$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/85a501f7-6576-30eb-bae9-089a76033a22.roa File: 85a501f7-6576-30eb-bae9-089a76033a22.roa (raw, json) Hash identifier: qJ1Ya3J8PIwvTCT+YHpPHg30jh2dGg65KTg6M3yDkII= Subject key identifier: C3:B1:B0:42:5E:43:E9:B7:96:9F:5E:19:A4:B4:BD:08:C2:27:6E:BE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AF686918108A132025AFE2440 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/85a501f7-6576-30eb-bae9-089a76033a22.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.33.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:91:81:08:a1:32:02:5a:fe:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=8f3dff96-9b1c-4e03-bdb0-8aeb89bd1449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:32:d3:70:38:52:e7:e3:88:5d:34:60:e9:3e: 35:92:7d:dd:52:7e:0e:bb:71:aa:9c:a5:f3:18:c1: 6a:76:54:a6:25:7d:ae:4e:58:a6:38:1c:93:6d:c5: d9:c4:41:0c:ac:46:c1:9a:ff:0d:75:e2:6b:77:6b: 56:3a:cc:f5:e7:0c:09:48:83:4b:e8:b3:36:18:2c: 6f:6e:59:73:c2:ab:81:9e:35:cb:12:4e:05:4f:0a: 89:62:5e:8f:a3:ad:41:f0:7c:2e:c5:d8:e5:68:c3: 31:7c:49:50:44:8c:da:ed:cd:94:78:ca:93:4a:16: bf:29:48:63:66:44:63:71:de:ca:74:6c:d8:3c:45: 10:53:f8:20:0a:9b:f0:33:f2:43:b8:05:11:a5:63: 0a:52:a1:07:08:bb:f7:80:c9:03:41:96:c4:29:83: 7d:40:87:71:d1:80:d7:92:66:d2:59:0a:a7:44:26: 9e:d7:6f:f3:13:cd:e7:97:17:92:26:fd:33:d3:5a: 4c:d5:26:36:a2:e6:3f:b4:1f:be:fe:6f:4c:57:b5: fb:5b:df:7f:57:6a:8e:b7:73:20:55:5d:50:9d:e8: 90:7a:2e:4c:5b:8b:af:a7:0f:e0:53:1c:90:60:20: 63:2e:fd:ce:60:ee:b1:38:0a:f1:f6:cd:f6:70:d1: cf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B1:B0:42:5E:43:E9:B7:96:9F:5E:19:A4:B4:BD:08:C2:27:6E:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/85a501f7-6576-30eb-bae9-089a76033a22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:24:93:77:2e:3a:26:38:a1:46:c8:36:d4:9f:45:b8:ed:c3: eb:8c:4f:83:e4:cc:b6:27:3a:39:c2:4e:9b:aa:7d:44:ac:df: 7e:b1:d1:f1:9b:a7:b4:15:66:ca:3b:0d:c9:5c:99:2d:3b:fe: 44:78:c1:77:95:13:6a:33:41:4a:37:0b:69:94:d1:78:4e:61: 74:39:bd:49:35:cf:a2:7b:7a:f9:58:cd:90:2b:e9:da:d3:96: c7:a1:de:bc:b6:66:5d:d2:84:2b:fb:bc:74:f1:6d:34:ec:2f: dd:4e:ce:a2:a4:a6:3c:92:4c:6b:85:27:8d:23:82:29:cb:07: 17:70:57:ef:42:41:61:74:82:68:cc:34:77:64:e8:40:96:a1: 42:23:5c:a0:30:aa:00:7e:18:bc:27:21:4b:6e:d2:f2:55:d2: 46:47:8b:56:8b:3a:fb:84:92:90:9c:31:b6:2e:a0:0c:86:70: 73:1e:a1:26:bd:d8:a9:05:49:41:17:dd:18:96:42:ef:d6:e6: 6e:7a:f6:f8:1a:13:f7:a3:2f:d2:8c:e4:e8:ec:45:4d:65:d4: 33:57:6d:4d:6b:a9:54:06:2b:12:9c:2e:38:00:fb:22:e2:e6: c5:e7:25:9f:4c:83:d0:d5:c6:3f:04:3e:25:19:71:8f:56:d2: 61:b9:da:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2hpGBCKEyAlr+JEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk OGYzZGZmOTYtOWIxYy00ZTAzLWJkYjAtOGFlYjg5YmQxNDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DLTcDhS5+OIXTRg6T41kn3dUn4Ou3GqnKXz GMFqdlSmJX2uTlimOByTbcXZxEEMrEbBmv8NdeJrd2tWOsz15wwJSINL6LM2GCxv bllzwquBnjXLEk4FTwqJYl6Po61B8HwuxdjlaMMxfElQRIza7c2UeMqTSha/KUhj ZkRjcd7KdGzYPEUQU/ggCpvwM/JDuAURpWMKUqEHCLv3gMkDQZbEKYN9QIdx0YDX kmbSWQqnRCae12/zE83nlxeSJv0z01pM1SY2ouY/tB++/m9MV7X7W99/V2qOt3Mg VV1QneiQei5MW4uvpw/gUxyQYCBjLv3OYO6xOArx9s32cNHPZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOxsEJeQ+m3lp9eGaS0vQjCJ26+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODVhNTAxZjctNjU3Ni0z MGViLWJhZTktMDg5YTc2MDMzYTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGskk3cuOiY4oUbINtSfRbjtw+uMT4PkzLYnOjnCTpuqfUSs336x0fGb p7QVZso7DclcmS07/kR4wXeVE2ozQUo3C2mU0XhOYXQ5vUk1z6J7evlYzZAr6drT lseh3ry2Zl3ShCv7vHTxbTTsL91OzqKkpjySTGuFJ40jginLBxdwV+9CQWF0gmjM NHdk6ECWoUIjXKAwqgB+GLwnIUtu0vJV0kZHi1aLOvuEkpCcMbYuoAyGcHMeoSa9 2KkFSUEX3RiWQu/W5m569vgaE/ejL9KM5OjsRU1l1DNXbU1rqVQGKxKcLjgA+yLi 5sXnJZ9Mg9DVxj8EPiUZcY9W0mG52rk= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:29 2025 by rpki-client