$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/edf37cc8-43ef-3f95-8478-5c871e14d557.roa File: edf37cc8-43ef-3f95-8478-5c871e14d557.roa (raw, json) Hash identifier: 8c13w7cqYeiO78fzyeqjTwpznTIOMgvW2+REHauy5dY= Subject key identifier: C9:CA:20:81:46:25:D1:F9:AF:CF:27:3F:B1:BA:4C:70:2B:8B:D3:32 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B84E78A84AFFAF09A72058500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/edf37cc8-43ef-3f95-8478-5c871e14d557.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 8069 IP address blocks: 20.33.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:8a:84:af:fa:f0:9a:72:05:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=4cb79bad-73ea-408a-9a51-e49899bf5e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5c:af:67:5e:93:b6:bc:3e:0d:f3:d5:5b:3a: 2e:51:95:b6:e4:cf:9c:57:26:5a:6a:ed:2f:56:6e: 24:75:48:dc:2d:dc:54:55:13:11:b5:ae:f9:87:8a: d6:2f:cc:31:f0:94:18:1d:d2:c5:3d:5a:d7:81:d3: 6f:b1:2a:fa:ac:91:14:da:ef:75:9f:db:9c:59:4d: cb:29:e8:e7:21:1e:b2:1b:1e:5d:e1:f1:d4:52:91: d5:41:af:a9:6f:a0:04:3c:2e:0a:c3:2c:e0:d4:48: a5:3e:66:0a:c9:40:a2:3f:1f:b0:5c:ce:ea:5d:8e: 73:13:42:41:f6:21:15:c9:a5:60:b9:f9:25:95:b2: a3:de:f5:54:80:3a:2b:83:32:9f:62:b7:60:71:b2: 5f:c4:c3:07:2e:8d:73:5e:92:1c:95:9c:a6:e9:6d: 18:50:1b:e9:d9:76:20:05:01:dc:ba:28:65:7b:1c: 5b:62:7b:ef:17:c8:7e:77:ee:00:2c:b1:d5:c9:43: d2:74:f1:f7:c7:d4:6d:e5:27:a2:67:90:b0:3c:2d: 7d:9b:cc:d7:1f:8f:d6:b0:21:79:a9:be:43:7a:6b: c2:3a:1c:63:c2:19:5d:d4:ea:fa:a4:ac:4c:9d:36: d0:4e:83:34:fc:2d:a5:1c:52:74:5e:25:14:98:32: 76:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:CA:20:81:46:25:D1:F9:AF:CF:27:3F:B1:BA:4C:70:2B:8B:D3:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/edf37cc8-43ef-3f95-8478-5c871e14d557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:60:e5:7a:c3:cd:70:6c:2f:ea:27:52:e7:3a:ac:d5:af:8e: 71:ab:71:07:27:0d:7f:fa:ae:ab:ff:a5:49:0c:ac:a5:6b:d2: 4a:9a:7d:8f:a4:b7:8e:ff:8b:ec:ac:ea:99:e0:d0:8b:e6:90: ac:0d:e2:52:12:d3:b2:aa:b7:b8:c4:42:3e:17:f6:e8:6a:8b: 24:ce:e0:58:f8:8a:f8:56:8b:95:55:97:14:24:0b:80:b2:e8: b5:9c:7f:aa:62:d6:be:a0:56:a4:90:29:f4:d3:34:8a:46:48: 4c:9b:96:0f:b3:10:5e:76:2f:7a:44:f7:3d:e6:ca:ff:b4:f4: 65:7b:e8:08:07:2c:a1:0b:32:a7:1a:f2:c9:cf:99:32:a7:45: 7b:6c:fe:6c:eb:48:93:3a:8d:be:9f:8d:96:7b:6b:ad:a2:f7: ff:4f:b0:c3:be:a1:f6:6d:bd:13:55:86:23:7d:55:60:75:e0: 2e:fd:d4:7d:53:e2:54:11:9d:12:69:d1:f2:fe:ff:1d:a4:7c: c0:af:b7:1c:b7:16:87:9f:b6:42:2c:34:81:ea:6a:42:32:84: 33:ff:5b:1c:d8:f2:b4:a5:92:54:ea:7a:32:e1:6d:91:9c:5e: 88:f8:7a:1d:f7:65:28:86:4b:96:73:d3:f7:9b:1e:25:09:2c: 39:65:b7:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54qEr/rwmnIFhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NGNiNzliYWQtNzNlYS00MDhhLTlhNTEtZTQ5ODk5YmY1ZTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VyvZ16Ttrw+DfPVWzouUZW25M+cVyZaau0v Vm4kdUjcLdxUVRMRta75h4rWL8wx8JQYHdLFPVrXgdNvsSr6rJEU2u91n9ucWU3L KejnIR6yGx5d4fHUUpHVQa+pb6AEPC4Kwyzg1EilPmYKyUCiPx+wXM7qXY5zE0JB 9iEVyaVgufkllbKj3vVUgDorgzKfYrdgcbJfxMMHLo1zXpIclZym6W0YUBvp2XYg BQHcuihlexxbYnvvF8h+d+4ALLHVyUPSdPH3x9Rt5SeiZ5CwPC19m8zXH4/WsCF5 qb5DemvCOhxjwhld1Or6pKxMnTbQToM0/C2lHFJ0XiUUmDJ2ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnKIIFGJdH5r88nP7G6THAri9MyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWRmMzdjYzgtNDNlZi0z Zjk1LTg0NzgtNWM4NzFlMTRkNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApg5XrDzXBsL+onUuc6rNWvjnGrcQcnDX/6rqv/pUkMrKVr0kqafY+k t47/i+ys6png0IvmkKwN4lIS07Kqt7jEQj4X9uhqiyTO4Fj4ivhWi5VVlxQkC4Cy 6LWcf6pi1r6gVqSQKfTTNIpGSEyblg+zEF52L3pE9z3myv+09GV76AgHLKELMqca 8snPmTKnRXts/mzrSJM6jb6fjZZ7a62i9/9PsMO+ofZtvRNVhiN9VWB14C791H1T 4lQRnRJp0fL+/x2kfMCvtxy3FoeftkIsNIHqakIyhDP/WxzY8rSlklTqejLhbZGc Xoj4eh33ZSiGS5Zz0/ebHiUJLDllt+M= -----END CERTIFICATE-----Generated at Mon Oct 20 02:04:11 2025 by rpki-client