$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f9b17776-29ce-332b-bfef-70c3a6e26fae.roa File: f9b17776-29ce-332b-bfef-70c3a6e26fae.roa (raw, json) Hash identifier: iWKqFIaQ9jOqxuJWpAYwqWgdnLmd1bTVeKX2zieN/M0= Subject key identifier: 5F:2F:4B:1E:E2:29:13:40:C7:22:AD:CF:EC:5E:DB:82:31:73:2F:75 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BA0D268FF17174105BEF21EC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f9b17776-29ce-332b-bfef-70c3a6e26fae.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 8069 IP address blocks: 20.33.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:68:ff:17:17:41:05:be:f2:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=b80f6290-6065-4aa2-8f5f-8eff822c727c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:24:69:5c:77:63:cf:e1:4e:89:bd:a6:72:8b: 13:56:6b:f5:0f:00:1b:c6:b1:d4:31:11:69:9c:28: a4:9b:85:e5:63:d9:95:f0:d2:d5:20:42:f2:e8:79: 10:33:94:9a:cd:0d:dd:a8:5e:69:54:e8:30:89:e0: 60:1e:2e:9c:f0:52:b9:6d:ae:aa:64:3e:09:05:42: da:d8:5e:24:a6:7d:0f:9d:e3:12:37:d7:7f:43:0e: 97:a8:8b:03:2e:c1:6a:3d:ca:46:f4:0e:7b:03:0b: f9:4f:1f:aa:19:5b:93:59:01:6f:be:37:a4:1d:9b: ee:05:cc:65:ed:54:9b:be:5a:ab:bb:05:9a:5e:09: 18:37:10:23:8b:41:74:19:96:78:a8:36:dd:23:c9: cf:06:f1:5d:4b:81:3b:e7:64:40:5d:6e:65:44:ea: 8f:63:ee:18:ff:01:f6:40:11:d4:c8:8a:28:6e:6f: a1:b0:b5:b4:af:ef:cf:bb:1c:b5:80:65:88:73:b7: a0:43:ec:f1:fc:2c:93:b4:f4:19:da:91:a3:4c:44: 18:5a:24:a1:7a:ba:90:be:0e:75:20:cb:6a:50:4a: e4:bf:53:86:fd:7c:47:c5:50:57:4c:b1:a5:1c:3b: f0:bd:ca:c3:81:d5:91:84:db:1e:a2:9c:c5:49:e2: 7f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2F:4B:1E:E2:29:13:40:C7:22:AD:CF:EC:5E:DB:82:31:73:2F:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f9b17776-29ce-332b-bfef-70c3a6e26fae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:f3:42:e8:75:c7:e2:d3:ea:04:d8:57:b9:f9:d7:42:92:2e: 61:75:ad:53:29:e7:22:3e:01:ec:29:60:25:a9:2a:43:a3:f4: 06:36:88:56:12:e0:c0:31:25:ad:0e:0e:96:c0:19:9c:2a:15: ec:e1:bf:be:c7:40:a6:de:b3:52:26:91:4d:eb:61:af:c2:33: c4:b0:fa:0e:c7:30:5d:cd:d9:75:cd:09:86:89:a6:db:87:88: 23:e5:28:2e:e6:73:2e:ff:90:97:e3:d4:ba:f9:b8:80:01:50: 87:ab:4e:d4:71:3a:69:ff:72:78:7a:df:f3:40:d1:08:19:ec: 29:59:c6:a8:d9:38:d7:41:06:69:1f:c3:c1:be:17:c3:c0:66: 38:5a:4c:7d:84:56:27:46:f8:7b:89:26:c6:09:a7:07:97:17: 6a:92:c9:01:5f:4a:ae:fe:a2:5f:91:8f:86:9d:78:41:ad:16: 00:3d:dd:db:2c:36:3e:6a:9c:ee:ff:7b:9c:07:fc:e0:1d:42: 7c:f1:44:0e:a2:52:75:e1:a1:79:6e:e9:ec:2f:09:7b:18:59: 2d:fd:62:aa:f7:9a:86:c4:5f:85:b3:3a:e3:c2:f8:18:e4:75: 7a:fd:c9:c1:b4:f0:1d:cd:32:40:06:d9:d5:55:5b:d3:a9:45: 95:32:0b:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mj/FxdBBb7yHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YjgwZjYyOTAtNjA2NS00YWEyLThmNWYtOGVmZjgyMmM3MjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSRpXHdjz+FOib2mcosTVmv1DwAbxrHUMRFp nCikm4XlY9mV8NLVIELy6HkQM5SazQ3dqF5pVOgwieBgHi6c8FK5ba6qZD4JBULa 2F4kpn0PneMSN9d/Qw6XqIsDLsFqPcpG9A57Awv5Tx+qGVuTWQFvvjekHZvuBcxl 7VSbvlqruwWaXgkYNxAji0F0GZZ4qDbdI8nPBvFdS4E752RAXW5lROqPY+4Y/wH2 QBHUyIoobm+hsLW0r+/Puxy1gGWIc7egQ+zx/CyTtPQZ2pGjTEQYWiSherqQvg51 IMtqUErkv1OG/XxHxVBXTLGlHDvwvcrDgdWRhNseopzFSeJ/FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8vSx7iKRNAxyKtz+xe24Ixcy91MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjliMTc3NzYtMjljZS0z MzJiLWJmZWYtNzBjM2E2ZTI2ZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfzQuh1x+LT6gTYV7n510KSLmF1rVMp5yI+AewpYCWpKkOj9AY2iFYS 4MAxJa0ODpbAGZwqFezhv77HQKbes1ImkU3rYa/CM8Sw+g7HMF3N2XXNCYaJptuH iCPlKC7mcy7/kJfj1Lr5uIABUIerTtRxOmn/cnh63/NA0QgZ7ClZxqjZONdBBmkf w8G+F8PAZjhaTH2EVidG+HuJJsYJpweXF2qSyQFfSq7+ol+Rj4adeEGtFgA93dss Nj5qnO7/e5wH/OAdQnzxRA6iUnXhoXlu6ewvCXsYWS39Yqr3mobEX4WzOuPC+Bjk dXr9ycG08B3NMkAG2dVVW9OpRZUyC4Q= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:26 2025 by rpki-client