$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5d47e3e0-2d00-3923-b4da-a192da7e5a3d.roa File: 5d47e3e0-2d00-3923-b4da-a192da7e5a3d.roa (raw, json) Hash identifier: Xl9MbEwVPPoL0R3BfG+OTpTKiGj0L+QO1pDGsIW4adY= Subject key identifier: 11:8F:A8:1C:40:C1:1C:2A:21:26:30:77:F6:23:3D:57:F3:6F:40:59 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BA0D269C94BFCBAF500FA6A00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5d47e3e0-2d00-3923-b4da-a192da7e5a3d.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 8069 IP address blocks: 20.33.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:69:c9:4b:fc:ba:f5:00:fa:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=9a7f51ab-b9ae-41c6-8574-a5adccb04211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:07:18:06:95:9c:ee:a2:39:ac:0e:bf:3b:41: c4:55:7c:33:04:f8:87:5d:42:df:cf:b4:2f:f6:ba: d4:60:43:69:54:d0:2f:2c:7c:1e:56:5b:89:10:71: c5:e1:76:1e:3c:aa:90:cd:03:c7:e0:c7:97:49:de: a0:0e:8b:42:e1:87:58:8b:22:02:bc:f2:fb:d1:a0: 2e:9b:f5:c7:c0:f2:a7:02:7b:c7:14:d9:d4:6a:22: f6:a1:5e:fe:25:e3:c6:ae:67:2b:13:d2:64:12:84: cc:e5:65:05:9b:30:50:f9:e8:40:92:9a:cb:81:f1: 57:54:5c:ab:e0:79:a4:05:3f:c1:47:bd:df:de:95: 63:5a:56:65:b5:e2:30:03:1b:89:ee:23:99:40:89: 01:f3:da:df:a3:44:b8:a4:7d:63:5f:5b:be:1f:05: c1:9a:82:2f:6e:3f:e4:9d:e1:5e:e7:ca:66:c5:0a: d4:5a:56:a7:ba:56:0a:22:54:2d:33:71:2d:18:b3: 69:cc:82:96:f4:52:f3:7a:17:e1:20:92:8f:79:91: 94:44:cb:8c:18:dc:60:31:58:18:0c:fb:d6:ac:d8: 05:cc:ad:d8:8c:75:62:dd:18:03:fc:85:bd:de:92: a2:24:bc:b3:45:98:96:4c:4b:7e:e4:ca:dd:1a:ec: f9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8F:A8:1C:40:C1:1C:2A:21:26:30:77:F6:23:3D:57:F3:6F:40:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5d47e3e0-2d00-3923-b4da-a192da7e5a3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:44:c4:4b:21:05:4e:0a:84:40:04:11:3d:74:08:58:4e:b7: 28:58:09:1d:f8:60:78:a4:ba:20:3c:ee:ef:b4:eb:f6:d6:11: cd:05:4c:07:9b:64:43:1e:ec:6e:2d:97:7b:fd:83:0d:14:79: 6f:36:f4:3a:b7:5f:12:7c:ed:7d:d6:25:6a:eb:ae:3e:4c:3f: b7:a2:3d:18:13:0f:26:23:a3:68:b7:71:53:f1:32:72:7f:0f: 6a:68:64:49:08:8c:ee:13:51:73:d3:6c:bd:89:ab:70:9a:ea: 36:b1:1d:66:da:49:c8:f4:49:32:95:3f:86:f1:f2:7b:4e:7b: e6:2c:10:bb:25:78:25:b4:50:ff:94:ee:3f:29:74:86:05:86: 6b:52:66:4c:76:50:f8:15:6d:f4:c3:0c:dc:ee:d3:d7:ee:db: 11:80:81:d4:2c:a6:41:c3:28:e9:8a:c7:4c:fe:21:38:85:1e: 89:90:c5:7f:34:be:3e:44:52:ae:9b:38:e9:93:99:ff:e6:19: a6:e7:8c:24:d7:48:cc:5c:6c:df:b3:53:e0:85:f8:85:f1:55: a9:3a:4f:d5:b5:b9:26:18:75:3a:e7:84:42:2f:36:ab:de:48: 19:31:4b:29:00:c5:9b:45:11:26:68:12:aa:67:f4:34:59:f9: 31:11:9b:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mnJS/y69QD6agAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk OWE3ZjUxYWItYjlhZS00MWM2LTg1NzQtYTVhZGNjYjA0MjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAcYBpWc7qI5rA6/O0HEVXwzBPiHXULfz7Qv 9rrUYENpVNAvLHweVluJEHHF4XYePKqQzQPH4MeXSd6gDotC4YdYiyICvPL70aAu m/XHwPKnAnvHFNnUaiL2oV7+JePGrmcrE9JkEoTM5WUFmzBQ+ehAkprLgfFXVFyr 4HmkBT/BR73f3pVjWlZlteIwAxuJ7iOZQIkB89rfo0S4pH1jX1u+HwXBmoIvbj/k neFe58pmxQrUWlanulYKIlQtM3EtGLNpzIKW9FLzehfhIJKPeZGURMuMGNxgMVgY DPvWrNgFzK3YjHVi3RgD/IW93pKiJLyzRZiWTEt+5MrdGuz55wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGPqBxAwRwqISYwd/YjPVfzb0BZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWQ0N2UzZTAtMmQwMC0z OTIzLWI0ZGEtYTE5MmRhN2U1YTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNExEshBU4KhEAEET10CFhOtyhYCR34YHikuiA87u+06/bWEc0FTAeb ZEMe7G4tl3v9gw0UeW829Dq3XxJ87X3WJWrrrj5MP7eiPRgTDyYjo2i3cVPxMnJ/ D2poZEkIjO4TUXPTbL2Jq3Ca6jaxHWbaScj0STKVP4bx8ntOe+YsELsleCW0UP+U 7j8pdIYFhmtSZkx2UPgVbfTDDNzu09fu2xGAgdQspkHDKOmKx0z+ITiFHomQxX80 vj5EUq6bOOmTmf/mGabnjCTXSMxcbN+zU+CF+IXxVak6T9W1uSYYdTrnhEIvNqve SBkxSykAxZtFESZoEqpn9DRZ+TERm34= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:40 2025 by rpki-client