$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e794736c-e567-3e33-9613-3ca6fdffe5e0.roa File: e794736c-e567-3e33-9613-3ca6fdffe5e0.roa (raw, json) Hash identifier: TLZ12ae76JIAVIQPYALHdRF4wMyKtKgMn7ZNPpujtAk= Subject key identifier: 25:0C:D2:CB:59:42:3B:CB:4D:18:B7:FD:4C:E8:39:B6:C6:D6:ED:75 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B3C51B14278209DF6591EE800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e794736c-e567-3e33-9613-3ca6fdffe5e0.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:b1:42:78:20:9d:f6:59:1e:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=e1bc08d5-09f6-42e8-84c7-726592e3b761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:12:75:f8:ed:7a:05:fc:a5:2c:25:1a:b3:7d: 34:44:e3:97:ca:2d:a0:37:73:6f:66:cb:0f:1b:55: 3e:30:ed:3f:bd:88:e1:65:ac:e8:13:5c:2d:5e:e5: 6d:8d:90:e5:76:0e:1a:a0:a9:e2:46:ca:4d:73:4c: 7d:29:bd:08:e0:88:d5:3a:ee:ea:4b:a9:1c:d0:4f: a5:2b:af:11:10:cc:29:7a:8c:85:9c:29:d4:7b:bb: d9:54:9c:ce:2a:15:cd:46:a7:4b:a2:a2:94:e9:ac: 5e:ca:a8:4d:15:61:e4:d5:58:97:dd:48:86:7f:27: b3:b8:c7:fa:cd:38:1f:8e:5c:17:bd:75:e8:36:7c: 7d:83:b5:9e:1b:14:89:c9:b8:3e:20:bc:ac:13:ff: a4:f0:48:d2:5c:cf:f4:a7:21:53:7e:96:14:ea:48: cd:d2:6f:57:1f:88:18:e3:4b:7d:d7:58:a3:ea:d1: a3:fd:64:f9:6b:dc:1b:2c:1a:5b:52:a0:eb:48:64: 0e:c1:b5:f9:58:e7:fd:47:55:bb:2a:0d:8f:db:7e: 0f:97:f1:d7:e0:1c:c7:a2:79:de:2f:b2:55:20:f7: c8:ea:56:71:00:91:55:55:d9:59:11:5f:36:27:22: 4a:44:f1:63:b9:7c:9c:b0:d9:25:fd:4b:ba:41:57: 5b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0C:D2:CB:59:42:3B:CB:4D:18:B7:FD:4C:E8:39:B6:C6:D6:ED:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e794736c-e567-3e33-9613-3ca6fdffe5e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:ad:4b:9f:fd:eb:f6:2f:5e:6c:d8:b1:0e:c3:1d:4e:cc:f1: 13:ce:21:83:bc:ce:d5:8b:2f:04:cc:25:d0:e1:f5:fa:62:ad: 96:ab:91:c5:1d:1d:e0:c7:c5:56:7a:58:b7:ca:cf:97:fc:c5: 53:07:d2:cb:e8:f0:fc:0b:5d:c0:f6:03:83:20:a1:91:c3:87: 40:90:6d:f4:6a:79:60:64:9a:94:3d:88:09:c5:7a:bb:57:29: ca:de:bc:12:80:96:b7:f6:74:8d:e5:e5:55:7b:42:0d:ab:7b: 98:d5:97:0d:f2:9f:b5:0a:fb:16:c8:a7:86:0b:40:8b:8b:df: 6b:2a:79:05:40:16:5d:06:ca:eb:a0:1f:41:76:6d:17:45:9d: 7b:d5:c6:94:20:a8:68:af:08:c2:f0:9c:bf:09:94:ae:55:bc: 8d:09:0f:9a:ad:d5:24:a2:6f:a1:72:0d:7a:81:cd:e8:99:c2: 9c:8c:55:86:99:ad:9f:8a:ce:69:21:12:31:bc:58:e8:bf:54: f9:89:0e:8b:32:14:02:10:f5:52:e0:6f:50:eb:b3:60:3f:da: 07:5f:b7:f8:20:b3:6e:b2:a2:9f:d5:20:64:d4:1e:5a:a8:8d: e9:a2:16:92:df:60:a0:3f:c6:1c:1c:61:9c:ab:09:19:ce:0f: 27:e2:50:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8UbFCeCCd9lke6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk ZTFiYzA4ZDUtMDlmNi00MmU4LTg0YzctNzI2NTkyZTNiNzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxJ1+O16BfylLCUas300ROOXyi2gN3NvZssP G1U+MO0/vYjhZazoE1wtXuVtjZDldg4aoKniRspNc0x9Kb0I4IjVOu7qS6kc0E+l K68REMwpeoyFnCnUe7vZVJzOKhXNRqdLoqKU6axeyqhNFWHk1ViX3UiGfyezuMf6 zTgfjlwXvXXoNnx9g7WeGxSJybg+ILysE/+k8EjSXM/0pyFTfpYU6kjN0m9XH4gY 40t911ij6tGj/WT5a9wbLBpbUqDrSGQOwbX5WOf9R1W7Kg2P234Pl/HX4BzHonne L7JVIPfI6lZxAJFVVdlZEV82JyJKRPFjuXycsNkl/Uu6QVdb7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUM0stZQjvLTRi3/UzoObbG1u11MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTc5NDczNmMtZTU2Ny0z ZTMzLTk2MTMtM2NhNmZkZmZlNWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJytS5/96/YvXmzYsQ7DHU7M8RPOIYO8ztWLLwTMJdDh9fpirZarkcUd HeDHxVZ6WLfKz5f8xVMH0svo8PwLXcD2A4MgoZHDh0CQbfRqeWBkmpQ9iAnFertX KcrevBKAlrf2dI3l5VV7Qg2re5jVlw3yn7UK+xbIp4YLQIuL32sqeQVAFl0Gyuug H0F2bRdFnXvVxpQgqGivCMLwnL8JlK5VvI0JD5qt1SSib6FyDXqBzeiZwpyMVYaZ rZ+KzmkhEjG8WOi/VPmJDosyFAIQ9VLgb1Drs2A/2gdft/ggs26yop/VIGTUHlqo jemiFpLfYKA/xhwcYZyrCRnODyfiUDE= -----END CERTIFICATE-----Generated at Mon Oct 20 09:57:16 2025 by rpki-client