$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b29c80bc-009a-3da4-ae58-96b8bae82cc5.roa File: b29c80bc-009a-3da4-ae58-96b8bae82cc5.roa (raw, json) Hash identifier: Xgt9TfviUF1ioP4W3NfjIXCt8xRur9O4TyStDC+Y7i8= Subject key identifier: 49:D8:56:2F:C1:A3:02:A8:58:85:88:CC:2D:94:1C:13:7C:9F:60:3E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B3C51B0FB6EA6BC4BCBC5C400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b29c80bc-009a-3da4-ae58-96b8bae82cc5.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:b0:fb:6e:a6:bc:4b:cb:c5:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=453b6f60-f633-4ee5-99b3-b8246a065026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:77:05:4e:b7:bb:5d:99:14:b5:20:7f:b7:5a: f3:75:d5:45:27:fd:5f:42:25:df:27:3c:b5:89:a1: 53:b9:10:f6:a5:8d:51:c3:c8:30:a2:2f:ad:6f:e4: ab:f7:00:36:70:9b:ca:47:96:9b:66:da:e9:9e:df: ab:61:69:66:11:b7:d3:10:cc:8d:9f:00:b9:dc:35: e0:a8:b5:fa:53:5b:9f:61:d4:b2:1e:ac:e3:aa:fd: 6d:a2:9f:8c:cf:e8:16:f7:b7:96:d2:06:49:b4:33: 0e:75:83:d1:2c:70:8c:d0:0a:3a:4d:cb:86:d3:f5: 22:6c:e9:5c:cb:7f:ee:b5:62:4d:b7:5c:8a:07:0e: 8a:06:64:64:36:21:a4:4a:29:1f:81:a0:cc:eb:82: c8:f8:09:71:70:51:4d:bf:0c:02:41:c9:1f:e4:91: ef:ae:8f:97:ff:c6:ea:09:5a:7d:6b:8d:47:e2:22: bd:f3:70:92:b8:e1:8c:cc:79:71:ac:f3:35:21:88: 0a:28:8a:54:44:44:9f:9a:c5:97:52:51:89:19:3d: 05:d3:95:42:92:5b:21:41:e2:7d:25:67:b6:81:78: e1:38:71:5d:c5:f7:5c:ff:55:4c:39:7e:5e:90:16: ab:fb:33:73:8f:76:26:a9:23:e0:68:2b:55:13:9a: ac:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D8:56:2F:C1:A3:02:A8:58:85:88:CC:2D:94:1C:13:7C:9F:60:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b29c80bc-009a-3da4-ae58-96b8bae82cc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:f5:59:3f:5b:fd:17:0f:41:90:f5:40:66:d5:69:df:9f:69: 44:28:b6:12:7e:76:9e:e5:a5:a3:75:22:cd:60:32:27:bc:f2: f6:f2:57:75:c6:ee:41:bd:cb:42:7f:ac:7f:48:7a:4e:07:a0: 79:25:dd:2a:33:71:b1:2a:c7:bd:fc:28:6e:11:f6:95:fa:21: 09:ba:0c:b6:bd:b5:ce:b4:70:45:f1:73:c6:a6:f3:89:cc:0b: bd:cb:14:a2:77:a3:08:16:c8:14:f6:a1:a5:88:51:32:72:0e: aa:14:04:c9:b1:42:a0:5d:1f:21:fa:d2:69:38:91:fe:e5:11: 0b:96:9a:52:f2:6a:c4:a9:37:7d:6f:41:1d:ff:dc:28:d7:04: 56:c1:b4:0e:35:74:01:97:87:9b:1b:a2:2f:04:ba:4c:17:bc: a7:f0:26:8a:12:d0:aa:64:13:5a:c3:0a:9e:6a:31:e3:07:0e: d8:6c:ec:65:6f:26:5b:c9:03:e2:26:06:46:2a:18:13:71:58: c1:7a:20:3b:f8:07:cc:5e:3f:2a:db:6c:d9:1d:a8:88:72:5c: 56:6d:bf:8a:12:80:ac:d4:4d:2c:e0:90:ab:23:e8:ac:0b:a3: 9f:45:06:68:9b:3f:b5:f8:07:73:b1:09:d1:ee:7a:fa:3d:f6: c5:ec:a2:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8UbD7bqa8S8vFxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk NDUzYjZmNjAtZjYzMy00ZWU1LTk5YjMtYjgyNDZhMDY1MDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgncFTre7XZkUtSB/t1rzddVFJ/1fQiXfJzy1 iaFTuRD2pY1Rw8gwoi+tb+Sr9wA2cJvKR5abZtrpnt+rYWlmEbfTEMyNnwC53DXg qLX6U1ufYdSyHqzjqv1top+Mz+gW97eW0gZJtDMOdYPRLHCM0Ao6TcuG0/UibOlc y3/utWJNt1yKBw6KBmRkNiGkSikfgaDM64LI+AlxcFFNvwwCQckf5JHvro+X/8bq CVp9a41H4iK983CSuOGMzHlxrPM1IYgKKIpURESfmsWXUlGJGT0F05VCklshQeJ9 JWe2gXjhOHFdxfdc/1VMOX5ekBar+zNzj3YmqSPgaCtVE5qsmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnYVi/BowKoWIWIzC2UHBN8n2A+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjI5YzgwYmMtMDA5YS0z ZGE0LWFlNTgtOTZiOGJhZTgyY2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEf1WT9b/RcPQZD1QGbVad+faUQothJ+dp7lpaN1Is1gMie88vbyV3XG 7kG9y0J/rH9Iek4HoHkl3SozcbEqx738KG4R9pX6IQm6DLa9tc60cEXxc8am84nM C73LFKJ3owgWyBT2oaWIUTJyDqoUBMmxQqBdHyH60mk4kf7lEQuWmlLyasSpN31v QR3/3CjXBFbBtA41dAGXh5sboi8EukwXvKfwJooS0KpkE1rDCp5qMeMHDths7GVv JlvJA+ImBkYqGBNxWMF6IDv4B8xePyrbbNkdqIhyXFZtv4oSgKzUTSzgkKsj6KwL o59FBmibP7X4B3OxCdHuevo99sXsogA= -----END CERTIFICATE-----Generated at Mon Oct 20 04:36:25 2025 by rpki-client