$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/20052b8d-9195-30ba-9869-f02f78771f7c.roa File: 20052b8d-9195-30ba-9869-f02f78771f7c.roa (raw, json) Hash identifier: N+KFD1FeSD2m3XjZ/JQOUvu3RHQ3f8FpCMbPyqDNc8o= Subject key identifier: DB:A4:A8:2B:47:39:42:6A:89:B4:3C:EE:9C:A5:6A:7B:0A:A2:5B:B7 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B153C24D3A9D31D5C49180D40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/20052b8d-9195-30ba-9869-f02f78771f7c.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:24:d3:a9:d3:1d:5c:49:18:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=215becd9-7da0-4630-93a1-83e738347a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:29:ef:8b:d8:16:59:69:0b:cb:29:db:a5:6e: 6d:0a:86:bc:32:71:9e:59:ef:3b:53:dd:6a:f6:99: c6:08:62:ce:dd:3c:10:b0:50:8a:7f:8c:c2:ec:3c: 98:dd:2b:61:e6:43:7a:23:14:28:e8:50:56:fb:16: 21:f1:c7:90:b3:bd:b8:9f:9a:e0:6a:01:d7:a4:f7: 40:fc:cb:7c:57:e2:c6:5a:2a:85:6d:fc:d2:59:5c: 50:d3:1a:77:d5:17:32:b2:7d:d5:ca:4f:92:d2:e2: 36:9a:dc:ad:c5:4f:94:1a:ad:70:af:0d:3b:f3:21: 71:d7:9f:fa:d1:41:73:54:0e:7f:c9:80:cc:7b:e6: e7:13:8e:c5:c8:03:d4:4a:60:9f:57:4d:c0:a8:5d: 23:9b:cf:94:87:27:5d:12:8a:0e:13:75:05:e6:f1: f1:8f:e3:9b:75:9e:9d:c4:78:22:91:54:9e:6a:e2: 16:c9:6b:5a:41:de:ba:60:a8:51:9d:18:75:72:7e: 84:82:ae:42:14:c6:50:4b:cd:2f:4c:f1:38:68:83: aa:67:78:5b:69:e5:9d:12:74:f9:26:94:8d:5d:04: 0b:d6:b9:af:46:92:eb:ff:fa:0d:56:6e:f1:85:bc: ff:ad:c9:e7:74:ef:92:23:d9:9e:fb:2e:06:47:e8: 56:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A4:A8:2B:47:39:42:6A:89:B4:3C:EE:9C:A5:6A:7B:0A:A2:5B:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/20052b8d-9195-30ba-9869-f02f78771f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:77:30:cb:e9:5f:6b:36:18:de:79:41:64:1b:61:36:d2:67: c6:61:18:90:a0:4d:9f:89:a4:90:ea:d3:1c:b0:68:91:db:16: ba:8d:29:09:8e:99:f5:b8:ac:0a:83:18:b0:da:4e:a9:29:1f: 57:96:39:38:3f:28:dc:19:8a:e5:80:79:df:74:91:08:7f:a1: 24:f0:f9:1f:fe:3c:4a:70:80:22:ca:65:b2:f3:7b:81:a3:b5: fa:76:24:63:4e:70:ad:22:c6:51:4b:5d:2c:76:ef:8a:89:48: 73:75:53:14:9e:ea:3c:19:96:b5:e6:35:b0:a5:d7:3a:42:e5: 54:43:8f:e3:d0:f2:e1:88:f0:18:60:3e:00:60:af:68:e9:3e: ff:3f:91:1d:15:41:74:98:a4:fa:77:f2:c1:fd:e6:ff:03:45: 31:55:95:f8:53:cb:6d:b0:f2:f6:07:88:79:6c:8d:83:27:8f: 72:10:9c:34:20:7f:e3:ae:30:ad:ed:c2:d4:a3:58:62:ff:2f: cc:39:fd:39:d8:10:b2:a8:97:7b:dc:55:bb:c5:67:b5:ac:bf: 5a:82:13:f0:7f:3a:44:19:f5:81:cd:c5:9d:e6:e9:05:bf:7a: 5b:fe:40:9e:6e:bb:c7:45:a6:97:a9:a2:5f:0e:b1:98:9b:f9: 5b:d0:32:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPCTTqdMdXEkYDUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk MjE1YmVjZDktN2RhMC00NjMwLTkzYTEtODNlNzM4MzQ3YTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtinvi9gWWWkLyynbpW5tCoa8MnGeWe87U91q 9pnGCGLO3TwQsFCKf4zC7DyY3Sth5kN6IxQo6FBW+xYh8ceQs724n5rgagHXpPdA /Mt8V+LGWiqFbfzSWVxQ0xp31Rcysn3Vyk+S0uI2mtytxU+UGq1wrw078yFx15/6 0UFzVA5/yYDMe+bnE47FyAPUSmCfV03AqF0jm8+UhyddEooOE3UF5vHxj+ObdZ6d xHgikVSeauIWyWtaQd66YKhRnRh1cn6Egq5CFMZQS80vTPE4aIOqZ3hbaeWdEnT5 JpSNXQQL1rmvRpLr//oNVm7xhbz/rcnndO+SI9me+y4GR+hWTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNukqCtHOUJqibQ87pylansKolu3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjAwNTJiOGQtOTE5NS0z MGJhLTk4NjktZjAyZjc4NzcxZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFV3MMvpX2s2GN55QWQbYTbSZ8ZhGJCgTZ+JpJDq0xywaJHbFrqNKQmO mfW4rAqDGLDaTqkpH1eWOTg/KNwZiuWAed90kQh/oSTw+R/+PEpwgCLKZbLze4Gj tfp2JGNOcK0ixlFLXSx274qJSHN1UxSe6jwZlrXmNbCl1zpC5VRDj+PQ8uGI8Bhg PgBgr2jpPv8/kR0VQXSYpPp38sH95v8DRTFVlfhTy22w8vYHiHlsjYMnj3IQnDQg f+OuMK3twtSjWGL/L8w5/TnYELKol3vcVbvFZ7Wsv1qCE/B/OkQZ9YHNxZ3m6QW/ elv+QJ5uu8dFppepol8OsZib+VvQMvA= -----END CERTIFICATE-----Generated at Mon Oct 20 18:36:29 2025 by rpki-client