fc:8e:c2:5f:45:95:4a:5d:a3:80:4f:6a:3a:f2:d1: 6d:57:73:9e:76:a3:bc:38:98:a2:99:9d:c1:58:c5: 85:bf:5f:ea:21:4f:2c:bf:99:ab:ed:f1:e6:bb:05: 54:20:89:2a:7b:5b:10:fc:97:58:75:2c:e8:89:17: 60:e0:f4:aa:f6:df:c3:22:75:6c:5a:ff:08:9d:46: b3:e6:ed:03:2d:12:20:59:ad:35:5e:1f:af:82:69: cc:8f:8c:71:03:f0:a5:1c:a7:d0:b9:bb:67:0c:45: 40:37:4e:fd:58:4b:a6:b4:e5:46:ef:b8:0a:e1:a1: 30:3f:f9:04:95:77:2c:35:29:5f:60:05:bb:e4:01: 45:8d:a6:08:d2:c9:a3:e7:0b:ab:d8:11:f7:20:fc: f4:1f:9b:3e:6d:66:30:4e:e4:80:c8:96:fb:c0:08: b8:bf:d8:ac:9e:eb:54:33:b6:e7:24:63:10:d0:5f: d8:86:3a:8c:90:ab:5b:0f:9a:08:7d:f1:e7:fe:2a: ee:46:a5:c8:52:d3:91:7a:04:b3:40:46:ec:0f:40: ad:e0:0a:e5:45:8f:b2:b9:ed:15:51:f9:24:c2:1b: 44:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F8:C6:65:51:16:6B:68:F9:BF:94:8C:4C:84:5A:F3:0E:93:07:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/848376e0-ddab-3a49-a842-785182b9be6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:aa:f9:e8:e2:04:ad:f4:58:47:85:28:63:e1:9a:08:8a:2b: 4d:0b:5d:72:a4:a7:3f:0f:60:e3:91:03:b3:ce:be:4a:84:33: ff:71:d5:34:56:af:5c:f8:90:44:64:10:4b:4d:ae:85:5d:47: d0:78:c0:72:5b:04:38:b0:8e:fd:cb:69:20:f3:17:40:ed:0e: f7:2c:85:8a:ef:94:45:37:5b:c9:0e:40:7b:d3:6e:d2:e1:bb: 29:3c:03:aa:9a:fd:11:38:55:03:17:9f:45:cd:6e:df:e4:63: c2:47:65:14:a2:55:c8:93:24:d3:69:d3:f8:ae:94:4e:6b:66: a6:64:bd:df:26:33:54:d0:2f:4e:b4:00:02:56:0d:8a:eb:e5: ae:de:84:22:ed:2f:1d:92:c8:cc:9b:ac:ab:4f:3c:64:4a:e3: 3b:7e:1e:ef:88:5d:1b:98:38:20:fc:a2:6b:4b:31:4a:93:6b: 4b:34:6a:d1:91:9b:0b:9c:cc:9a:8a:0d:c2:07:0f:f8:cc:ca: 63:2d:4c:b1:a1:95:bb:a2:ab:20:6b:6b:7d:f6:25:07:a7:94: bb:e0:6f:85:7e:ce:9b:f2:e7:ad:e2:12:87:0e:12:ac:f7:e8: 28:35:17:50:e8:53:b3:bc:8d:de:0b:4c:e4:f9:92:5e:9b:1c: dd:31:a2:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfB2ssv5kqO11bEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk YTljMzAxYTktOGQ0Yi00MzRjLTgxYjEtNWEyOGMzOWI3YTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3f8Jz0gxCk2DzWc3f3ritkOuXvW1k4wWK/S eL38jsJfRZVKXaOAT2o68tFtV3OedqO8OJiimZ3BWMWFv1/qIU8sv5mr7fHmuwVU IIkqe1sQ/JdYdSzoiRdg4PSq9t/DInVsWv8InUaz5u0DLRIgWa01Xh+vgmnMj4xx A/ClHKfQubtnDEVAN079WEumtOVG77gK4aEwP/kElXcsNSlfYAW75AFFjaYI0smj 5wur2BH3IPz0H5s+bWYwTuSAyJb7wAi4v9isnutUM7bnJGMQ0F/YhjqMkKtbD5oI ffHn/iruRqXIUtORegSzQEbsD0Ct4ArlRY+yue0VUfkkwhtEYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIP4xmVRFmto+b+UjEyEWvMOkweRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODQ4Mzc2ZTAtZGRhYi0z YTQ5LWE4NDItNzg1MTgyYjliZTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKq+ejiBK30WEeFKGPhmgiKK00LXXKkpz8PYOORA7POvkqEM/9x1TRW r1z4kERkEEtNroVdR9B4wHJbBDiwjv3LaSDzF0DtDvcshYrvlEU3W8kOQHvTbtLh uyk8A6qa/RE4VQMXn0XNbt/kY8JHZRSiVciTJNNp0/iulE5rZqZkvd8mM1TQL060 AAJWDYrr5a7ehCLtLx2SyMybrKtPPGRK4zt+Hu+IXRuYOCD8omtLMUqTa0s0atGR mwuczJqKDcIHD/jMymMtTLGhlbuiqyBra332JQenlLvgb4V+zpvy563iEocOEqz3 6Cg1F1DoU7O8jd4LTOT5kl6bHN0xojg= -----END CERTIFICATE-----Generated at Mon Oct 20 04:33:02 2025 by rpki-client