$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0967e81b-028b-34cd-bdc0-bbf4748131ac.roa File: 0967e81b-028b-34cd-bdc0-bbf4748131ac.roa (raw, json) Hash identifier: bcGW+ASZxfYGfos4byKeVxH5KFdHDZI69FpqHEvZgOo= Subject key identifier: 79:73:DC:37:19:EC:6F:04:AC:2D:63:6C:A2:51:86:96:D3:03:0F:F1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B3C51AF9A89B4B2DB810AE680 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0967e81b-028b-34cd-bdc0-bbf4748131ac.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:af:9a:89:b4:b2:db:81:0a:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=dcc254fe-c264-423c-95d6-143af9001f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ec:7d:75:f4:72:87:ff:cc:48:64:ac:8c:a7: de:ba:f1:6f:d9:7b:f0:7e:ce:2f:9b:b2:c4:49:dc: 16:f1:13:92:5a:15:70:ea:88:c6:d7:20:27:d8:d9: 71:bc:70:4a:da:7c:0f:56:6e:ac:7d:34:0f:8f:54: cb:a6:8a:45:62:68:4d:db:bc:1c:54:bd:04:f8:6f: fe:e8:75:27:18:25:05:3a:f1:a1:e4:a3:35:8f:1f: 41:fa:52:89:8e:3f:fa:5a:fc:31:a7:43:57:a8:1b: 96:c3:14:14:46:30:c4:95:dd:de:ec:d7:ae:9d:be: 7a:ed:55:56:37:53:04:8a:01:ec:15:6d:bd:27:5e: f4:30:a8:56:29:cb:a6:7d:9b:79:28:4e:88:b7:35: 06:f4:72:ba:e5:ca:07:dc:d9:26:72:9f:d8:22:09: 56:71:1e:a1:03:16:53:c4:b2:2b:51:28:e6:79:9e: 27:7b:fd:2f:08:5a:c5:51:c4:ad:fe:5f:b2:5f:1e: 3e:3d:20:62:3a:f8:e5:30:81:99:aa:79:ef:04:7f: d3:97:c8:a6:8a:a5:06:88:62:d6:36:aa:89:05:8c: 90:48:b1:e1:d9:9d:a6:e3:07:d5:8c:fa:3f:68:e8: 74:1e:fe:00:f1:a4:0d:ed:10:e0:6f:56:d5:c3:90: 9c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:73:DC:37:19:EC:6F:04:AC:2D:63:6C:A2:51:86:96:D3:03:0F:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0967e81b-028b-34cd-bdc0-bbf4748131ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:8c:2d:ab:31:01:dc:61:1d:bd:04:c0:73:de:72:27:e2:0d: 14:a6:a1:d2:33:9e:ce:05:20:d2:5d:e6:4d:f7:d2:ac:b1:ea: a9:52:ca:ca:b5:fe:fa:0e:72:45:9c:1d:91:70:65:29:7f:f7: 2b:90:2f:04:d3:98:d2:2d:7e:6c:94:1d:bf:5c:24:3f:88:f2: dd:e7:2f:d5:2d:f6:4f:d4:c1:7b:cd:61:e9:a9:0e:62:b7:71: 55:48:13:3b:6a:8b:bc:ba:69:6b:de:fe:3f:d1:5e:9f:39:76: 0c:85:25:6f:dd:1e:66:d6:52:1b:04:c8:6e:b1:bb:95:c3:44: b0:fd:3d:a3:74:5b:52:dc:d3:14:b1:4c:8c:af:9f:b6:d5:37: e9:01:05:37:3a:ec:13:80:c5:8d:de:b6:59:e0:a1:93:b1:5d: d3:22:03:78:19:c8:3d:a3:e0:fb:a0:87:e6:63:28:75:df:15: 43:94:f2:9c:fa:08:1f:6f:89:a9:80:29:0b:a8:d3:ec:45:bd: 39:81:2c:dc:bd:37:bd:98:2f:81:5f:11:91:3a:fc:1e:c5:c8: 7b:d0:78:f7:49:40:bf:32:65:74:0f:a8:27:b1:cb:d1:96:87: 99:28:f2:e1:1d:50:54:0b:fd:bc:c8:b8:2f:27:eb:96:ac:21: 37:93:b8:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8Ua+aibSy24EK5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk ZGNjMjU0ZmUtYzI2NC00MjNjLTk1ZDYtMTQzYWY5MDAxZjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ex9dfRyh//MSGSsjKfeuvFv2Xvwfs4vm7LE SdwW8ROSWhVw6ojG1yAn2NlxvHBK2nwPVm6sfTQPj1TLpopFYmhN27wcVL0E+G/+ 6HUnGCUFOvGh5KM1jx9B+lKJjj/6Wvwxp0NXqBuWwxQURjDEld3e7Neunb567VVW N1MEigHsFW29J170MKhWKcumfZt5KE6ItzUG9HK65coH3Nkmcp/YIglWcR6hAxZT xLIrUSjmeZ4ne/0vCFrFUcSt/l+yXx4+PSBiOvjlMIGZqnnvBH/Tl8imiqUGiGLW NqqJBYyQSLHh2Z2m4wfVjPo/aOh0Hv4A8aQN7RDgb1bVw5CcMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlz3DcZ7G8ErC1jbKJRhpbTAw/xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDk2N2U4MWItMDI4Yi0z NGNkLWJkYzAtYmJmNDc0ODEzMWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICMLasxAdxhHb0EwHPecifiDRSmodIzns4FINJd5k330qyx6qlSysq1 /voOckWcHZFwZSl/9yuQLwTTmNItfmyUHb9cJD+I8t3nL9Ut9k/UwXvNYempDmK3 cVVIEztqi7y6aWve/j/RXp85dgyFJW/dHmbWUhsEyG6xu5XDRLD9PaN0W1Lc0xSx TIyvn7bVN+kBBTc67BOAxY3etlngoZOxXdMiA3gZyD2j4Pugh+ZjKHXfFUOU8pz6 CB9viamAKQuo0+xFvTmBLNy9N72YL4FfEZE6/B7FyHvQePdJQL8yZXQPqCexy9GW h5ko8uEdUFQL/bzIuC8n65asITeTuJo= -----END CERTIFICATE-----Generated at Wed Nov 5 07:10:15 2025 by rpki-client