$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/05083c45-27cd-3b2c-8e1d-f00b1dd17954.roa File: 05083c45-27cd-3b2c-8e1d-f00b1dd17954.roa (raw, json) Hash identifier: 0YPzUlYNoA298zHsMBl2u0nlT52oTr+ET+TakS9F4gM= Subject key identifier: 2B:61:51:5F:56:46:EA:06:46:95:57:CE:9A:3B:30:95:1D:00:6C:86 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B2A2C40440DC10D3390ADC500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/05083c45-27cd-3b2c-8e1d-f00b1dd17954.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 8069 IP address blocks: 20.33.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:40:44:0d:c1:0d:33:90:ad:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=3775d40a-8ef9-4728-b86f-d5eaeb022c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:00:78:d1:70:84:36:6f:00:a9:be:41:7c:91: 36:b6:e7:5d:65:54:37:05:4a:e9:b8:da:9b:4b:c5: d5:d5:e3:46:49:5a:8e:3f:43:dd:46:d1:f9:96:03: ff:be:32:4d:0f:f3:a6:ca:0a:8a:3e:cc:3d:c7:6d: c6:c8:cf:6a:66:5d:81:d4:eb:cf:c3:d3:71:f3:b2: 69:0a:74:16:7f:05:fb:b7:f0:6a:41:e5:a6:58:a1: 26:34:21:a7:11:bc:42:3b:e2:92:7a:3c:ed:e6:f6: c5:62:3a:73:3c:87:41:52:13:27:51:77:3a:55:48: 52:e1:85:14:b5:1a:0b:23:fd:2f:c5:34:17:71:47: af:66:e0:38:68:26:70:de:a3:a7:39:d5:5b:c8:ac: 5d:5b:91:41:32:03:de:43:5c:b7:3f:a2:4d:4f:96: eb:59:c8:8f:3c:fa:3f:4e:52:61:1a:91:62:81:94: 6b:7b:ae:8b:67:77:61:11:e9:d5:7a:6a:3f:69:44: 66:af:cb:6c:f3:d6:93:97:25:6f:ab:45:54:6d:0e: 4b:74:19:39:16:34:ed:cf:ee:c8:5f:5f:fc:0f:8b: a4:bc:e5:44:cb:af:0f:53:c9:01:57:65:be:a7:10: 8e:fe:53:02:bd:67:c7:5e:81:62:41:b7:b5:7f:cd: 48:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:61:51:5F:56:46:EA:06:46:95:57:CE:9A:3B:30:95:1D:00:6C:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/05083c45-27cd-3b2c-8e1d-f00b1dd17954.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:23:e3:84:28:f0:2f:93:07:f7:5e:8c:ab:97:e9:ed:62:ae: 48:c2:15:fa:79:fb:64:38:18:dc:80:52:c0:dd:5f:1d:23:3d: 56:cb:5a:27:9b:55:63:62:8e:1a:8f:93:1b:f2:00:bf:5a:47: 8c:32:f6:c1:b2:9b:ac:8f:bf:28:0c:32:6a:c0:3f:3e:85:5f: ad:92:fe:09:7b:ae:b9:fc:bb:33:a5:3f:b8:51:02:19:5a:ad: 5e:d0:82:7e:20:b3:4e:62:77:3c:4d:33:af:e5:77:95:ab:fc: 29:64:7e:00:4f:1f:00:87:58:78:b7:51:c4:47:c0:93:e7:ec: 9e:22:0c:7a:17:e4:e8:06:89:dc:3a:54:7b:c8:f6:f0:7f:cf: 7e:a8:e5:f2:47:1a:27:a0:e9:41:18:15:e5:b2:d1:de:ef:89: cf:ec:e0:35:60:eb:83:b0:00:94:38:cc:89:25:78:13:01:31: 17:8b:23:86:59:11:f4:c2:fd:0e:d8:89:4e:12:bf:65:63:87: e2:ba:dd:e6:4e:a6:ff:a7:ee:c1:6f:b9:4c:2c:3d:2a:e0:ff: 6f:d6:8c:14:97:f9:69:22:85:1c:19:46:74:7a:19:40:a0:4c: d9:8b:33:42:94:8e:c3:0c:c8:94:63:55:59:0a:95:e3:3c:c4: bc:41:e0:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEBEDcENM5CtxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk Mzc3NWQ0MGEtOGVmOS00NzI4LWI4NmYtZDVlYWViMDIyYzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wB40XCENm8Aqb5BfJE2tuddZVQ3BUrpuNqb S8XV1eNGSVqOP0PdRtH5lgP/vjJND/OmygqKPsw9x23GyM9qZl2B1OvPw9Nx87Jp CnQWfwX7t/BqQeWmWKEmNCGnEbxCO+KSejzt5vbFYjpzPIdBUhMnUXc6VUhS4YUU tRoLI/0vxTQXcUevZuA4aCZw3qOnOdVbyKxdW5FBMgPeQ1y3P6JNT5brWciPPPo/ TlJhGpFigZRre66LZ3dhEenVemo/aURmr8ts89aTlyVvq0VUbQ5LdBk5FjTtz+7I X1/8D4ukvOVEy68PU8kBV2W+pxCO/lMCvWfHXoFiQbe1f81IvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCthUV9WRuoGRpVXzpo7MJUdAGyGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDUwODNjNDUtMjdjZC0z YjJjLThlMWQtZjAwYjFkZDE3OTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsj44Qo8C+TB/dejKuX6e1irkjCFfp5+2Q4GNyAUsDdXx0jPVbLWieb VWNijhqPkxvyAL9aR4wy9sGym6yPvygMMmrAPz6FX62S/gl7rrn8uzOlP7hRAhla rV7Qgn4gs05idzxNM6/ld5Wr/ClkfgBPHwCHWHi3UcRHwJPn7J4iDHoX5OgGidw6 VHvI9vB/z36o5fJHGieg6UEYFeWy0d7vic/s4DVg64OwAJQ4zIkleBMBMReLI4ZZ EfTC/Q7YiU4Sv2Vjh+K63eZOpv+n7sFvuUwsPSrg/2/WjBSX+WkihRwZRnR6GUCg TNmLM0KUjsMMyJRjVVkKleM8xLxB4Gw= -----END CERTIFICATE-----Generated at Wed Nov 5 08:48:53 2025 by rpki-client