$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/273c9b70-70a4-3eb6-9810-590c5e753b05.roa File: 273c9b70-70a4-3eb6-9810-590c5e753b05.roa (raw, json) Hash identifier: N0dmZ0mTqa3QaXLfCQLXm+IDORMRsK0Xt15ZW0nc1pI= Subject key identifier: B4:56:35:32:14:C3:C1:D3:07:3E:34:04:71:78:71:F2:DC:C9:7B:B7 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B2A2C40C372C252B92B93BB00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/273c9b70-70a4-3eb6-9810-590c5e753b05.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 8069 IP address blocks: 20.33.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:40:c3:72:c2:52:b9:2b:93:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=466bd0f6-df9d-4328-8f8c-30b81545b45a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1e:6a:41:0b:c1:53:a0:a7:1a:a3:d2:f2:fe: 4c:73:c0:c4:5a:40:d1:72:36:e6:3f:51:51:70:c7: 8c:4f:db:7c:cc:46:2c:a1:17:8b:07:95:2e:46:de: c7:a4:cd:60:80:1a:de:26:8b:74:71:d0:d0:cf:26: 61:53:86:9c:96:42:29:ee:2a:de:de:e3:96:4c:11: f4:35:f3:0a:c7:5c:0e:c1:9f:00:c4:33:f7:96:81: a2:14:d2:21:a3:7f:dc:f4:cd:6a:96:76:95:12:20: 06:70:60:dc:34:22:55:79:4b:fa:f7:f3:45:59:e5: 4f:a4:21:76:18:dc:82:0c:0b:18:6f:3a:18:71:b9: 9f:e7:0f:f8:e6:bb:ac:51:64:98:3a:6c:29:95:8b: d5:43:ee:6b:8d:3f:3f:04:23:93:23:3b:1e:60:24: 71:47:76:e9:60:98:bd:50:68:b8:ae:63:31:58:b6: 9e:cf:dc:83:03:9b:08:6c:a7:88:f2:45:ba:7f:90: 98:7a:ea:5a:5e:c0:8c:d6:0c:c0:fa:e1:d6:9d:07: be:0b:22:93:04:ba:88:e0:cd:ad:d3:35:15:cf:25: e5:46:fe:a0:41:a5:96:df:85:bb:13:9c:fd:71:ee: 4a:24:f0:84:9e:44:c0:ec:e9:7f:ed:df:d0:38:cf: e8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:56:35:32:14:C3:C1:D3:07:3E:34:04:71:78:71:F2:DC:C9:7B:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/273c9b70-70a4-3eb6-9810-590c5e753b05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:9b:83:5c:18:87:cc:7b:2d:dc:7c:13:73:08:a5:05:1d:1b: 66:49:db:81:84:12:01:b6:e1:79:fa:4c:92:db:29:45:b3:42: fa:fb:bb:45:44:04:a0:99:f1:85:27:de:9e:81:58:1e:e0:b1: e4:35:af:00:d5:d5:0c:f0:64:88:32:ce:76:19:95:ae:f6:c5: a9:86:5f:e9:f7:ee:17:0d:49:54:c2:f9:b5:d5:a9:77:15:86: ff:e0:55:e3:75:bb:51:ad:c4:a4:2e:01:d0:1f:fb:fa:4e:37: e1:0e:9b:8f:53:35:a8:f5:92:0e:ae:22:da:3f:55:b8:49:4c: 34:5a:c8:6a:92:47:83:3c:a6:81:b3:ac:a5:9a:5f:64:8a:bd: ef:1b:16:e7:e5:82:32:c2:e3:93:c6:4d:71:e4:0f:32:08:a1: e5:78:f6:af:f0:86:41:03:a7:f8:80:e3:5c:e4:9e:8d:c5:25: 09:71:f4:9d:cc:53:b9:6f:88:38:29:d3:19:9f:46:64:89:40: 51:54:48:42:b0:28:83:79:3f:2c:6a:93:74:82:d3:ad:14:12: 99:f0:98:24:22:48:e1:6c:56:5c:29:09:e2:92:b4:5d:46:34: 21:28:06:4d:50:15:f8:17:ef:61:ca:97:21:48:91:55:6d:ad: 4e:5a:76:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEDDcsJSuSuTuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk NDY2YmQwZjYtZGY5ZC00MzI4LThmOGMtMzBiODE1NDViNDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgB5qQQvBU6CnGqPS8v5Mc8DEWkDRcjbmP1FR cMeMT9t8zEYsoReLB5UuRt7HpM1ggBreJot0cdDQzyZhU4aclkIp7ire3uOWTBH0 NfMKx1wOwZ8AxDP3loGiFNIho3/c9M1qlnaVEiAGcGDcNCJVeUv69/NFWeVPpCF2 GNyCDAsYbzoYcbmf5w/45rusUWSYOmwplYvVQ+5rjT8/BCOTIzseYCRxR3bpYJi9 UGi4rmMxWLaez9yDA5sIbKeI8kW6f5CYeupaXsCM1gzA+uHWnQe+CyKTBLqI4M2t 0zUVzyXlRv6gQaWW34W7E5z9ce5KJPCEnkTA7Ol/7d/QOM/oMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRWNTIUw8HTBz40BHF4cfLcyXu3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjczYzliNzAtNzBhNC0z ZWI2LTk4MTAtNTkwYzVlNzUzYjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADibg1wYh8x7Ldx8E3MIpQUdG2ZJ24GEEgG24Xn6TJLbKUWzQvr7u0VE BKCZ8YUn3p6BWB7gseQ1rwDV1QzwZIgyznYZla72xamGX+n37hcNSVTC+bXVqXcV hv/gVeN1u1GtxKQuAdAf+/pON+EOm49TNaj1kg6uIto/VbhJTDRayGqSR4M8poGz rKWaX2SKve8bFuflgjLC45PGTXHkDzIIoeV49q/whkEDp/iA41zkno3FJQlx9J3M U7lviDgp0xmfRmSJQFFUSEKwKIN5Pyxqk3SC060UEpnwmCQiSOFsVlwpCeKStF1G NCEoBk1QFfgX72HKlyFIkVVtrU5adog= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:22 2025 by rpki-client