$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbf8d407-3c97-34a9-bd7e-e142d9f47946.roa File: dbf8d407-3c97-34a9-bd7e-e142d9f47946.roa (raw, json) Hash identifier: zIi7aSfgYvflqhI2bAnmXoKUUhC3uwQl2MDSrWEWG0c= Subject key identifier: 88:60:5D:74:61:01:7C:A9:92:9D:34:99:F4:6A:0E:BD:0F:87:DB:5E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B1C36D40B99D57142EB0E1460 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbf8d407-3c97-34a9-bd7e-e142d9f47946.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.33.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:d4:0b:99:d5:71:42:eb:0e:14:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=a48139f0-e56f-43f4-9f26-b0ed1dd4d6ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:26:24:f3:ad:eb:26:aa:a0:69:62:2b:79:c1: 02:8c:68:d5:69:b4:b5:69:f7:78:c4:ca:a0:12:9f: 9e:7d:90:d0:7c:36:4f:d3:37:2e:13:59:c2:f3:38: f9:d5:5e:df:15:e3:54:4c:32:bf:0d:34:02:eb:2e: 2f:f9:ef:a8:05:2e:16:fb:9d:d4:fc:95:56:72:de: 43:9a:93:d6:a3:22:2b:20:a6:8d:0e:d4:45:4b:62: 92:d9:ac:ad:8f:22:9e:ce:ff:d7:49:ae:5d:3c:b3: 10:99:44:de:06:08:74:4a:d0:0b:97:53:1f:4f:d2: b6:b3:ff:66:34:3d:c9:fc:48:ab:ca:cd:8a:44:04: 54:a4:67:51:6f:58:ee:bd:32:22:c5:96:1c:ca:52: af:89:e8:8c:2f:d6:2b:53:7f:b6:f3:6c:de:d4:20: 8d:b1:44:2d:70:3d:97:41:b7:83:d3:2f:71:fe:06: c6:3a:c1:c9:74:ee:d1:32:bc:d4:56:d0:96:71:43: e1:6f:83:d5:20:d3:ca:20:d0:8a:9b:4b:b8:1c:92: 99:a7:6a:76:f9:71:ad:34:93:03:f1:ac:bc:82:d6: 6f:b3:19:39:07:5a:e0:ec:27:55:b0:eb:a8:2c:7c: ef:27:dc:ec:cb:63:53:ed:4a:63:4e:79:5d:a6:d2: 73:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:60:5D:74:61:01:7C:A9:92:9D:34:99:F4:6A:0E:BD:0F:87:DB:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbf8d407-3c97-34a9-bd7e-e142d9f47946.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:16:4b:f2:03:46:f0:e2:16:bd:ab:9f:ff:2d:a7:a7:c8:a4: 70:75:0e:ae:86:2a:29:8b:41:0f:3f:ea:65:66:6d:dd:4d:01: fc:64:0e:36:2e:c5:15:a1:6b:14:59:57:c3:82:ee:e3:a4:06: ce:d1:90:2d:ea:a1:73:9b:1e:17:42:12:47:ba:c3:a0:aa:36: 9e:49:46:0c:2b:c8:81:6e:8f:df:2b:42:f3:db:40:8c:5b:5f: 99:39:bf:05:87:3e:d3:48:14:13:a8:90:f8:b4:ab:ae:f0:99: 24:29:8b:f5:49:67:55:09:4c:70:fd:c5:ab:ba:e3:95:ef:52: 78:7e:3d:77:1d:f4:3a:5f:52:51:b6:d9:59:84:b8:ca:b1:7c: a5:da:1f:b7:4d:d7:03:8e:c5:86:0a:64:0e:4a:bb:89:ad:4f: fe:ee:0a:4b:0c:54:d6:88:8d:5a:2f:c2:c9:2e:a1:7e:8b:e5: 4e:db:4a:52:79:f3:52:2a:86:71:0c:5e:1e:c0:25:d4:48:9f: 58:3f:5c:95:78:53:25:9e:b3:a0:81:97:38:7d:52:95:1b:4d: fe:e1:c6:7e:a9:d7:b5:bd:7c:84:ef:c4:a9:04:6e:a6:64:2a: 90:6b:bc:cb:14:1c:a3:ab:19:b2:df:d2:46:8e:fa:88:52:d8: d9:76:1d:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNtQLmdVxQusOFGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YTQ4MTM5ZjAtZTU2Zi00M2Y0LTlmMjYtYjBlZDFkZDRkNmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iYk863rJqqgaWIrecECjGjVabS1afd4xMqg Ep+efZDQfDZP0zcuE1nC8zj51V7fFeNUTDK/DTQC6y4v+e+oBS4W+53U/JVWct5D mpPWoyIrIKaNDtRFS2KS2aytjyKezv/XSa5dPLMQmUTeBgh0StALl1MfT9K2s/9m ND3J/Eirys2KRARUpGdRb1juvTIixZYcylKvieiML9YrU3+282ze1CCNsUQtcD2X QbeD0y9x/gbGOsHJdO7RMrzUVtCWcUPhb4PVINPKINCKm0u4HJKZp2p2+XGtNJMD 8ay8gtZvsxk5B1rg7CdVsOuoLHzvJ9zsy2NT7UpjTnldptJzLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhgXXRhAXypkp00mfRqDr0Ph9teMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGJmOGQ0MDctM2M5Ny0z NGE5LWJkN2UtZTE0MmQ5ZjQ3OTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIWS/IDRvDiFr2rn/8tp6fIpHB1Dq6GKimLQQ8/6mVmbd1NAfxkDjYu xRWhaxRZV8OC7uOkBs7RkC3qoXObHhdCEke6w6CqNp5JRgwryIFuj98rQvPbQIxb X5k5vwWHPtNIFBOokPi0q67wmSQpi/VJZ1UJTHD9xau645XvUnh+PXcd9DpfUlG2 2VmEuMqxfKXaH7dN1wOOxYYKZA5Ku4mtT/7uCksMVNaIjVovwskuoX6L5U7bSlJ5 81IqhnEMXh7AJdRIn1g/XJV4UyWes6CBlzh9UpUbTf7hxn6p17W9fITvxKkEbqZk KpBrvMsUHKOrGbLf0kaO+ohS2Nl2Hdo= -----END CERTIFICATE-----Generated at Mon Oct 20 04:31:06 2025 by rpki-client