$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/872d53e0-8eaf-3b1e-8930-5bf65609e87b.roa File: 872d53e0-8eaf-3b1e-8930-5bf65609e87b.roa (raw, json) Hash identifier: ylHlq+qYoQTiX0p/hJgfIxnvLkJccsYfy5IdqBPtQPg= Subject key identifier: 8F:8C:5F:AF:A3:F3:E4:98:D8:CE:1C:7B:04:1B:DA:E8:51:DB:F2:4B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B3C51B0BA5BC0C59C443AEEC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/872d53e0-8eaf-3b1e-8930-5bf65609e87b.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:b0:ba:5b:c0:c5:9c:44:3a:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=df52d2a3-29f1-4d96-bc32-01f73f785d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:db:26:78:cb:67:af:41:2c:b8:14:5d:f5:f7: eb:96:20:1f:42:7b:1c:22:ab:54:7a:ef:39:6f:73: 66:c1:a7:7f:69:70:70:d4:12:45:41:81:0f:e9:70: 89:46:2d:71:54:12:df:cf:3a:eb:67:cc:1c:30:12: 73:49:b0:8b:75:fd:9f:e4:4a:77:80:31:3e:49:6b: 95:7d:d1:4a:cd:d0:87:80:42:d5:02:35:01:cb:f8: e4:6a:53:d2:fa:f4:b7:77:32:5f:75:a3:3e:86:84: 3e:36:a8:0a:c6:98:39:0c:48:4a:e1:b8:ca:78:f4: 86:9e:ee:c4:89:97:4e:63:db:8b:d3:5d:d1:f5:7d: db:cf:1e:74:7e:8b:cf:07:f5:f2:b7:a9:93:14:06: 67:67:22:6a:14:85:86:33:a1:ed:56:d9:2c:7f:9d: 11:3d:95:28:84:48:37:26:46:69:e6:37:bd:65:b8: 13:78:5a:46:2b:27:e7:4e:7c:6d:00:60:73:2e:a2: 13:c5:a4:65:9f:72:33:ef:be:9e:af:20:dc:72:7d: 06:6e:68:cb:e9:7b:fb:76:42:17:2a:96:b6:73:fc: 47:a8:d1:e4:38:c9:ae:f8:9a:8f:74:ad:d9:4e:e7: 0c:ac:7a:49:e3:85:2d:3a:76:da:b1:eb:22:7d:7c: b2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:8C:5F:AF:A3:F3:E4:98:D8:CE:1C:7B:04:1B:DA:E8:51:DB:F2:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/872d53e0-8eaf-3b1e-8930-5bf65609e87b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:a7:c4:1a:62:04:43:fa:11:5d:2f:fb:57:ad:8c:f0:5d:90: fd:d7:ef:1a:01:fa:d1:8d:1d:b0:3b:07:31:b8:fd:40:44:97: 6d:37:d9:6b:43:b1:c1:37:b8:48:38:59:dd:ab:ec:07:a4:54: ce:e5:5d:c6:12:67:01:85:a2:42:db:a0:75:1b:71:fa:f4:3f: b2:d0:41:68:6f:2c:33:85:ac:92:8f:3d:5f:57:aa:74:92:4f: 9c:1a:4b:a6:8e:02:16:45:86:d9:d9:91:b0:cf:21:f6:cc:51: a3:d2:2a:62:3f:10:c9:34:c5:71:a2:87:5e:13:6a:9a:3f:22: 7c:09:5f:78:3a:06:9c:34:8b:7c:f2:24:35:d2:f9:57:28:65: 97:f4:99:77:c6:83:67:83:31:1a:22:a9:23:37:06:b6:7c:53: 7d:c9:68:68:e7:6f:ea:05:fe:5b:65:fb:5f:90:7b:29:d7:7c: 43:17:7a:38:f9:32:be:1d:7c:79:e1:c3:ed:d6:de:ff:c5:64: 1c:0b:e0:50:0f:92:78:63:24:c2:ea:60:08:b7:9f:c1:bd:36: eb:16:58:95:e2:75:1e:af:a8:89:be:1b:a4:48:6b:29:be:93: 9c:b3:c6:be:1f:76:bf:62:84:f5:d1:e1:12:f6:bc:7f:16:e9: 06:23:06:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8UbC6W8DFnEQ67sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk ZGY1MmQyYTMtMjlmMS00ZDk2LWJjMzItMDFmNzNmNzg1ZDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9smeMtnr0EsuBRd9ffrliAfQnscIqtUeu85 b3Nmwad/aXBw1BJFQYEP6XCJRi1xVBLfzzrrZ8wcMBJzSbCLdf2f5Ep3gDE+SWuV fdFKzdCHgELVAjUBy/jkalPS+vS3dzJfdaM+hoQ+NqgKxpg5DEhK4bjKePSGnu7E iZdOY9uL013R9X3bzx50fovPB/Xyt6mTFAZnZyJqFIWGM6HtVtksf50RPZUohEg3 JkZp5je9ZbgTeFpGKyfnTnxtAGBzLqITxaRln3Iz776eryDccn0GbmjL6Xv7dkIX Kpa2c/xHqNHkOMmu+JqPdK3ZTucMrHpJ44UtOnbasesifXyyvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+MX6+j8+SY2M4cewQb2uhR2/JLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODcyZDUzZTAtOGVhZi0z YjFlLTg5MzAtNWJmNjU2MDllODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFanxBpiBEP6EV0v+1etjPBdkP3X7xoB+tGNHbA7BzG4/UBEl2032WtD scE3uEg4Wd2r7AekVM7lXcYSZwGFokLboHUbcfr0P7LQQWhvLDOFrJKPPV9XqnSS T5waS6aOAhZFhtnZkbDPIfbMUaPSKmI/EMk0xXGih14Tapo/InwJX3g6Bpw0i3zy JDXS+VcoZZf0mXfGg2eDMRoiqSM3BrZ8U33JaGjnb+oF/ltl+1+QeynXfEMXejj5 Mr4dfHnhw+3W3v/FZBwL4FAPknhjJMLqYAi3n8G9NusWWJXidR6vqIm+G6RIaym+ k5yzxr4fdr9ihPXR4RL2vH8W6QYjBsI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:02:30 2025 by rpki-client