$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b98b3835-cb67-3eb6-9902-27ecb2f277ce.roa File: b98b3835-cb67-3eb6-9902-27ecb2f277ce.roa (raw, json) Hash identifier: T+xPjs6xZ+XSNtoqYNGUqgpZUjHiwsNS4V8NZMpINgY= Subject key identifier: DC:54:B5:1E:AF:F4:18:46:0D:38:40:33:8E:07:69:D3:6C:84:D4:9A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B23318B3C06FF506691D423C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b98b3835-cb67-3eb6-9902-27ecb2f277ce.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:8b:3c:06:ff:50:66:91:d4:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=5118c41f-6398-43b1-a950-478613b2e650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d4:e3:90:36:34:c5:32:9d:ef:da:e7:42:67: 59:9a:cb:c9:e8:19:03:81:18:1f:4a:b5:ae:47:3f: f4:ab:c5:bc:19:fd:14:bb:02:3e:47:ee:8f:17:b8: 1b:2f:90:8e:f6:9c:37:59:21:95:97:ca:42:2f:86: de:81:a2:84:92:5e:6f:51:81:74:e0:6c:90:0f:5b: 23:0c:4b:1a:e4:ba:48:6f:e3:e7:21:ae:61:9b:ec: 70:af:83:dc:a4:92:38:78:f3:49:76:7b:cd:10:79: 27:b8:9d:42:c2:1d:3f:1c:74:bc:8e:d5:5b:64:69: 7e:13:df:65:f4:e8:9f:a3:78:6d:6b:71:ab:05:24: 05:9a:7e:bc:e0:53:c9:01:c6:d5:13:f1:de:d9:0a: 67:6f:a8:c9:de:51:85:1f:f3:67:1e:58:9a:ce:cd: 27:7d:d2:13:78:24:68:c3:92:df:cd:6a:68:c0:72: 5c:7f:fb:f8:1f:7b:0f:14:11:5a:8c:d9:fd:04:95: 90:a4:c1:4f:49:2b:b4:eb:d2:1f:bf:c2:bf:ef:c2: 20:60:9e:53:2a:9d:3a:96:28:ad:33:66:fb:59:37: 9b:ad:0e:87:b3:86:db:ca:39:5e:2b:3d:26:94:9b: d2:bd:0e:30:57:d7:6b:07:64:cb:e2:a4:c8:5b:fb: a6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:54:B5:1E:AF:F4:18:46:0D:38:40:33:8E:07:69:D3:6C:84:D4:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b98b3835-cb67-3eb6-9902-27ecb2f277ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:c1:70:99:60:b9:d7:90:5b:b5:33:20:ce:dd:98:8c:26:55: 20:22:52:1d:c8:70:de:fb:c7:aa:a5:b3:fe:22:f8:7d:8f:19: 37:63:fb:e3:be:e8:01:44:c7:06:44:73:e2:7b:ba:fb:83:be: 81:04:11:26:e5:5a:dd:ee:55:28:6b:4a:54:70:49:31:3e:8c: 4d:4e:0c:eb:19:1e:fe:90:96:75:2f:c5:e2:14:6d:c1:3a:52: ac:64:68:3a:55:9e:d0:89:7b:37:a8:42:71:69:8b:1d:19:36: 75:d3:40:09:e2:d6:dc:45:82:bf:6d:04:b5:60:7c:75:21:32: 23:94:9d:8a:f6:93:a7:3f:73:88:55:b4:18:1c:8b:26:c5:d6: 1a:d1:f0:0d:c1:09:42:05:c0:b1:e4:3c:01:d9:dc:d7:be:f5: 46:cf:fc:58:8e:a7:a7:3b:15:f3:90:b5:13:61:b0:8b:20:f4: f5:40:3f:70:2b:2d:7b:48:88:d5:4a:e6:49:95:85:cd:91:77: cd:1f:fb:5a:73:6e:3e:8c:fa:0d:24:69:38:27:62:2a:71:4b: 7b:d6:c1:6f:45:48:2b:10:17:1f:85:ff:19:96:b1:51:ec:fb: d3:40:53:40:0e:d1:fd:81:33:10:14:8b:aa:6a:f9:7f:fe:f1: dc:67:ad:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMYs8Bv9QZpHUI8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk NTExOGM0MWYtNjM5OC00M2IxLWE5NTAtNDc4NjEzYjJlNjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtTjkDY0xTKd79rnQmdZmsvJ6BkDgRgfSrWu Rz/0q8W8Gf0UuwI+R+6PF7gbL5CO9pw3WSGVl8pCL4begaKEkl5vUYF04GyQD1sj DEsa5LpIb+PnIa5hm+xwr4PcpJI4ePNJdnvNEHknuJ1Cwh0/HHS8jtVbZGl+E99l 9Oifo3hta3GrBSQFmn684FPJAcbVE/He2Qpnb6jJ3lGFH/NnHliazs0nfdITeCRo w5LfzWpowHJcf/v4H3sPFBFajNn9BJWQpMFPSSu069Ifv8K/78IgYJ5TKp06liit M2b7WTebrQ6Hs4bbyjleKz0mlJvSvQ4wV9drB2TL4qTIW/umsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxUtR6v9BhGDThAM44HadNshNSaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjk4YjM4MzUtY2I2Ny0z ZWI2LTk5MDItMjdlY2IyZjI3N2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLBcJlgudeQW7UzIM7dmIwmVSAiUh3IcN77x6qls/4i+H2PGTdj++O+ 6AFExwZEc+J7uvuDvoEEESblWt3uVShrSlRwSTE+jE1ODOsZHv6QlnUvxeIUbcE6 UqxkaDpVntCJezeoQnFpix0ZNnXTQAni1txFgr9tBLVgfHUhMiOUnYr2k6c/c4hV tBgciybF1hrR8A3BCUIFwLHkPAHZ3Ne+9UbP/FiOp6c7FfOQtRNhsIsg9PVAP3Ar LXtIiNVK5kmVhc2Rd80f+1pzbj6M+g0kaTgnYipxS3vWwW9FSCsQFx+F/xmWsVHs +9NAU0AO0f2BMxAUi6pq+X/+8dxnrV4= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:14 2025 by rpki-client