$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/15b8ea23-07fb-3a03-8985-782f3956608b.roa File: 15b8ea23-07fb-3a03-8985-782f3956608b.roa (raw, json) Hash identifier: oQj1i7ec5yT5FK7m6t5a5tcWa5RxaoqVkkEbZw3kauc= Subject key identifier: B1:21:EB:23:A4:24:82:A9:7E:4A:CE:35:F8:C7:E8:B5:77:CE:35:E9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B23318B28000D3E45F816BE80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/15b8ea23-07fb-3a03-8985-782f3956608b.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:8b:28:00:0d:3e:45:f8:16:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=8f9bc62f-2234-4e1b-8836-9c21f6568c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e9:6e:c1:01:84:ab:3e:d7:dc:db:ad:35:da: 68:78:b9:0e:14:91:39:42:cb:e4:c2:f6:34:08:de: cb:9f:4f:27:f6:ed:e8:51:9a:33:d7:ce:a4:0a:b1: d6:52:15:10:a7:87:4e:35:99:0b:c4:df:b8:a4:73: 5e:15:ec:b9:67:16:67:ba:28:65:27:d7:3b:f0:ed: 97:67:5f:bb:16:72:67:e3:d0:ac:51:7a:e7:e6:ad: 82:6d:c0:b4:85:2f:c3:fb:40:1e:e8:44:8c:5f:9d: d5:67:14:82:29:9a:3f:ca:86:77:b8:32:6c:87:0a: ea:dd:f1:b4:3c:f2:92:65:5c:e2:26:a2:0c:ea:2b: 0f:de:b7:45:fd:3a:81:42:ca:7f:cc:e8:0a:79:dd: c5:f7:9d:17:59:3c:70:52:09:37:8c:dc:10:f1:a8: 68:25:0c:07:db:c3:74:da:49:46:9a:f6:44:00:7d: d3:27:cd:1d:f0:05:70:d1:5f:42:3e:53:50:9e:fa: 6a:df:5f:c3:b4:7a:66:ab:a8:19:a1:a5:68:4d:d4: cf:82:32:94:6d:db:52:08:d2:55:ab:f6:d8:48:62: 9a:36:01:ad:c1:8a:da:6c:fa:9f:0c:da:8f:72:a8: ef:89:3c:2a:cb:4c:0b:a5:d1:91:ed:83:cc:e4:b9: 75:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:21:EB:23:A4:24:82:A9:7E:4A:CE:35:F8:C7:E8:B5:77:CE:35:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/15b8ea23-07fb-3a03-8985-782f3956608b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:3f:63:f7:1e:49:e7:23:41:89:8d:70:7e:31:a0:8c:ad:82: 7b:cc:fb:0c:78:25:c9:69:10:9b:54:86:91:2c:1e:fb:38:80: 0a:24:f7:a9:50:36:17:4b:d6:f6:fc:33:65:de:fa:2b:60:6b: 24:c2:1c:fa:db:df:89:3e:0a:a9:78:79:74:c6:5e:8c:c9:36: ed:57:65:07:e8:dc:1e:c2:af:42:25:22:76:da:d8:45:17:c3: c0:11:5c:6f:68:e8:0b:88:90:68:80:96:56:9d:fb:76:51:03: c2:b0:54:f6:a8:17:d6:5d:33:77:c5:e4:9e:1f:fe:5b:e0:66: eb:64:ff:d5:63:ce:a1:f1:4e:f0:5a:59:a5:7a:d7:a3:89:db: ba:ab:d4:85:c5:ad:79:84:05:60:34:5c:f9:fa:b1:e0:ac:a8: f5:af:d0:0b:11:12:d6:f2:75:ef:92:90:3c:d5:ce:8b:9f:ff: 23:86:7f:42:24:a6:ba:3a:2f:15:e1:26:84:ae:25:95:13:76: 13:93:23:81:a1:c5:fd:af:45:aa:b5:63:e8:69:db:dd:d4:23: 6d:51:17:23:da:4c:14:30:d7:6f:a7:84:b2:cf:9d:29:03:40: 4c:73:58:e2:45:52:75:33:ca:93:7a:26:f9:ef:b0:af:64:37: 88:4d:fb:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMYsoAA0+RfgWvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk OGY5YmM2MmYtMjIzNC00ZTFiLTg4MzYtOWMyMWY2NTY4YzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquluwQGEqz7X3NutNdpoeLkOFJE5QsvkwvY0 CN7Ln08n9u3oUZoz186kCrHWUhUQp4dONZkLxN+4pHNeFey5ZxZnuihlJ9c78O2X Z1+7FnJn49CsUXrn5q2CbcC0hS/D+0Ae6ESMX53VZxSCKZo/yoZ3uDJshwrq3fG0 PPKSZVziJqIM6isP3rdF/TqBQsp/zOgKed3F950XWTxwUgk3jNwQ8ahoJQwH28N0 2klGmvZEAH3TJ80d8AVw0V9CPlNQnvpq31/DtHpmq6gZoaVoTdTPgjKUbdtSCNJV q/bYSGKaNgGtwYrabPqfDNqPcqjviTwqy0wLpdGR7YPM5Ll1vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEh6yOkJIKpfkrONfjH6LV3zjXpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTViOGVhMjMtMDdmYi0z YTAzLTg5ODUtNzgyZjM5NTY2MDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHg/Y/ceSecjQYmNcH4xoIytgnvM+wx4JclpEJtUhpEsHvs4gAok96lQ NhdL1vb8M2Xe+itgayTCHPrb34k+Cql4eXTGXozJNu1XZQfo3B7Cr0IlInba2EUX w8ARXG9o6AuIkGiAllad+3ZRA8KwVPaoF9ZdM3fF5J4f/lvgZutk/9VjzqHxTvBa WaV616OJ27qr1IXFrXmEBWA0XPn6seCsqPWv0AsREtbyde+SkDzVzouf/yOGf0Ik pro6LxXhJoSuJZUTdhOTI4Ghxf2vRaq1Y+hp293UI21RFyPaTBQw12+nhLLPnSkD QExzWOJFUnUzypN6JvnvsK9kN4hN+xg= -----END CERTIFICATE-----Generated at Mon Oct 20 15:51:22 2025 by rpki-client