$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/09cc467f-7aad-3430-a565-0591d1cc6aab.roa File: 09cc467f-7aad-3430-a565-0591d1cc6aab.roa (raw, json) Hash identifier: SW5Y6LP8LOTxDa5+HROtmkdi9a+S7JcMKWmAVmewf68= Subject key identifier: B6:03:39:42:9E:F9:EA:7D:81:8B:B3:08:90:A7:9F:0F:09:6B:DD:5D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B1C36D45B4A639A44B9905C40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/09cc467f-7aad-3430-a565-0591d1cc6aab.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.33.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:d4:5b:4a:63:9a:44:b9:90:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=f343a5cd-14ca-43b6-9c6a-ef7b42363c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d8:c9:25:25:08:43:f2:33:00:a3:87:91:9b: a6:b0:26:4b:f8:f3:23:34:c7:54:98:04:a1:8a:c3: 82:48:85:3e:d4:43:5a:6d:85:c5:3f:4b:0d:b5:c9: 7d:8a:14:4c:8d:8e:12:7b:85:28:89:12:61:90:b6: 42:28:3f:0e:80:6a:35:3d:38:45:3e:50:e2:f5:21: 49:a1:82:f4:ff:c1:14:17:af:1a:be:12:cd:7b:4f: c2:be:27:db:24:cb:2d:22:4f:75:f0:e2:0a:a7:75: 2b:c0:fb:cd:9e:7d:15:85:8e:1a:71:cc:bb:9f:4f: 91:3b:e1:b2:d7:4e:e9:06:40:c0:77:f0:0c:47:8c: 86:2a:44:76:72:e0:b5:06:9c:1c:c9:8e:af:65:b9: e1:66:ff:57:06:8a:e5:9c:f0:aa:7a:26:a3:52:be: ce:fc:7b:e8:82:d2:e0:91:8a:0e:83:e2:68:ee:54: c8:ce:32:54:f0:7f:0e:be:33:3a:02:a3:db:1f:53: 59:44:5f:73:8d:86:a7:ba:3b:9d:39:f3:a2:00:5e: d1:0f:d3:0c:c8:d1:e0:80:1e:17:0c:18:de:2d:83: e3:a4:82:57:6b:3a:d9:24:d8:a8:a8:16:f2:e9:9f: 33:e0:d0:5f:99:c6:e9:85:18:80:60:48:02:5a:c3: 54:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:03:39:42:9E:F9:EA:7D:81:8B:B3:08:90:A7:9F:0F:09:6B:DD:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/09cc467f-7aad-3430-a565-0591d1cc6aab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:0c:b7:42:16:37:20:f2:fb:2d:b3:f0:79:c1:a8:40:2f:12: e9:14:21:e3:37:ef:63:c8:1c:d3:3c:fb:0e:dc:f8:22:8a:b5: 52:57:30:9b:ce:93:da:d6:c7:8c:e1:0e:38:89:12:6c:b1:08: 5c:9c:cb:89:95:f9:8c:e9:79:a0:1f:69:17:90:a3:0b:8e:27: b9:ed:59:9d:7f:ea:a1:20:3f:01:9f:06:b0:95:fa:d5:e2:a5: c7:82:88:74:53:08:63:6c:d8:8a:68:0a:a7:bb:9d:c2:64:35: 39:fd:60:04:d4:0b:47:99:52:f2:68:df:9d:58:98:d2:c5:9b: a9:00:72:2b:41:dc:0e:d8:4b:34:a9:b8:fc:b9:73:da:9b:12: b0:ce:e0:64:0b:c3:13:8d:00:90:3b:47:7a:33:8f:3a:41:4a: f2:d1:be:5f:62:9c:b6:0e:39:d9:14:46:08:e4:41:19:19:64: 68:e6:2d:e4:8a:e9:eb:c7:a6:9f:d4:23:24:57:98:97:b9:1a: b3:bc:ce:eb:d9:83:8f:97:d4:8a:a0:4b:1b:d5:45:20:29:22: b8:6d:4c:10:0f:66:21:d5:1e:b2:56:a6:07:02:34:61:01:72: 95:af:cb:3c:81:1f:27:0f:e8:9f:05:4e:b6:cc:83:3d:28:93: 18:16:67:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNtRbSmOaRLmQXEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZjM0M2E1Y2QtMTRjYS00M2I2LTljNmEtZWY3YjQyMzYzYzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNjJJSUIQ/IzAKOHkZumsCZL+PMjNMdUmASh isOCSIU+1ENabYXFP0sNtcl9ihRMjY4Se4UoiRJhkLZCKD8OgGo1PThFPlDi9SFJ oYL0/8EUF68avhLNe0/CvifbJMstIk918OIKp3UrwPvNnn0VhY4accy7n0+RO+Gy 107pBkDAd/AMR4yGKkR2cuC1BpwcyY6vZbnhZv9XBorlnPCqeiajUr7O/HvogtLg kYoOg+Jo7lTIzjJU8H8OvjM6AqPbH1NZRF9zjYanujudOfOiAF7RD9MMyNHggB4X DBjeLYPjpIJXazrZJNioqBby6Z8z4NBfmcbphRiAYEgCWsNUKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYDOUKe+ep9gYuzCJCnnw8Ja91dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDljYzQ2N2YtN2FhZC0z NDMwLWE1NjUtMDU5MWQxY2M2YWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgMt0IWNyDy+y2z8HnBqEAvEukUIeM372PIHNM8+w7c+CKKtVJXMJvO k9rWx4zhDjiJEmyxCFycy4mV+YzpeaAfaReQowuOJ7ntWZ1/6qEgPwGfBrCV+tXi pceCiHRTCGNs2IpoCqe7ncJkNTn9YATUC0eZUvJo351YmNLFm6kAcitB3A7YSzSp uPy5c9qbErDO4GQLwxONAJA7R3ozjzpBSvLRvl9inLYOOdkURgjkQRkZZGjmLeSK 6evHpp/UIyRXmJe5GrO8zuvZg4+X1IqgSxvVRSApIrhtTBAPZiHVHrJWpgcCNGEB cpWvyzyBHycP6J8FTrbMgz0okxgWZyc= -----END CERTIFICATE-----Generated at Mon Oct 20 15:51:11 2025 by rpki-client