$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c6e160e3-34d1-3b1f-bb5b-b2f34cecf1c0.roa File: c6e160e3-34d1-3b1f-bb5b-b2f34cecf1c0.roa (raw, json) Hash identifier: bQOTIAKZzINKMU2Qk53orFt5waKRadwTdbEqdqXNqTo= Subject key identifier: 27:18:81:EF:99:55:DE:1E:0F:7C:0A:FA:A4:74:2B:AB:AB:94:48:E3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B0746C8A15033D93231A5DD80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c6e160e3-34d1-3b1f-bb5b-b2f34cecf1c0.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.33.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:c8:a1:50:33:d9:32:31:a5:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=852701b1-2a61-4ec9-9882-5c4c4ccbb3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:61:3d:51:bc:12:31:c3:ca:b3:b3:f6:07:89: 67:e7:5a:4e:14:36:31:78:03:f1:35:16:d2:74:ce: da:59:39:d2:1f:52:5f:0f:5b:a5:8e:8e:c6:c2:c2: 34:52:22:f3:38:4b:5e:6a:a0:aa:f4:4e:d9:44:09: 5f:ec:14:07:5e:2a:ab:66:06:a1:6c:d2:ad:26:8e: c2:c5:ed:68:1e:16:9a:64:35:db:5e:00:b0:3c:8b: 37:38:67:c0:d5:67:94:94:65:17:55:0f:06:84:1b: ab:3e:90:b8:b1:0a:6e:19:00:3c:8f:b2:94:ac:36: 68:09:22:14:70:ca:8c:95:be:af:ee:f8:4d:7a:d8: 88:70:d0:d2:fc:cd:ae:a1:8b:34:e7:cf:bb:0b:ef: d7:b0:10:b6:ba:19:fa:58:59:15:14:9d:35:a5:e3: bf:03:47:87:1d:5e:c1:23:17:49:57:96:bd:24:d9: 6b:26:4e:5e:32:76:f2:8a:f2:26:84:20:73:f7:63: cb:60:46:c3:c9:6a:6d:39:70:fb:15:8c:ae:c0:b1: 27:c5:28:78:28:a3:e9:63:fe:29:41:96:c8:60:2b: ca:6a:56:cd:fc:36:1b:66:de:c8:07:65:cc:5c:fb: 59:21:fc:36:b1:06:bc:40:6b:e4:7b:f5:1a:2a:72: 44:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:18:81:EF:99:55:DE:1E:0F:7C:0A:FA:A4:74:2B:AB:AB:94:48:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c6e160e3-34d1-3b1f-bb5b-b2f34cecf1c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:20:ce:b5:4d:4d:70:36:92:f8:53:2f:61:90:c1:11:7e:4e: e6:21:fc:13:8c:c0:65:12:39:89:d8:85:0c:d1:21:10:53:54: cf:1c:4d:85:73:26:b6:93:1b:42:90:72:6a:77:25:ab:5c:53: 8c:b9:2f:44:ab:2a:ad:e7:79:05:e7:ac:da:29:02:cf:4b:d1: 24:f0:5f:13:49:41:ba:5c:fd:63:54:7a:b3:61:6d:2a:c4:dd: 66:ba:1d:6e:02:59:34:c0:84:01:72:4f:6c:4b:60:fd:76:bc: 18:1e:47:31:ad:18:58:9e:77:8d:f4:cd:fd:fc:86:95:86:02: ce:28:a4:88:3d:98:53:d1:b5:58:2d:0e:c2:7a:d4:af:77:31: 73:ce:54:1d:f5:dd:2a:1c:a1:5c:3b:2e:2e:b8:ca:72:03:51: 54:8a:dc:3a:a5:96:3d:c5:0b:90:93:2f:82:6f:d4:8c:67:80: 18:ba:f8:d5:5d:19:22:69:89:96:c9:69:54:21:50:2d:39:41: e3:6a:13:2d:8e:49:2f:87:cf:21:17:a2:77:b8:f1:ef:54:95: 90:ea:6e:96:67:04:2b:36:47:de:93:fa:4f:de:91:6f:8d:5d: 99:6c:d3:0c:e6:91:bf:d4:2c:26:72:70:e6:ef:d4:3c:6c:85: fe:ed:e9:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRsihUDPZMjGl3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk ODUyNzAxYjEtMmE2MS00ZWM5LTk4ODItNWM0YzRjY2JiM2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWE9UbwSMcPKs7P2B4ln51pOFDYxeAPxNRbS dM7aWTnSH1JfD1uljo7GwsI0UiLzOEteaqCq9E7ZRAlf7BQHXiqrZgahbNKtJo7C xe1oHhaaZDXbXgCwPIs3OGfA1WeUlGUXVQ8GhBurPpC4sQpuGQA8j7KUrDZoCSIU cMqMlb6v7vhNetiIcNDS/M2uoYs058+7C+/XsBC2uhn6WFkVFJ01peO/A0eHHV7B IxdJV5a9JNlrJk5eMnbyivImhCBz92PLYEbDyWptOXD7FYyuwLEnxSh4KKPpY/4p QZbIYCvKalbN/DYbZt7IB2XMXPtZIfw2sQa8QGvke/UaKnJEWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcYge+ZVd4eD3wK+qR0K6urlEjjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzZlMTYwZTMtMzRkMS0z YjFmLWJiNWItYjJmMzRjZWNmMWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkgzrVNTXA2kvhTL2GQwRF+TuYh/BOMwGUSOYnYhQzRIRBTVM8cTYVz JraTG0KQcmp3JatcU4y5L0SrKq3neQXnrNopAs9L0STwXxNJQbpc/WNUerNhbSrE 3Wa6HW4CWTTAhAFyT2xLYP12vBgeRzGtGFied430zf38hpWGAs4opIg9mFPRtVgt DsJ61K93MXPOVB313SocoVw7Li64ynIDUVSK3Dqllj3FC5CTL4Jv1IxngBi6+NVd GSJpiZbJaVQhUC05QeNqEy2OSS+HzyEXone48e9UlZDqbpZnBCs2R96T+k/ekW+N XZls0wzmkb/ULCZycObv1Dxshf7t6QY= -----END CERTIFICATE-----Generated at Mon Oct 20 09:52:02 2025 by rpki-client