$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c1f6ce7e-11f3-3197-bf63-44537afda3f2.roa File: c1f6ce7e-11f3-3197-bf63-44537afda3f2.roa (raw, json) Hash identifier: pobW1ouqC0cTcw43aJs12JelK9yq58IcuPYj3FSrQ0k= Subject key identifier: B5:B8:7F:56:A4:6C:60:97:FC:58:1A:3A:33:7D:73:49:27:1E:6C:86 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BA0D2694500033925590FB8F8 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c1f6ce7e-11f3-3197-bf63-44537afda3f2.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 8069 IP address blocks: 20.33.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:69:45:00:03:39:25:59:0f:b8:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=786406c4-21f6-4145-bc25-06f27c3058bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:41:13:cb:91:3a:8c:24:b9:c1:30:a9:ab:7c: 17:34:42:cd:09:1a:73:ee:a0:5d:f6:55:7b:9a:f3: c9:b9:ce:09:d3:bb:32:40:1e:03:3f:e4:31:ce:f3: ea:ed:f7:b6:0d:48:70:6a:5e:04:38:59:19:42:45: f8:fe:15:40:ce:93:67:d0:e7:14:d4:b5:7c:d5:e7: cc:98:da:ca:ec:a0:d4:fb:1e:a9:c3:b4:c1:89:ac: c3:6f:f5:37:02:cd:59:a7:69:f2:81:ad:97:aa:94: d9:d4:c7:e4:1c:21:40:42:e7:f8:a2:ae:9c:36:d9: db:34:f1:73:59:98:8f:0d:09:00:62:73:0a:68:fe: 06:2c:1b:77:7b:16:59:b3:d1:2d:5b:e8:2b:4b:ef: 03:21:a4:bb:8b:65:bd:01:2f:ac:22:5e:ac:c5:ff: 10:e8:73:29:d5:81:e3:41:34:a2:c2:c7:87:4a:71: f2:cc:9c:31:9e:d5:ba:9d:4b:d3:af:11:6f:af:1b: 01:a1:55:59:58:53:8e:79:17:55:24:99:6c:8c:58: 02:44:89:93:83:77:77:a7:e2:29:b7:1f:a2:d4:63: fe:c5:b5:62:7c:1e:10:d0:70:2a:96:9d:87:f8:9a: f0:7e:9d:b0:ff:c1:8c:2e:79:db:f1:ca:47:f3:d7: 88:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B8:7F:56:A4:6C:60:97:FC:58:1A:3A:33:7D:73:49:27:1E:6C:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c1f6ce7e-11f3-3197-bf63-44537afda3f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:72:24:71:95:a5:a2:3e:5f:0d:1c:85:97:33:69:3b:af:49: 16:23:ca:c8:0b:f5:8e:bb:6d:d5:92:32:bf:f2:96:22:c0:f0: 42:59:0b:9e:18:4e:01:6f:11:2a:cb:1e:5f:11:6c:c8:1e:3a: 57:9f:23:25:01:82:3d:89:62:31:79:95:cd:87:34:35:84:8c: 27:40:63:4d:e4:19:d5:61:a4:35:cd:12:56:11:8b:b5:03:f2: cf:92:ad:6f:6a:7c:e6:b2:aa:6e:d8:d3:3f:2d:3f:c9:3e:53: 50:6f:c9:f6:11:1b:f3:06:43:c0:46:16:75:b5:15:5a:00:e7: 15:d6:a5:81:cb:00:9b:cc:7b:a4:26:f0:e9:62:3f:a2:1a:9f: 49:e5:ba:fa:1b:7e:c4:ee:86:ad:66:16:15:77:b5:99:71:b8: 79:00:ec:42:f0:1f:7a:76:64:a0:aa:08:e8:ba:73:fc:e4:85: 5d:7c:eb:74:5d:86:8b:89:20:85:31:55:ca:64:4b:46:51:b8: df:96:64:79:16:77:36:87:07:d9:22:c8:13:93:f3:c7:ab:7b: 32:aa:0c:ac:e4:33:86:5e:41:df:eb:fa:97:8a:12:bb:96:0b: 55:a8:79:d5:c4:5f:08:5f:4d:da:90:33:e3:e6:f5:01:d8:a5: 1a:26:2d:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mlFAAM5JVkPuPgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk Nzg2NDA2YzQtMjFmNi00MTQ1LWJjMjUtMDZmMjdjMzA1OGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEETy5E6jCS5wTCpq3wXNELNCRpz7qBd9lV7 mvPJuc4J07syQB4DP+QxzvPq7fe2DUhwal4EOFkZQkX4/hVAzpNn0OcU1LV81efM mNrK7KDU+x6pw7TBiazDb/U3As1Zp2nyga2XqpTZ1MfkHCFAQuf4oq6cNtnbNPFz WZiPDQkAYnMKaP4GLBt3exZZs9EtW+grS+8DIaS7i2W9AS+sIl6sxf8Q6HMp1YHj QTSiwseHSnHyzJwxntW6nUvTrxFvrxsBoVVZWFOOeRdVJJlsjFgCRImTg3d3p+Ip tx+i1GP+xbVifB4Q0HAqlp2H+Jrwfp2w/8GMLnnb8cpH89eIgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLW4f1akbGCX/FgaOjN9c0knHmyGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzFmNmNlN2UtMTFmMy0z MTk3LWJmNjMtNDQ1MzdhZmRhM2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhyJHGVpaI+Xw0chZczaTuvSRYjysgL9Y67bdWSMr/yliLA8EJZC54Y TgFvESrLHl8RbMgeOlefIyUBgj2JYjF5lc2HNDWEjCdAY03kGdVhpDXNElYRi7UD 8s+SrW9qfOayqm7Y0z8tP8k+U1BvyfYRG/MGQ8BGFnW1FVoA5xXWpYHLAJvMe6Qm 8OliP6Ian0nluvobfsTuhq1mFhV3tZlxuHkA7ELwH3p2ZKCqCOi6c/zkhV1863Rd houJIIUxVcpkS0ZRuN+WZHkWdzaHB9kiyBOT88erezKqDKzkM4ZeQd/r+peKEruW C1WoedXEXwhfTdqQM+Pm9QHYpRomLbk= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:39 2025 by rpki-client