$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cb95dcb5-036c-3bfa-828a-cd844f666ac2.roa File: cb95dcb5-036c-3bfa-828a-cd844f666ac2.roa (raw, json) Hash identifier: 5wZEUtuwdaglcKQVrXKXbL5ywVPfN+95KyhKG/iZQww= Subject key identifier: 09:2B:26:A9:D6:54:FB:61:96:8D:90:00:E1:84:A9:A4:05:37:20:3B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B2A2C40545625174AB1B4D200 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cb95dcb5-036c-3bfa-828a-cd844f666ac2.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 8069 IP address blocks: 20.33.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:40:54:56:25:17:4a:b1:b4:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=d65d1c0b-ba66-42ba-9275-e7549f6f00ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:52:f5:84:a8:77:65:10:8e:0d:16:c3:c6:60: 73:56:70:28:7a:3b:ad:5f:b8:17:b6:0d:ed:1f:37: 6f:9d:50:ed:64:fe:48:50:ff:3b:73:c6:6e:d5:35: 45:58:66:9a:fb:a8:6f:7b:5b:69:69:f5:10:aa:e3: 65:79:d1:89:13:0b:5e:5a:96:3e:4b:e8:2a:34:23: 0b:4e:44:26:ce:71:bd:bc:0f:20:cd:3c:94:85:dc: 6d:d1:6e:0e:d2:c1:3d:bc:66:81:d7:eb:ef:f0:81: 19:b7:cd:70:bb:6c:2e:09:b5:98:29:64:07:24:da: 32:74:b4:84:45:20:77:6f:de:98:a0:56:53:38:50: 2d:95:c6:0e:70:9a:3b:fc:97:a0:fb:10:81:4d:56: 12:6c:5d:78:69:6c:6d:3c:bf:c5:42:aa:10:63:99: 58:5a:4f:b5:e2:36:6f:c6:bf:81:51:d7:19:8e:0d: cd:7d:a1:7f:25:f4:3e:39:00:fc:3e:38:76:8e:c1: f9:49:cf:c6:01:e8:1e:37:8b:76:c2:2a:65:cb:b5: 05:6d:c7:a3:82:ff:54:ff:fd:8e:84:85:e6:3d:39: 94:df:1e:b7:3e:b2:32:1d:ca:28:c0:07:78:8d:ec: 19:f0:0c:3b:22:f3:9c:58:e7:2a:27:d2:95:e5:29: 38:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:2B:26:A9:D6:54:FB:61:96:8D:90:00:E1:84:A9:A4:05:37:20:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cb95dcb5-036c-3bfa-828a-cd844f666ac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:ef:c8:58:95:4d:8c:63:82:b9:86:cd:7e:f8:1b:97:a5:25: e4:e6:83:15:4a:31:27:2c:ec:cb:7d:83:4c:44:8f:32:ad:44: af:8c:57:1f:7a:68:e7:1b:56:a0:92:74:f6:e7:74:43:9e:a4: 58:ce:16:5d:57:b6:3c:96:b6:92:4f:64:28:1b:aa:21:dd:55: 28:c7:9b:38:f6:3c:42:08:9e:a4:8f:92:01:ce:79:f2:39:ab: 7a:41:e3:e5:a4:ba:27:e5:79:d7:d0:97:e8:9e:e0:5f:c4:43: c4:f5:8e:3d:6d:a6:12:8a:b5:3d:56:5f:91:ca:81:da:b0:d8: c6:3e:41:ed:c8:ca:ec:9b:8f:7f:1a:59:38:9b:bf:dd:e4:b5: 4f:37:6a:37:8c:51:ab:3f:82:02:11:c8:63:e4:79:38:ae:da: 25:64:25:b9:bc:ca:aa:7d:b6:8f:13:3c:fa:69:4d:18:ee:31: cd:8e:40:a2:a2:73:b6:74:66:a7:91:92:c1:44:58:d8:aa:0c: 6d:70:29:c5:41:f3:de:f3:ed:2b:74:da:97:99:38:16:18:5f: a4:be:97:f9:b6:bc:f5:b7:35:9a:3f:0c:95:18:c7:a8:74:88: e7:fa:c4:fb:5e:14:7d:ac:f0:9a:5c:77:0a:82:ec:5d:80:8a: d0:a1:21:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEBUViUXSrG00gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ZDY1ZDFjMGItYmE2Ni00MmJhLTkyNzUtZTc1NDlmNmYwMGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFL1hKh3ZRCODRbDxmBzVnAoejutX7gXtg3t HzdvnVDtZP5IUP87c8Zu1TVFWGaa+6hve1tpafUQquNledGJEwteWpY+S+gqNCML TkQmznG9vA8gzTyUhdxt0W4O0sE9vGaB1+vv8IEZt81wu2wuCbWYKWQHJNoydLSE RSB3b96YoFZTOFAtlcYOcJo7/Jeg+xCBTVYSbF14aWxtPL/FQqoQY5lYWk+14jZv xr+BUdcZjg3NfaF/JfQ+OQD8Pjh2jsH5Sc/GAegeN4t2wiply7UFbcejgv9U//2O hIXmPTmU3x63PrIyHcoowAd4jewZ8Aw7IvOcWOcqJ9KV5Sk44QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkrJqnWVPthlo2QAOGEqaQFNyA7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2I5NWRjYjUtMDM2Yy0z YmZhLTgyOGEtY2Q4NDRmNjY2YWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHvyFiVTYxjgrmGzX74G5elJeTmgxVKMScs7Mt9g0xEjzKtRK+MVx96 aOcbVqCSdPbndEOepFjOFl1XtjyWtpJPZCgbqiHdVSjHmzj2PEIInqSPkgHOefI5 q3pB4+WkuifledfQl+ie4F/EQ8T1jj1tphKKtT1WX5HKgdqw2MY+Qe3Iyuybj38a WTibv93ktU83ajeMUas/ggIRyGPkeTiu2iVkJbm8yqp9to8TPPppTRjuMc2OQKKi c7Z0ZqeRksFEWNiqDG1wKcVB897z7St02peZOBYYX6S+l/m2vPW3NZo/DJUYx6h0 iOf6xPteFH2s8JpcdwqC7F2AitChIS4= -----END CERTIFICATE-----Generated at Mon Oct 20 09:57:15 2025 by rpki-client