$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c19a38f-182b-3873-a381-6fafa80313dc.roa File: 6c19a38f-182b-3873-a381-6fafa80313dc.roa (raw, json) Hash identifier: fRUzzEqSY0XN4YC2zZNSPSEXGMnYGixoyjl5QscUPfU= Subject key identifier: 2A:39:75:D2:EF:F8:F9:4A:87:8E:66:33:F6:73:3A:FB:F6:80:70:CF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B0746C97F0FDEACB7DCA1C600 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c19a38f-182b-3873-a381-6fafa80313dc.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.33.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:c9:7f:0f:de:ac:b7:dc:a1:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=34d8b6de-c37a-4e6c-8fb9-aea7ed7a214d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a6:cc:37:5a:9d:07:e9:6d:dd:5b:e1:40:e0: 4c:a0:fd:63:9e:bd:cb:31:0c:f5:99:51:12:3b:dd: 44:36:1b:f3:28:85:33:6b:15:81:d6:fa:49:39:44: 13:7c:98:c7:9a:be:a1:d4:89:c8:cd:34:be:b1:fe: e8:b0:45:9b:6e:6a:8f:33:c3:f6:6a:2d:57:43:4a: d2:f2:d9:61:a9:30:01:b7:ce:a0:0e:6b:52:28:3f: d2:a2:ff:6c:95:af:6d:52:26:46:ff:ae:d6:34:50: 9f:a2:bd:f5:e8:1f:b0:e3:95:53:d9:5b:dc:44:7b: 5a:33:5c:de:e2:c2:2b:c6:d1:a1:6e:ce:46:8f:b7: 84:f7:7f:61:41:39:c5:76:6a:0e:26:75:a5:c0:78: 24:73:82:21:d1:1b:ef:84:54:d7:9a:09:bb:ac:25: 37:53:2b:2b:a1:07:ba:c7:ca:bf:ae:15:24:0c:0b: fd:51:70:23:d5:7d:d4:49:c1:39:5d:4a:9b:61:10: 64:35:b4:69:65:a9:5a:d3:88:57:73:64:07:8a:99: 9f:98:1f:a0:8e:c7:1e:72:1e:77:47:93:3c:b6:79: 47:88:90:15:57:a4:e0:39:d4:cd:f6:4a:8c:92:1b: d1:74:fe:c2:66:f3:8a:69:44:d0:65:ba:c7:2d:38: 10:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:39:75:D2:EF:F8:F9:4A:87:8E:66:33:F6:73:3A:FB:F6:80:70:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c19a38f-182b-3873-a381-6fafa80313dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:05:90:00:ba:9e:1e:8a:4e:70:d3:26:0f:c7:71:24:98:79: 41:71:fd:c8:89:75:8e:c4:42:dd:e0:57:90:88:f7:f7:e7:59: 71:17:d8:3e:72:df:36:82:f0:33:fe:9f:90:c1:1e:a7:00:9e: 11:96:3d:c1:16:50:e7:f0:b1:85:d2:df:9c:41:f2:0a:09:e1: 3d:4d:e3:39:c1:3a:4e:5f:9f:ed:f6:ef:0e:c9:45:df:8f:3e: a5:b6:89:53:f1:cc:6e:8c:39:2d:4a:1c:1f:eb:3d:6c:7a:8c: 1c:ad:0d:74:85:f7:7a:d7:c4:82:33:f5:bf:fa:c6:0d:98:ff: 1b:43:a5:77:7a:2a:69:76:3b:eb:35:1f:01:11:75:c1:4c:58: ea:33:bb:22:81:a3:ff:3e:c3:4e:29:1e:bb:64:2f:6c:16:d5: db:11:13:43:d8:3f:81:fe:4b:37:fb:23:55:c4:71:9b:4a:a3: b4:cf:c6:c8:f2:b7:85:f8:d1:db:50:02:54:3c:c9:a1:e1:31: a5:d6:16:3c:e2:6e:32:36:04:d2:e1:41:81:2f:30:f2:b5:1d: 5c:7d:1f:4c:c8:81:7b:19:0d:f9:b3:37:19:ca:5c:07:e7:b3: cc:be:48:10:65:7c:52:47:c1:ed:15:5b:b4:e8:49:7b:e2:66: 92:d0:b2:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRsl/D96st9yhxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk MzRkOGI2ZGUtYzM3YS00ZTZjLThmYjktYWVhN2VkN2EyMTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6bMN1qdB+lt3VvhQOBMoP1jnr3LMQz1mVES O91ENhvzKIUzaxWB1vpJOUQTfJjHmr6h1InIzTS+sf7osEWbbmqPM8P2ai1XQ0rS 8tlhqTABt86gDmtSKD/Sov9sla9tUiZG/67WNFCfor316B+w45VT2VvcRHtaM1ze 4sIrxtGhbs5Gj7eE939hQTnFdmoOJnWlwHgkc4Ih0RvvhFTXmgm7rCU3UysroQe6 x8q/rhUkDAv9UXAj1X3UScE5XUqbYRBkNbRpZala04hXc2QHipmfmB+gjscech53 R5M8tnlHiJAVV6TgOdTN9kqMkhvRdP7CZvOKaUTQZbrHLTgQ9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCo5ddLv+PlKh45mM/ZzOvv2gHDPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmMxOWEzOGYtMTgyYi0z ODczLWEzODEtNmZhZmE4MDMxM2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQFkAC6nh6KTnDTJg/HcSSYeUFx/ciJdY7EQt3gV5CI9/fnWXEX2D5y 3zaC8DP+n5DBHqcAnhGWPcEWUOfwsYXS35xB8goJ4T1N4znBOk5fn+327w7JRd+P PqW2iVPxzG6MOS1KHB/rPWx6jBytDXSF93rXxIIz9b/6xg2Y/xtDpXd6Kml2O+s1 HwERdcFMWOozuyKBo/8+w04pHrtkL2wW1dsRE0PYP4H+Szf7I1XEcZtKo7TPxsjy t4X40dtQAlQ8yaHhMaXWFjzibjI2BNLhQYEvMPK1HVx9H0zIgXsZDfmzNxnKXAfn s8y+SBBlfFJHwe0VW7ToSXviZpLQsjo= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:08 2025 by rpki-client