$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/077552f8-4c2c-3394-bab7-d32b77b6b1ee.roa File: 077552f8-4c2c-3394-bab7-d32b77b6b1ee.roa (raw, json) Hash identifier: a820NmGofCd8F8XiTfM+wkW+t845+V1Ioh5BR2Ul4/M= Subject key identifier: BA:60:D4:F4:BA:36:F2:22:BF:19:78:83:FA:01:9C:AC:2A:E5:B5:42 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B92DD43A386E8BEAEE0FFCA80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/077552f8-4c2c-3394-bab7-d32b77b6b1ee.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.33.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:43:a3:86:e8:be:ae:e0:ff:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=c988186f-dd85-4137-8eed-01c913cb8303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ed:11:0e:8e:72:c7:45:d6:9b:e0:14:0b:f1: 51:d4:0b:a5:77:f9:1d:68:c3:0a:03:c3:c7:ee:3d: 7c:2f:4b:71:04:71:a0:94:b5:25:03:91:10:82:70: 21:16:06:64:d6:84:fe:03:c8:95:e3:c6:32:07:ff: b8:f2:0c:c2:4d:24:0d:10:1e:ac:a2:b0:48:67:85: 21:0b:43:df:3e:86:3e:7e:e7:75:ff:e7:bf:73:52: 7e:2a:f4:c7:f3:91:61:4b:1d:49:e5:78:18:97:ed: 43:f3:38:85:5d:4d:e3:cb:c5:ba:3b:26:e2:9a:56: 74:38:1f:72:00:2c:78:80:4f:50:4e:1f:a7:75:cd: 00:63:2d:8a:aa:dd:5d:05:ef:cb:3d:e4:fc:ba:cd: 96:2b:65:cd:1e:9d:46:97:35:59:c9:1f:fe:30:47: 9e:bb:36:de:e8:35:a9:db:cf:96:64:5e:ae:c9:7e: c4:50:83:5e:be:3a:42:41:43:d3:31:e7:6d:dc:29: ef:bc:3a:3b:54:0b:84:16:a8:bb:8c:ac:4f:8e:f6: 47:44:7e:0f:02:78:5a:ed:74:bc:b4:f9:42:71:f4: 91:cc:5e:a8:10:30:02:36:5f:c1:4c:18:bf:fe:dd: 54:1d:5d:3b:cc:4f:f1:ef:84:94:99:77:22:20:f1: 43:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:60:D4:F4:BA:36:F2:22:BF:19:78:83:FA:01:9C:AC:2A:E5:B5:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/077552f8-4c2c-3394-bab7-d32b77b6b1ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:df:81:c4:65:b1:4e:50:1e:b1:64:dc:91:d8:ab:00:66:4e: 10:ca:21:a0:af:0c:01:84:8f:55:36:60:d4:d1:17:1b:d7:7c: 82:47:e0:28:22:c7:a3:67:23:63:63:f4:22:0a:da:2d:a6:27: d9:0b:7d:aa:12:63:3c:4d:6c:9a:80:ba:80:db:ee:42:e2:ce: 9b:ea:32:2f:15:31:27:b3:78:5a:ef:aa:e3:1b:aa:14:8b:fa: d0:df:ef:9d:99:60:2f:59:0d:e4:60:5e:0e:ee:ba:24:b1:82: d5:58:b6:59:c6:3c:9a:ae:4e:bc:7f:a6:12:93:f6:62:b6:c3: 89:29:7e:d2:77:55:05:9f:f4:24:4d:4f:f6:4e:a1:21:43:39: d9:37:ba:86:d9:67:f7:0c:4d:36:5c:d4:a5:68:cd:d0:35:ce: 0e:0e:ca:c2:11:48:4f:fc:52:5e:77:82:d4:6f:36:69:64:aa: 16:1f:e9:1c:a1:3d:da:2c:56:9f:ff:1f:1e:6e:94:7a:a4:90: 1a:39:3b:97:9f:42:fd:d9:5a:4f:34:27:40:6d:fa:fe:4a:0b: 06:3a:4b:62:92:5f:10:4a:94:68:a7:e9:58:8d:98:dd:89:85: 1e:80:c2:76:99:16:36:01:67:92:e4:d4:08:3e:70:23:f1:04: 6a:66:37:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3UOjhui+ruD/yoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk Yzk4ODE4NmYtZGQ4NS00MTM3LThlZWQtMDFjOTEzY2I4MzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu0RDo5yx0XWm+AUC/FR1Auld/kdaMMKA8PH 7j18L0txBHGglLUlA5EQgnAhFgZk1oT+A8iV48YyB/+48gzCTSQNEB6sorBIZ4Uh C0PfPoY+fud1/+e/c1J+KvTH85FhSx1J5XgYl+1D8ziFXU3jy8W6OybimlZ0OB9y ACx4gE9QTh+ndc0AYy2Kqt1dBe/LPeT8us2WK2XNHp1GlzVZyR/+MEeeuzbe6DWp 28+WZF6uyX7EUINevjpCQUPTMedt3CnvvDo7VAuEFqi7jKxPjvZHRH4PAnha7XS8 tPlCcfSRzF6oEDACNl/BTBi//t1UHV07zE/x74SUmXciIPFDkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpg1PS6NvIivxl4g/oBnKwq5bVCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDc3NTUyZjgtNGMyYy0z Mzk0LWJhYjctZDMyYjc3YjZiMWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTfgcRlsU5QHrFk3JHYqwBmThDKIaCvDAGEj1U2YNTRFxvXfIJH4Cgi x6NnI2Nj9CIK2i2mJ9kLfaoSYzxNbJqAuoDb7kLizpvqMi8VMSezeFrvquMbqhSL +tDf752ZYC9ZDeRgXg7uuiSxgtVYtlnGPJquTrx/phKT9mK2w4kpftJ3VQWf9CRN T/ZOoSFDOdk3uobZZ/cMTTZc1KVozdA1zg4OysIRSE/8Ul53gtRvNmlkqhYf6Ryh PdosVp//Hx5ulHqkkBo5O5efQv3ZWk80J0Bt+v5KCwY6S2KSXxBKlGin6ViNmN2J hR6AwnaZFjYBZ5Lk1Ag+cCPxBGpmN0M= -----END CERTIFICATE-----Generated at Mon Oct 20 16:00:05 2025 by rpki-client