$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0944b58f-2c51-3787-a810-732d8f208d66.roa File: 0944b58f-2c51-3787-a810-732d8f208d66.roa (raw, json) Hash identifier: vZEAe75WgtX1sIXVErMZK0O7CWQyP/xergGVmGm9fHw= Subject key identifier: 19:7E:BC:C8:47:43:E9:75:8A:06:C1:C1:E6:A6:2C:E8:B4:8B:0A:A5 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B1C36D3FA42CB66FD46FE2C00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0944b58f-2c51-3787-a810-732d8f208d66.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.33.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:d3:fa:42:cb:66:fd:46:fe:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=b0c811fe-74f6-4b51-8a66-48897d03c799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:db:69:46:c5:f1:c3:19:23:94:64:8c:6e:3a: f4:b2:9f:be:13:38:16:be:fd:54:f7:47:51:10:1e: 2d:9c:9c:5e:3e:51:a5:e8:09:5a:35:f6:cb:ae:ac: 26:c5:e8:0a:02:45:2b:6f:4e:25:e5:96:2f:3b:8b: c1:e6:af:3c:48:3a:af:2d:42:70:71:a1:bd:77:0c: 11:a0:2b:a9:cd:75:72:bb:f5:95:60:a6:2d:2e:61: 43:39:44:ba:9b:c4:8c:8b:11:ce:e5:d2:e8:77:db: 17:ac:5f:9f:8d:ad:5f:6c:ea:bb:de:27:28:cb:97: 17:89:c6:e5:2a:13:3b:5f:16:d5:69:63:46:7b:07: 9e:77:88:45:48:77:f7:75:06:2e:6b:f2:72:af:ff: 13:27:05:a5:c6:d1:c5:1a:22:c6:7c:b7:df:9d:12: e9:87:8f:88:f2:f4:b7:6d:8d:ce:60:3b:70:ca:4d: ab:e0:fe:83:5b:86:48:66:08:fa:86:31:5b:3d:32: f6:fc:ba:b1:8f:95:8c:6c:5e:d1:57:63:a4:2d:9f: 7f:93:d0:9b:11:a7:9a:dc:85:f0:78:29:e3:b3:50: 5e:1d:5e:67:12:c3:83:97:64:19:05:72:37:91:55: c0:ee:25:d5:5e:ab:ef:c1:a1:fa:33:8b:c8:b5:5f: 84:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7E:BC:C8:47:43:E9:75:8A:06:C1:C1:E6:A6:2C:E8:B4:8B:0A:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0944b58f-2c51-3787-a810-732d8f208d66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:4f:b6:d0:08:e6:fd:be:ee:c2:a9:6f:34:f2:ef:c6:df:1c: ac:25:8d:cd:a5:91:52:83:b6:a4:0a:f1:6b:49:3f:24:90:7f: a6:f5:99:e5:a6:b1:24:74:83:0e:ae:6d:c7:96:79:62:84:6a: f8:57:54:95:2e:36:50:55:bf:67:27:36:09:a5:9f:29:83:99: 0d:66:cb:52:bd:4b:da:51:9c:5d:c0:93:51:ad:5e:bf:23:22: c3:00:12:ae:6d:bb:17:05:b8:9f:77:48:ec:ad:a1:06:a0:08: 17:24:0e:0c:db:69:19:82:70:fb:ac:9c:4b:ae:6c:ac:cf:e8: 44:35:38:3a:24:10:52:f5:c9:35:7d:bc:0a:b2:d3:b2:a3:9d: 47:2d:82:6f:1b:d8:ca:17:d1:f4:50:50:a9:41:d0:62:6c:b8: e8:e5:47:3d:16:99:a8:b8:90:1e:4e:f3:ac:fb:70:2d:55:06: a5:8a:9f:da:31:64:06:65:b6:c7:b9:d7:2f:b4:d2:75:71:de: d2:31:bb:c9:94:60:6c:e0:2c:0b:df:bf:4a:f6:15:4e:b3:b4: a1:bb:51:a7:66:89:09:d6:cd:0f:59:5d:0f:a7:f9:2d:ef:3e: 13:ce:fd:25:d8:f2:66:9c:7e:0b:ae:b3:70:7f:1a:15:8c:38: f4:fe:de:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNtP6Qstm/Ub+LAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YjBjODExZmUtNzRmNi00YjUxLThhNjYtNDg4OTdkMDNjNzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNtpRsXxwxkjlGSMbjr0sp++EzgWvv1U90dR EB4tnJxePlGl6AlaNfbLrqwmxegKAkUrb04l5ZYvO4vB5q88SDqvLUJwcaG9dwwR oCupzXVyu/WVYKYtLmFDOUS6m8SMixHO5dLod9sXrF+fja1fbOq73icoy5cXicbl KhM7XxbVaWNGeweed4hFSHf3dQYua/Jyr/8TJwWlxtHFGiLGfLffnRLph4+I8vS3 bY3OYDtwyk2r4P6DW4ZIZgj6hjFbPTL2/Lqxj5WMbF7RV2OkLZ9/k9CbEaea3IXw eCnjs1BeHV5nEsODl2QZBXI3kVXA7iXVXqvvwaH6M4vItV+EXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBl+vMhHQ+l1igbBweamLOi0iwqlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDk0NGI1OGYtMmM1MS0z Nzg3LWE4MTAtNzMyZDhmMjA4ZDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9PttAI5v2+7sKpbzTy78bfHKwljc2lkVKDtqQK8WtJPySQf6b1meWm sSR0gw6ubceWeWKEavhXVJUuNlBVv2cnNgmlnymDmQ1my1K9S9pRnF3Ak1GtXr8j IsMAEq5tuxcFuJ93SOytoQagCBckDgzbaRmCcPusnEuubKzP6EQ1ODokEFL1yTV9 vAqy07KjnUctgm8b2MoX0fRQUKlB0GJsuOjlRz0Wmai4kB5O86z7cC1VBqWKn9ox ZAZltse51y+00nVx3tIxu8mUYGzgLAvfv0r2FU6ztKG7UadmiQnWzQ9ZXQ+n+S3v PhPO/SXY8macfguus3B/GhWMOPT+3vw= -----END CERTIFICATE-----Generated at Mon Oct 20 15:57:00 2025 by rpki-client