$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c3371c2b-7822-371d-9068-6b89615d8f28.roa File: c3371c2b-7822-371d-9068-6b89615d8f28.roa (raw, json) Hash identifier: q5C1l8LwmtitvhHF9RO/Hv0ZBFhFs32T+BoS08Upg/k= Subject key identifier: DD:56:A8:92:CE:D8:7F:8C:29:BE:67:C1:92:8F:66:26:73:AD:C6:4A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B2A2C410F57123D5D5E88EDC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c3371c2b-7822-371d-9068-6b89615d8f28.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 8069 IP address blocks: 20.33.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:41:0f:57:12:3d:5d:5e:88:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=e5f92d77-fd89-4144-9d4f-c4c84583a59a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:db:16:b1:0b:8b:88:23:82:78:89:15:35:f3: 9c:3d:97:a2:61:ce:56:12:ec:4b:3d:5a:42:c3:11: b2:6c:16:96:c9:e0:5c:ee:0e:c4:b2:d0:d6:40:2b: bf:c9:5c:1e:5b:a9:16:8d:b9:0c:7f:42:48:32:a1: ba:0e:15:19:ff:2f:f7:ad:07:87:14:63:e5:f4:26: 2e:a3:2e:3c:cd:9b:2f:a1:c0:de:ca:3c:03:45:48: 78:99:75:2c:b7:52:e1:83:b7:3e:b2:cd:b4:a4:c8: 05:ce:73:cb:0f:63:9e:f3:e2:be:57:39:72:cb:b9: 6e:6d:e9:30:af:a7:36:a2:bf:fd:02:8a:02:fa:9f: 56:a3:f6:3e:eb:b3:97:32:c2:65:eb:45:6e:6f:65: 48:4e:94:5d:44:07:61:60:0b:35:45:be:3e:8c:6f: 26:9b:04:dd:f7:0b:51:79:2f:17:7d:29:e7:5b:79: fe:46:24:c1:e9:7d:58:ac:e5:3e:63:ac:34:4a:c6: 08:71:e1:a6:b8:85:5c:ad:fa:2f:da:05:c5:41:ff: f8:8c:42:8d:df:74:7c:a0:a9:08:b3:d9:de:fe:b7: 36:92:2e:7d:a5:75:9a:d8:1c:dd:0c:25:64:89:d7: 7d:9d:1d:15:cc:60:73:c3:53:2f:99:b5:b3:e6:c5: 29:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:56:A8:92:CE:D8:7F:8C:29:BE:67:C1:92:8F:66:26:73:AD:C6:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c3371c2b-7822-371d-9068-6b89615d8f28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:b3:bd:e7:90:7d:d1:34:0d:a3:d7:06:c7:72:56:f0:e5:fe: c6:49:5b:a0:fe:ac:ae:a9:01:be:11:05:f8:1b:26:b8:f0:08: ec:d3:94:32:69:1a:79:4a:cb:b1:2d:1a:f2:e8:96:9e:c0:3a: ee:11:82:b7:b1:73:b2:48:b3:e0:b9:d1:4b:ec:06:06:64:f8: 99:68:29:52:3a:4c:99:27:f1:9a:36:4d:2f:5b:05:5c:6d:37: 77:5c:b4:a5:8f:c0:6d:90:ec:6c:5f:b8:3b:2a:f0:2d:fe:a5: ff:b5:4e:8a:db:20:f5:1a:ae:5b:d2:62:d8:40:15:8b:cb:1a: 56:49:c6:e7:cd:8a:aa:35:7b:81:13:98:6d:16:01:fc:dc:00: 27:d1:aa:f9:ad:64:13:d1:46:a9:db:06:27:22:1d:cd:4c:42: 5b:f8:cb:f3:77:ed:48:f0:4c:85:33:96:92:3c:c8:cb:bf:15: dd:0c:e2:18:14:67:45:24:d7:78:0d:df:a7:30:f7:77:57:ff: 35:13:eb:57:e8:43:f2:5c:f1:99:02:96:02:fb:1f:ac:82:7a: 09:58:a3:6a:db:f8:b2:69:e8:f6:e3:5a:7c:86:a5:b3:84:0b: 18:28:92:e4:51:94:76:e1:b3:88:5b:a1:4a:09:f6:1e:9a:1e: 9f:3b:d9:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEEPVxI9XV6I7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ZTVmOTJkNzctZmQ4OS00MTQ0LTlkNGYtYzRjODQ1ODNhNTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNsWsQuLiCOCeIkVNfOcPZeiYc5WEuxLPVpC wxGybBaWyeBc7g7EstDWQCu/yVweW6kWjbkMf0JIMqG6DhUZ/y/3rQeHFGPl9CYu oy48zZsvocDeyjwDRUh4mXUst1Lhg7c+ss20pMgFznPLD2Oe8+K+Vzlyy7lubekw r6c2or/9AooC+p9Wo/Y+67OXMsJl60Vub2VITpRdRAdhYAs1Rb4+jG8mmwTd9wtR eS8XfSnnW3n+RiTB6X1YrOU+Y6w0SsYIceGmuIVcrfov2gXFQf/4jEKN33R8oKkI s9ne/rc2ki59pXWa2BzdDCVkidd9nR0VzGBzw1MvmbWz5sUp3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1WqJLO2H+MKb5nwZKPZiZzrcZKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzMzNzFjMmItNzgyMi0z NzFkLTkwNjgtNmI4OTYxNWQ4ZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+zveeQfdE0DaPXBsdyVvDl/sZJW6D+rK6pAb4RBfgbJrjwCOzTlDJp GnlKy7EtGvLolp7AOu4Rgrexc7JIs+C50UvsBgZk+JloKVI6TJkn8Zo2TS9bBVxt N3dctKWPwG2Q7GxfuDsq8C3+pf+1TorbIPUarlvSYthAFYvLGlZJxufNiqo1e4ET mG0WAfzcACfRqvmtZBPRRqnbBiciHc1MQlv4y/N37UjwTIUzlpI8yMu/Fd0M4hgU Z0Uk13gN36cw93dX/zUT61foQ/Jc8ZkClgL7H6yCeglYo2rb+LJp6PbjWnyGpbOE CxgokuRRlHbhs4hboUoJ9h6aHp872aY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:09:55 2025 by rpki-client