$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d760a4d0-1f4e-3320-be56-0e534bf615df.roa File: d760a4d0-1f4e-3320-be56-0e534bf615df.roa (raw, json) Hash identifier: FCfwZAtHlM8OHeapO3oShgKS34bZM7gi3esoYAjMPCc= Subject key identifier: 25:BC:B6:8A:B0:A9:FD:53:13:AD:AE:2B:C2:45:21:12:92:E0:47:3B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B84E789FC15A9A59EE2C7EA00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d760a4d0-1f4e-3320-be56-0e534bf615df.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 8069 IP address blocks: 20.33.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:89:fc:15:a9:a5:9e:e2:c7:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=9ff50c5f-7f24-49b1-b7d8-8ba8c11b3980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4d:34:53:f4:72:c8:5b:a2:ff:08:af:49:d4: 3e:2b:cb:a1:69:1f:f3:f7:ce:f1:b9:00:7a:14:53: 26:cb:72:04:43:a0:6f:e6:4d:99:1a:d9:ed:15:99: 47:1a:48:72:f9:0e:6b:5c:17:09:f1:95:62:30:43: 28:9e:d4:3d:91:ec:84:1d:bf:d5:39:b6:b0:05:33: 28:6c:48:77:1e:ee:28:0f:d7:1f:28:2a:e9:50:dc: fb:f3:81:04:ec:84:78:32:1e:1e:a6:4f:2e:10:3f: ec:1b:11:91:5e:b9:1e:52:2b:f6:4e:cc:57:81:93: 6c:a2:c5:8f:e0:ad:c3:ce:82:3e:37:0a:6d:65:3c: b7:32:f4:28:10:dd:35:0a:76:f3:4e:13:a3:5a:66: ce:50:e6:d6:85:7b:19:56:78:49:60:81:6f:bb:32: a6:1e:f5:0c:18:97:53:f9:6b:e0:14:ae:02:06:b1: ce:36:fe:69:09:e8:80:b3:f4:f0:2a:35:53:5c:78: 87:31:80:4f:10:17:19:69:4a:05:62:57:4d:e3:e1: 16:bc:74:fd:be:05:9f:09:45:e6:7e:89:34:e7:5d: 74:6b:71:c9:b5:ca:6f:a9:78:bb:57:54:75:dc:11: ec:02:a4:8a:a5:a8:db:06:e9:52:5d:c6:de:74:ac: 1c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:BC:B6:8A:B0:A9:FD:53:13:AD:AE:2B:C2:45:21:12:92:E0:47:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d760a4d0-1f4e-3320-be56-0e534bf615df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:5e:11:28:38:79:d2:8d:02:41:03:58:c0:dc:0a:0f:2d:4c: f4:17:6e:71:96:3f:2f:37:c9:a8:99:30:87:9d:92:fc:6c:ee: 1d:d9:f0:9d:ad:80:f3:a2:95:ea:36:8a:81:ef:1c:bf:4c:06: 1c:85:29:cb:4b:69:a7:b8:2e:39:1c:a2:87:3d:5c:0e:b7:6f: 63:18:1e:53:9e:6e:20:6a:3b:43:8c:d9:35:ab:59:3f:08:ac: a0:e2:e1:0b:eb:7f:3b:5d:e9:c2:1b:1a:98:43:d2:e1:bf:62: 44:da:43:3e:10:19:d7:03:da:61:6a:94:d1:40:33:f4:18:04: c6:ee:01:3e:bf:52:ae:9d:ee:80:c6:54:14:2d:f5:92:fd:bc: 53:23:76:2f:3f:16:85:fe:3d:39:6b:21:41:bf:18:e1:ca:c9: c1:79:a7:56:26:01:b2:0c:21:fe:1d:38:2f:71:31:b8:16:72: d4:62:52:94:26:2b:25:a0:72:7b:cf:3d:c8:e8:7a:80:f4:6d: c4:31:5c:49:3c:7b:2b:fd:82:c1:b0:9b:3d:ca:24:f9:47:cf: 97:8c:b1:63:e2:42:08:e4:44:60:9e:e3:09:62:b9:69:24:e9: c8:20:01:74:e4:e9:4d:51:19:cc:ec:93:6a:33:ae:a9:49:09: 75:02:e3:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54n8FamlnuLH6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk OWZmNTBjNWYtN2YyNC00OWIxLWI3ZDgtOGJhOGMxMWIzOTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU00U/RyyFui/wivSdQ+K8uhaR/z987xuQB6 FFMmy3IEQ6Bv5k2ZGtntFZlHGkhy+Q5rXBcJ8ZViMEMontQ9keyEHb/VObawBTMo bEh3Hu4oD9cfKCrpUNz784EE7IR4Mh4epk8uED/sGxGRXrkeUiv2TsxXgZNsosWP 4K3DzoI+NwptZTy3MvQoEN01CnbzThOjWmbOUObWhXsZVnhJYIFvuzKmHvUMGJdT +WvgFK4CBrHONv5pCeiAs/TwKjVTXHiHMYBPEBcZaUoFYldN4+EWvHT9vgWfCUXm fok05110a3HJtcpvqXi7V1R13BHsAqSKpajbBulSXcbedKwcpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCW8toqwqf1TE62uK8JFIRKS4Ec7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDc2MGE0ZDAtMWY0ZS0z MzIwLWJlNTYtMGU1MzRiZjYxNWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5eESg4edKNAkEDWMDcCg8tTPQXbnGWPy83yaiZMIedkvxs7h3Z8J2t gPOileo2ioHvHL9MBhyFKctLaae4Ljkcooc9XA63b2MYHlOebiBqO0OM2TWrWT8I rKDi4Qvrfztd6cIbGphD0uG/YkTaQz4QGdcD2mFqlNFAM/QYBMbuAT6/Uq6d7oDG VBQt9ZL9vFMjdi8/FoX+PTlrIUG/GOHKycF5p1YmAbIMIf4dOC9xMbgWctRiUpQm KyWgcnvPPcjoeoD0bcQxXEk8eyv9gsGwmz3KJPlHz5eMsWPiQgjkRGCe4wliuWkk 6cggAXTk6U1RGczsk2ozrqlJCXUC468= -----END CERTIFICATE-----Generated at Mon Oct 20 01:59:21 2025 by rpki-client