$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/db7d766b-51b9-32a6-aae1-08e7427132fc.roa File: db7d766b-51b9-32a6-aae1-08e7427132fc.roa (raw, json) Hash identifier: V2nkALPNrTSUn+JAvo4d6tnYhZAOka37K/hwqwfoupE= Subject key identifier: A3:AB:36:4E:2F:7B:F4:9D:4A:E2:64:99:E9:4D:0C:B1:05:EF:C1:8F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B0746C90144E105A4F56F9980 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/db7d766b-51b9-32a6-aae1-08e7427132fc.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.33.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:c9:01:44:e1:05:a4:f5:6f:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=e7407999-dd92-4cfd-aea7-cd328c09d64a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7f:9c:99:03:90:f9:a1:b8:e5:2b:de:00:f4: 0b:e2:32:d3:86:c8:d2:35:71:01:8c:4a:8a:50:f9: cc:5f:35:a4:ef:e0:e9:bc:18:78:3e:70:28:db:b7: b6:1a:66:0b:25:f1:5e:45:88:99:de:ea:21:ad:41: 58:f5:61:88:aa:1b:64:84:df:17:4b:1b:1e:96:8e: 40:5f:78:b4:7b:6f:0f:1e:48:77:df:f1:4b:22:6f: 20:09:f1:bb:0b:cb:33:5e:d0:ae:40:7a:3b:ed:56: 0c:4a:25:0b:8d:22:e1:3c:52:d2:07:73:cd:ac:fa: 81:92:ec:00:ce:3c:38:e0:64:a6:03:9f:13:da:d5: 56:4c:79:c2:ad:90:fb:57:dc:3f:05:8b:41:82:f8: ea:12:09:15:b4:d2:3b:09:d5:3f:d9:fc:36:e9:60: a2:77:0d:6f:1d:2d:10:e7:85:28:73:90:52:32:f6: 7a:a5:f2:9d:56:d9:05:57:6c:ca:19:79:09:3e:3e: 06:bc:7b:fe:73:69:81:99:d9:2b:cd:cb:06:c5:09: 62:a1:c7:38:91:8c:b4:a2:a2:43:fb:a7:a3:5f:7d: 05:e0:b6:f0:9b:37:de:6d:2e:84:76:8e:14:13:90: f7:2f:0e:96:5b:ee:b5:40:e8:17:79:19:f7:fc:29: ed:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:AB:36:4E:2F:7B:F4:9D:4A:E2:64:99:E9:4D:0C:B1:05:EF:C1:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/db7d766b-51b9-32a6-aae1-08e7427132fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:f9:68:17:87:e8:57:eb:ea:6d:6f:18:19:1a:ad:1d:f6:c5: 60:02:f2:64:be:5a:f1:d8:4f:6f:82:c0:a7:12:b0:57:a2:97: fd:b2:e0:51:df:77:5f:f0:50:c9:f4:45:4f:dc:16:e7:2a:b5: 02:3a:5c:42:5f:e7:d1:a4:66:0f:1f:05:a7:da:38:1d:5f:3e: b7:c6:43:4f:e8:af:e1:ef:07:7f:5a:5a:ba:3b:46:63:ad:6e: bb:fa:e8:9c:0a:78:18:61:31:e3:31:8d:7c:b7:a8:c7:85:86: de:8a:af:da:1d:74:28:5d:f1:94:c6:29:de:19:08:41:44:de: f9:8e:74:64:ec:91:2c:d1:f2:6a:3c:f1:08:5f:e1:2f:34:01: 38:ba:eb:53:fa:c3:25:2f:24:76:8c:eb:45:25:d2:b3:f1:80: 99:bc:a7:63:c7:2e:de:47:68:51:70:e3:c5:cb:97:af:29:a0: 25:8e:45:f6:74:06:a1:2a:e7:1d:a8:4f:97:ca:e1:6d:3c:b9: 2c:35:d4:44:f2:fd:0b:d5:a6:b9:31:4e:be:dd:39:a4:7c:d1: 0d:7d:b3:08:98:b3:04:31:74:40:48:ff:3a:34:02:c7:fa:ab: dc:68:a4:6f:b4:91:d6:23:5b:f5:0a:f7:25:4b:9c:cd:22:e1: d6:42:88:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRskBROEFpPVvmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk ZTc0MDc5OTktZGQ5Mi00Y2ZkLWFlYTctY2QzMjhjMDlkNjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX+cmQOQ+aG45SveAPQL4jLThsjSNXEBjEqK UPnMXzWk7+DpvBh4PnAo27e2GmYLJfFeRYiZ3uohrUFY9WGIqhtkhN8XSxselo5A X3i0e28PHkh33/FLIm8gCfG7C8szXtCuQHo77VYMSiULjSLhPFLSB3PNrPqBkuwA zjw44GSmA58T2tVWTHnCrZD7V9w/BYtBgvjqEgkVtNI7CdU/2fw26WCidw1vHS0Q 54Uoc5BSMvZ6pfKdVtkFV2zKGXkJPj4GvHv+c2mBmdkrzcsGxQliocc4kYy0oqJD +6ejX30F4LbwmzfebS6Edo4UE5D3Lw6WW+61QOgXeRn3/Cnt+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOrNk4ve/SdSuJkmelNDLEF78GPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGI3ZDc2NmItNTFiOS0z MmE2LWFhZTEtMDhlNzQyNzEzMmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGb5aBeH6Ffr6m1vGBkarR32xWAC8mS+WvHYT2+CwKcSsFeil/2y4FHf d1/wUMn0RU/cFucqtQI6XEJf59GkZg8fBafaOB1fPrfGQ0/or+HvB39aWro7RmOt brv66JwKeBhhMeMxjXy3qMeFht6Kr9oddChd8ZTGKd4ZCEFE3vmOdGTskSzR8mo8 8Qhf4S80ATi661P6wyUvJHaM60Ul0rPxgJm8p2PHLt5HaFFw48XLl68poCWORfZ0 BqEq5x2oT5fK4W08uSw11ETy/QvVprkxTr7dOaR80Q19swiYswQxdEBI/zo0Asf6 q9xopG+0kdYjW/UK9yVLnM0i4dZCiI8= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:25 2025 by rpki-client