$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8ebe7e82-df85-3231-a9f4-547d1fd54426.roa File: 8ebe7e82-df85-3231-a9f4-547d1fd54426.roa (raw, json) Hash identifier: BQvkrCe5XAkrRIq43NFUAKj5pk3bRnD3t11wS3roDZU= Subject key identifier: 2A:64:13:7A:A1:87:41:11:EC:CB:C2:2B:63:D7:6B:C2:9A:58:03:CC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BA0D26932985D35BBDFF15100 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8ebe7e82-df85-3231-a9f4-547d1fd54426.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 8069 IP address blocks: 20.33.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:69:32:98:5d:35:bb:df:f1:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=6cf2879f-67cd-48be-b990-d73eb4fd624a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:41:c5:57:43:42:d4:77:ce:e1:ad:43:ac:59: cb:1d:70:e8:dc:1f:7b:3c:02:a2:b0:e0:75:6c:b8: e0:f8:76:3a:41:47:26:ac:62:71:da:11:6d:06:b6: 4e:bf:27:3d:d5:bf:99:f6:0b:b4:29:74:89:13:cf: 4b:a4:8f:d3:70:f7:91:ca:a9:57:28:c9:4c:b8:43: a2:71:7b:e5:23:b1:22:22:38:4b:e5:98:de:eb:79: 65:64:ae:f3:14:e3:22:8a:0b:b9:ac:03:28:be:72: 93:d7:6b:b6:0b:2a:5a:02:52:2d:c9:92:49:82:ed: 37:1b:cc:ad:b3:38:e2:8d:ba:53:c2:2a:39:23:2f: 80:25:78:49:a8:92:4a:4f:71:ee:8a:11:85:2b:31: 33:75:14:2f:4c:eb:37:30:8a:1a:fc:07:48:78:d3: 0e:1a:b9:6c:ea:a7:97:a1:ce:dd:f4:a0:fe:d7:92: 2a:e3:75:d5:08:79:47:a4:48:c8:5f:53:b0:01:66: 0f:50:36:45:59:f8:00:70:a4:a5:5c:c3:54:ac:d4: cd:eb:ca:bb:a7:ca:51:3f:83:61:79:11:b7:96:03: 97:7f:9a:d3:fb:32:b0:be:fe:29:90:c6:7a:c2:a2: 86:5f:ea:89:83:b3:28:a3:93:df:91:f0:e4:7e:c8: 51:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:64:13:7A:A1:87:41:11:EC:CB:C2:2B:63:D7:6B:C2:9A:58:03:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8ebe7e82-df85-3231-a9f4-547d1fd54426.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:82:82:96:ba:b1:d6:6c:07:7a:da:1a:e4:44:75:8d:5e:22: 05:7f:74:9d:7b:62:63:8f:a4:e4:33:f4:86:e7:57:94:1d:58: 15:c7:9a:5f:dd:81:ac:f8:be:04:02:b2:34:9c:bf:c6:53:a1: d2:19:16:11:73:4c:94:41:59:2c:af:f2:15:90:7e:f5:9c:58: 45:f1:a9:9b:d5:e4:ff:21:5b:3b:4a:b8:84:53:a9:86:90:53: 68:0f:d2:71:ee:f8:93:cb:90:35:9d:a9:64:d0:64:f8:12:c8: 4d:19:f7:2d:87:26:d9:2d:65:20:3f:a3:b9:8c:00:06:41:e4: 4a:58:d4:85:f8:cb:16:73:74:74:01:98:03:38:2c:14:e8:5d: 85:50:0f:0d:81:b2:0f:27:20:c3:10:4c:ea:2a:0b:68:0e:04: 31:fe:52:98:d0:1f:4f:46:5e:cb:26:f5:32:fa:11:98:b9:44: 77:81:72:4f:be:b2:07:f8:02:e6:6f:c3:bf:0e:c5:2d:4c:18: c2:fb:bd:88:4e:9c:eb:c9:e7:bd:93:01:91:74:d5:c6:6d:05: f8:d8:46:a4:36:6e:ec:0a:d5:5e:c3:c5:93:14:fc:1f:b0:62: 80:4f:07:c3:db:56:3c:61:55:ff:7a:57:c4:c6:09:5c:5a:9e: 92:ca:4f:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mkymF01u9/xUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NmNmMjg3OWYtNjdjZC00OGJlLWI5OTAtZDczZWI0ZmQ2MjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0HFV0NC1HfO4a1DrFnLHXDo3B97PAKisOB1 bLjg+HY6QUcmrGJx2hFtBrZOvyc91b+Z9gu0KXSJE89LpI/TcPeRyqlXKMlMuEOi cXvlI7EiIjhL5Zje63llZK7zFOMiigu5rAMovnKT12u2CypaAlItyZJJgu03G8yt szjijbpTwio5Iy+AJXhJqJJKT3HuihGFKzEzdRQvTOs3MIoa/AdIeNMOGrls6qeX oc7d9KD+15Iq43XVCHlHpEjIX1OwAWYPUDZFWfgAcKSlXMNUrNTN68q7p8pRP4Nh eRG3lgOXf5rT+zKwvv4pkMZ6wqKGX+qJg7Moo5PfkfDkfshRdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpkE3qhh0ER7MvCK2PXa8KaWAPMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOGViZTdlODItZGY4NS0z MjMxLWE5ZjQtNTQ3ZDFmZDU0NDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyCgpa6sdZsB3raGuREdY1eIgV/dJ17YmOPpOQz9IbnV5QdWBXHml/d gaz4vgQCsjScv8ZTodIZFhFzTJRBWSyv8hWQfvWcWEXxqZvV5P8hWztKuIRTqYaQ U2gP0nHu+JPLkDWdqWTQZPgSyE0Z9y2HJtktZSA/o7mMAAZB5EpY1IX4yxZzdHQB mAM4LBToXYVQDw2Bsg8nIMMQTOoqC2gOBDH+UpjQH09GXssm9TL6EZi5RHeBck++ sgf4AuZvw78OxS1MGML7vYhOnOvJ572TAZF01cZtBfjYRqQ2buwK1V7DxZMU/B+w YoBPB8PbVjxhVf96V8TGCVxanpLKT4w= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:47 2025 by rpki-client