$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2c93a2fe-59c9-3004-aace-53a40166520d.roa File: 2c93a2fe-59c9-3004-aace-53a40166520d.roa (raw, json) Hash identifier: 3Av5K0K2+RwItLkllhuSEgNs8eavA5Af3SlHEV7CtEM= Subject key identifier: CD:60:04:72:2C:9D:E4:DA:85:5D:78:6E:26:18:35:9D:8F:D4:F4:1D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B3C51B03ECBB9CF4402D5C700 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2c93a2fe-59c9-3004-aace-53a40166520d.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:b0:3e:cb:b9:cf:44:02:d5:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=7651bf15-73da-4b7f-ad24-b7a20dce1416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ed:c7:be:b4:d7:4c:9e:c1:3d:70:39:92:be: 3d:5f:fa:07:1a:5f:5b:f6:01:7f:44:5e:2b:10:58: d4:de:e4:08:23:a3:56:57:61:14:8b:64:a3:eb:16: 24:f6:cd:3d:b1:f6:de:b8:e8:9b:66:68:98:0e:1e: 56:e3:71:15:ec:eb:98:79:a1:2f:31:bc:cc:b1:d4: 8f:74:91:91:a5:6c:89:68:65:1e:a3:e0:7f:c7:8c: 34:a7:1f:27:25:7d:0e:ee:e1:45:c6:40:1b:ca:5c: 7d:91:c3:d5:ad:85:11:6b:5d:82:22:35:bf:f7:29: 97:9f:fa:b9:3e:54:ea:67:ef:e8:60:39:7e:cb:fd: 14:ad:0b:24:93:f9:51:5d:11:b0:9f:2a:08:23:e4: 82:a6:77:2d:35:16:8d:d6:a9:73:35:1c:f0:23:17: 57:1a:be:1a:13:70:d9:d8:fa:de:63:55:a0:f7:b0: d2:36:5f:a9:d6:f5:3f:fa:d2:fa:5c:f8:fd:cd:8d: 5f:a4:17:f4:52:de:de:c9:a8:21:09:df:2d:27:5a: 7d:58:64:a3:44:16:d2:07:fc:64:cc:51:d1:31:9c: 2c:1e:1d:d9:60:44:e0:8c:38:62:c3:12:0f:9e:dd: a7:9b:51:78:b3:48:3c:9c:40:85:d8:1e:b2:ca:04: ed:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:60:04:72:2C:9D:E4:DA:85:5D:78:6E:26:18:35:9D:8F:D4:F4:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2c93a2fe-59c9-3004-aace-53a40166520d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:1e:7d:96:36:fb:14:17:e8:8c:ac:e8:aa:58:16:ab:48:f5: 06:f7:ee:89:7b:3e:3e:bd:29:e7:88:4f:a1:02:0a:22:20:f3: 0e:bf:46:a2:fd:bd:94:e2:2e:ca:14:43:07:51:9e:b8:d0:1a: 93:0c:20:4b:df:46:52:2f:92:88:62:63:76:94:f5:0e:91:4d: fe:ac:1b:d1:f0:ad:63:22:76:77:6c:ef:6b:5b:51:44:45:32: 9e:3e:9e:6e:67:14:7e:2f:f1:d1:a3:dc:5e:05:cb:9c:29:5d: ca:95:4a:6c:0c:f5:9a:38:18:9a:19:d9:17:5c:17:63:6b:bb: 47:55:c5:c5:0f:46:9d:18:ca:48:b9:d7:3c:6e:56:7e:49:94: 1f:72:28:e8:f0:14:08:4a:7a:15:3c:b0:08:32:62:ca:4f:be: 34:24:ab:a4:df:26:ee:4a:21:56:fd:7e:d0:e6:af:c3:2f:21: 35:a0:f4:98:31:02:ac:91:b8:d8:e4:fb:d4:4d:34:e4:e6:76: 97:32:6c:2a:a0:46:79:65:b6:f7:a4:6a:55:60:72:1c:cb:be: 6c:78:13:da:75:7a:81:38:61:41:6e:b1:f3:5b:fc:38:a3:9a: c6:5e:6d:f0:36:01:67:2d:86:c2:83:cd:62:10:b4:be:4e:a0: ba:74:e4:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8UbA+y7nPRALVxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk NzY1MWJmMTUtNzNkYS00YjdmLWFkMjQtYjdhMjBkY2UxNDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+3HvrTXTJ7BPXA5kr49X/oHGl9b9gF/RF4r EFjU3uQII6NWV2EUi2Sj6xYk9s09sfbeuOibZmiYDh5W43EV7OuYeaEvMbzMsdSP dJGRpWyJaGUeo+B/x4w0px8nJX0O7uFFxkAbylx9kcPVrYURa12CIjW/9ymXn/q5 PlTqZ+/oYDl+y/0UrQskk/lRXRGwnyoII+SCpnctNRaN1qlzNRzwIxdXGr4aE3DZ 2PreY1Wg97DSNl+p1vU/+tL6XPj9zY1fpBf0Ut7eyaghCd8tJ1p9WGSjRBbSB/xk zFHRMZwsHh3ZYETgjDhiwxIPnt2nm1F4s0g8nECF2B6yygTt9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1gBHIsneTahV14biYYNZ2P1PQdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMmM5M2EyZmUtNTljOS0z MDA0LWFhY2UtNTNhNDAxNjY1MjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4efZY2+xQX6Iys6KpYFqtI9Qb37ol7Pj69KeeIT6ECCiIg8w6/RqL9 vZTiLsoUQwdRnrjQGpMMIEvfRlIvkohiY3aU9Q6RTf6sG9HwrWMidnds72tbUURF Mp4+nm5nFH4v8dGj3F4Fy5wpXcqVSmwM9Zo4GJoZ2RdcF2Nru0dVxcUPRp0Yyki5 1zxuVn5JlB9yKOjwFAhKehU8sAgyYspPvjQkq6TfJu5KIVb9ftDmr8MvITWg9Jgx AqyRuNjk+9RNNOTmdpcybCqgRnlltvekalVgchzLvmx4E9p1eoE4YUFusfNb/Dij msZebfA2AWcthsKDzWIQtL5OoLp05E4= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:28 2025 by rpki-client