$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cf868108-55e4-390c-8997-0552696dcffd.roa File: cf868108-55e4-390c-8997-0552696dcffd.roa (raw, json) Hash identifier: 0EwOTF2Qe6iEkhFaCteiCymC7a5tvY9AEr8g05c5N4g= Subject key identifier: B7:9C:F3:BF:5E:8A:B2:D4:A7:06:00:AA:E1:0A:17:E1:37:82:05:DE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B0CDC229EA387C4163CB00A80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cf868108-55e4-390c-8997-0552696dcffd.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 8069 IP address blocks: 20.33.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:22:9e:a3:87:c4:16:3c:b0:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=1733cda1-e8e4-41a0-b5f2-ffa5aab2a618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bb:49:98:d0:97:e2:20:b4:f9:9d:8b:3b:46: 3f:4e:44:3e:da:e9:45:11:4a:46:f8:96:5b:c9:5e: 58:d8:65:3a:08:fa:9a:26:8f:7f:e7:c0:6f:9f:98: 5b:e3:12:03:44:ab:58:fb:8b:19:37:fa:96:7c:5e: 85:bf:60:4f:77:f7:8e:78:93:41:f0:5e:12:6b:31: 9c:44:a2:b8:f2:d1:34:b6:d1:00:56:23:c1:6d:23: 0f:b7:9e:ad:44:66:c7:cd:ad:32:be:3d:7b:4d:18: cb:4b:c5:e0:53:40:64:dc:0a:04:f3:88:73:dc:e6: 1f:63:ee:5f:e1:a8:cb:49:71:55:de:a6:ab:d4:26: 17:12:3f:81:36:ee:a8:d2:30:6b:9b:c9:1b:95:45: a4:d7:c9:0c:37:5c:c1:4d:25:ab:bb:7d:ef:e1:b0: 54:bd:8f:ca:bd:87:2c:7c:a0:55:a3:a7:a9:02:99: 0f:50:f5:a1:4f:de:82:ab:b5:50:f2:3d:c9:08:9c: 70:ae:0b:59:0d:7e:a0:3e:ad:59:a5:a3:ee:2e:f2: 22:2a:ba:d6:d6:ca:cc:4e:bd:44:9b:12:19:6f:87: cd:bb:ef:bd:52:28:de:b6:ca:1d:03:e3:5d:5c:ad: dc:42:d5:45:01:b5:a8:0b:8b:cc:2e:2a:1b:ef:21: b9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:9C:F3:BF:5E:8A:B2:D4:A7:06:00:AA:E1:0A:17:E1:37:82:05:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cf868108-55e4-390c-8997-0552696dcffd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.182.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:ad:ab:1a:3b:d4:cd:65:2b:dc:e1:80:cc:75:b4:f1:c3:24: e9:dd:49:e7:ff:17:3e:23:42:d4:33:b1:c0:a6:7b:e6:1a:ad: 63:c9:71:bd:a5:e9:6a:31:27:d4:12:4b:0a:ea:84:19:1d:4b: e9:29:95:7d:19:5c:1f:7e:93:a1:b3:a2:3d:61:24:4f:65:1d: 37:d5:b1:16:da:31:bf:3a:f4:79:1d:54:2f:b6:b6:cd:54:c6: 66:ab:e0:90:9c:44:3c:ea:ad:18:90:7c:4b:45:3a:c4:69:6d: 47:a8:af:a5:5d:90:e9:6b:c6:64:ce:bd:2f:d8:01:b6:c8:9e: 3b:09:39:fb:bf:bf:1a:7b:9d:29:dc:e0:96:52:51:ed:6c:fc: 4e:76:c2:b7:2f:61:52:9f:c7:8e:c0:65:76:22:09:8c:73:d3: f7:75:0b:9f:2c:3b:e9:11:1d:fd:0c:d8:11:f1:53:a4:97:c6: de:69:90:ea:d6:5c:c7:1e:1a:a3:49:34:b4:f1:ef:04:9a:13: 5d:3e:13:41:b3:36:e3:16:b8:b4:a1:06:5c:b8:03:59:04:77: 6b:3a:a9:92:c2:7c:db:b9:62:ba:de:a0:7c:f6:f1:5e:23:5b: 6d:1a:88:aa:09:9f:bb:92:b2:86:d4:7f:58:67:53:73:ad:cb: 36:f6:fb:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3CKeo4fEFjywCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk MTczM2NkYTEtZThlNC00MWEwLWI1ZjItZmZhNWFhYjJhNjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbtJmNCX4iC0+Z2LO0Y/TkQ+2ulFEUpG+JZb yV5Y2GU6CPqaJo9/58Bvn5hb4xIDRKtY+4sZN/qWfF6Fv2BPd/eOeJNB8F4SazGc RKK48tE0ttEAViPBbSMPt56tRGbHza0yvj17TRjLS8XgU0Bk3AoE84hz3OYfY+5f 4ajLSXFV3qar1CYXEj+BNu6o0jBrm8kblUWk18kMN1zBTSWru33v4bBUvY/KvYcs fKBVo6epApkPUPWhT96Cq7VQ8j3JCJxwrgtZDX6gPq1ZpaPuLvIiKrrW1srMTr1E mxIZb4fNu++9UijetsodA+NdXK3cQtVFAbWoC4vMLiob7yG5bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLec879eirLUpwYAquEKF+E3ggXeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2Y4NjgxMDgtNTVlNC0z OTBjLTg5OTctMDU1MjY5NmRjZmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOtqxo71M1lK9zhgMx1tPHDJOndSef/Fz4jQtQzscCme+YarWPJcb2l 6WoxJ9QSSwrqhBkdS+kplX0ZXB9+k6Gzoj1hJE9lHTfVsRbaMb869HkdVC+2ts1U xmar4JCcRDzqrRiQfEtFOsRpbUeor6VdkOlrxmTOvS/YAbbInjsJOfu/vxp7nSnc 4JZSUe1s/E52wrcvYVKfx47AZXYiCYxz0/d1C58sO+kRHf0M2BHxU6SXxt5pkOrW XMceGqNJNLTx7wSaE10+E0GzNuMWuLShBly4A1kEd2s6qZLCfNu5YrreoHz28V4j W20aiKoJn7uSsobUf1hnU3Otyzb2+4Y= -----END CERTIFICATE-----Generated at Mon Oct 20 02:02:00 2025 by rpki-client