$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4b0c2265-c6cc-304f-b1ab-afa0962ddec2.roa File: 4b0c2265-c6cc-304f-b1ab-afa0962ddec2.roa (raw, json) Hash identifier: CpAO9V0o+lD1WYwZL+sfjLpJ131XlmiFfUNk2X2+jo0= Subject key identifier: 0F:C1:DB:7C:6D:B7:DE:DA:71:DD:31:7C:AA:09:17:C4:B9:06:B7:A9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BA0D269B7F8DC30A628B8DB00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4b0c2265-c6cc-304f-b1ab-afa0962ddec2.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 8069 IP address blocks: 20.33.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:69:b7:f8:dc:30:a6:28:b8:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=9dab6ab9-7717-4271-a82c-29b413ddb6b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:be:ad:fd:eb:98:ac:23:37:98:ee:ba:a6:ab: f4:b7:65:6d:23:23:41:79:51:3e:81:32:fe:01:92: db:d9:82:0c:af:23:7c:c8:3b:97:f1:44:07:2d:a3: b7:bc:cf:f8:65:f8:ea:34:9e:e0:4c:b7:e4:2c:8e: d9:a2:b7:f9:9d:9e:bb:7d:1a:61:e2:08:71:d0:3d: 2e:be:45:c1:34:58:b8:0c:17:54:ed:c2:fa:3e:e2: 30:00:2a:2e:a5:7e:9c:56:c4:19:46:1a:ff:70:bc: ae:ce:05:af:e5:3d:1b:ed:77:9b:3e:51:24:ee:dd: 44:03:99:c3:60:90:94:f6:ff:7d:16:d7:0b:0a:ad: f8:05:b4:27:cf:73:91:ee:9c:8f:45:d8:e7:f5:b9: 27:78:f3:1f:55:ee:83:47:a3:47:d6:55:a8:1f:a5: 7d:b7:3a:91:2d:40:82:6f:a4:da:72:23:b7:00:d9: 16:82:60:8f:df:9c:68:39:32:e7:90:92:9e:b5:37: 92:11:06:54:a7:e9:bd:86:07:e0:d3:94:09:2a:1e: de:54:82:d6:e2:bc:e4:93:b0:2e:85:f5:f1:82:ac: ca:5a:82:87:04:b0:84:6d:37:76:3d:09:5f:35:95: c7:5f:16:d2:8b:21:30:39:d0:0a:24:6c:4c:19:11: 66:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C1:DB:7C:6D:B7:DE:DA:71:DD:31:7C:AA:09:17:C4:B9:06:B7:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4b0c2265-c6cc-304f-b1ab-afa0962ddec2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:83:ea:95:a1:d3:bb:47:ea:d7:08:cb:8a:2c:0a:fb:50:9a: a4:cc:26:c9:8f:e1:1a:03:cd:ee:d9:89:d1:da:57:53:af:02: 58:d3:bf:e2:0c:98:3c:07:f6:1f:0b:41:e7:cc:63:dc:52:65: 34:fd:e3:91:c3:b7:0a:6b:f8:40:77:00:a3:07:33:9b:92:fc: 66:d8:cf:a2:f0:b2:2a:e8:c3:c4:79:93:d7:12:98:84:0f:92: 3e:1c:dc:45:24:1e:a7:5f:3f:fc:c1:7b:3b:7a:f5:f6:79:1d: e3:55:c4:9c:7c:8c:2f:8e:b2:a0:ad:98:74:b4:7a:09:d2:04: 56:65:4b:e8:7d:6d:20:fd:36:ed:c0:8d:ca:62:76:9a:5b:7d: 76:4c:7d:9b:11:ea:21:29:28:5c:a1:50:2a:f5:62:9d:e9:48: 64:59:a2:4d:1d:68:52:63:74:f6:67:29:5c:54:b4:ff:0a:1a: 3d:45:ed:36:29:29:46:ae:f3:2f:b2:37:e1:96:ff:91:4b:4f: 92:9c:5c:7e:70:98:b8:5d:7d:03:43:4a:c3:2e:33:c9:41:aa: b0:25:31:9d:80:20:76:ef:6d:f6:89:f9:ef:b4:94:40:51:fe: 8d:d1:6f:a6:e5:81:76:e7:91:10:ac:82:55:48:ad:64:6b:ac: 56:bf:33:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mm3+Nwwpii42wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk OWRhYjZhYjktNzcxNy00MjcxLWE4MmMtMjliNDEzZGRiNmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob6t/euYrCM3mO66pqv0t2VtIyNBeVE+gTL+ AZLb2YIMryN8yDuX8UQHLaO3vM/4ZfjqNJ7gTLfkLI7Zorf5nZ67fRph4ghx0D0u vkXBNFi4DBdU7cL6PuIwACoupX6cVsQZRhr/cLyuzgWv5T0b7XebPlEk7t1EA5nD YJCU9v99FtcLCq34BbQnz3OR7pyPRdjn9bknePMfVe6DR6NH1lWoH6V9tzqRLUCC b6TaciO3ANkWgmCP35xoOTLnkJKetTeSEQZUp+m9hgfg05QJKh7eVILW4rzkk7Au hfXxgqzKWoKHBLCEbTd2PQlfNZXHXxbSiyEwOdAKJGxMGRFm5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/B23xtt97acd0xfKoJF8S5BrepMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGIwYzIyNjUtYzZjYy0z MDRmLWIxYWItYWZhMDk2MmRkZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCD6pWh07tH6tcIy4osCvtQmqTMJsmP4RoDze7ZidHaV1OvAljTv+IM mDwH9h8LQefMY9xSZTT945HDtwpr+EB3AKMHM5uS/GbYz6Lwsirow8R5k9cSmIQP kj4c3EUkHqdfP/zBezt69fZ5HeNVxJx8jC+OsqCtmHS0egnSBFZlS+h9bSD9Nu3A jcpidppbfXZMfZsR6iEpKFyhUCr1Yp3pSGRZok0daFJjdPZnKVxUtP8KGj1F7TYp KUau8y+yN+GW/5FLT5KcXH5wmLhdfQNDSsMuM8lBqrAlMZ2AIHbvbfaJ+e+0lEBR /o3Rb6blgXbnkRCsglVIrWRrrFa/M54= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:25 2025 by rpki-client