$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/27faef1d-1304-3cb0-bbe3-ce6bc9ecbd6f.roa File: 27faef1d-1304-3cb0-bbe3-ce6bc9ecbd6f.roa (raw, json) Hash identifier: WckW3/L1eyYkywZqeoLwtxDtnC1QewnXFVkR2RqZUwA= Subject key identifier: BE:E0:BF:26:94:27:B1:00:1D:91:94:D4:60:BC:F3:49:10:82:F6:B3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B48E1C7935720494ED1544F00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/27faef1d-1304-3cb0-bbe3-ce6bc9ecbd6f.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.33.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:c7:93:57:20:49:4e:d1:54:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=91490805-d8c0-4b7f-a520-ae8495982d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9e:2a:5f:8d:2b:32:a1:49:0c:78:0e:d9:f9: 4d:e8:9b:b4:61:30:e2:98:47:7f:67:ab:2a:4d:eb: 8b:50:73:7a:24:16:c9:25:58:6b:0a:eb:a7:b5:7d: 3f:02:d8:6c:10:33:2d:1d:44:bd:c0:6b:56:d3:55: 8f:a6:f9:e1:53:87:96:d1:a2:b4:28:91:90:4a:eb: 28:f9:ff:58:1e:9c:69:a5:1b:2b:ae:9e:f7:ee:74: be:70:d0:68:bf:91:80:ea:fa:a4:e4:cf:63:5e:84: 41:f7:0a:c8:10:66:8f:7e:0d:34:b7:7a:16:c4:f0: 98:b3:ae:91:91:12:84:2e:fe:de:15:0b:16:dd:48: 80:c1:fc:4e:07:de:8c:2b:6b:59:d2:25:04:fb:85: 0e:77:00:3c:24:1f:2d:b5:d2:33:85:41:57:f7:ef: 81:a9:47:8c:8d:57:73:b1:4b:ae:65:f3:69:22:6e: 38:2b:da:d5:de:86:db:3f:1b:87:86:8b:7e:24:24: 02:50:3b:c5:7f:3e:d6:4b:a2:c0:02:2d:06:9b:9b: 01:a2:78:c0:ca:b6:ac:56:48:06:18:e2:73:ac:48: e9:17:bd:f7:a3:83:20:08:fa:2c:d0:76:66:80:2a: 61:54:f2:92:a2:f5:b3:dc:c2:a5:be:1f:3a:1f:42: 36:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E0:BF:26:94:27:B1:00:1D:91:94:D4:60:BC:F3:49:10:82:F6:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/27faef1d-1304-3cb0-bbe3-ce6bc9ecbd6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:f7:71:61:c2:44:00:94:82:1f:ca:5c:f8:2f:5c:42:eb:11: f1:76:b5:67:04:10:a5:dd:f1:ba:53:a7:44:52:a6:dc:e5:19: 4f:d2:3c:61:ee:92:23:77:52:cc:d2:78:75:c0:76:88:4f:bb: d1:89:8d:b5:f4:89:d2:ef:18:8e:61:5d:83:8f:d2:d2:90:30: 2c:78:6f:98:60:b3:c6:a5:48:30:9e:ec:f7:db:a7:61:f6:41: 76:bb:32:79:ad:73:9a:e4:00:41:fe:5e:bc:bd:fe:10:3a:f1: a7:3b:a3:14:4d:0a:b8:80:00:02:ff:4e:dc:58:f2:b3:c6:15: 82:68:85:6a:e4:6f:c4:41:89:2f:aa:fd:b0:b7:d3:a1:a7:56: 3b:36:15:97:af:b0:0e:38:2a:05:d1:e3:96:51:3f:a5:9a:ae: 7f:63:1c:3b:a1:00:49:24:5d:c7:9d:d6:a0:3e:6c:d1:ad:40: a6:25:27:7e:fa:f4:64:57:04:40:56:aa:0a:76:38:06:f6:64: 33:2d:45:34:43:93:6a:1b:48:48:45:2c:a2:69:7c:e2:6f:a3: 69:ee:f7:89:02:da:b1:45:3f:f3:2b:23:d2:0e:e8:fe:99:79: 6b:5e:1b:b3:59:ad:0e:73:f3:45:01:03:da:b2:fa:c8:9b:89: 4a:16:61:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4ceTVyBJTtFUTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk OTE0OTA4MDUtZDhjMC00YjdmLWE1MjAtYWU4NDk1OTgyZDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJ4qX40rMqFJDHgO2flN6Ju0YTDimEd/Z6sq TeuLUHN6JBbJJVhrCuuntX0/AthsEDMtHUS9wGtW01WPpvnhU4eW0aK0KJGQSuso +f9YHpxppRsrrp737nS+cNBov5GA6vqk5M9jXoRB9wrIEGaPfg00t3oWxPCYs66R kRKELv7eFQsW3UiAwfxOB96MK2tZ0iUE+4UOdwA8JB8ttdIzhUFX9++BqUeMjVdz sUuuZfNpIm44K9rV3obbPxuHhot+JCQCUDvFfz7WS6LAAi0Gm5sBonjAyrasVkgG GOJzrEjpF733o4MgCPos0HZmgCphVPKSovWz3MKlvh86H0I2BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7gvyaUJ7EAHZGU1GC880kQgvazMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjdmYWVmMWQtMTMwNC0z Y2IwLWJiZTMtY2U2YmM5ZWNiZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA33cWHCRACUgh/KXPgvXELrEfF2tWcEEKXd8bpTp0RSptzlGU/SPGHu kiN3UszSeHXAdohPu9GJjbX0idLvGI5hXYOP0tKQMCx4b5hgs8alSDCe7Pfbp2H2 QXa7Mnmtc5rkAEH+Xry9/hA68ac7oxRNCriAAAL/TtxY8rPGFYJohWrkb8RBiS+q /bC306GnVjs2FZevsA44KgXR45ZRP6Warn9jHDuhAEkkXced1qA+bNGtQKYlJ376 9GRXBEBWqgp2OAb2ZDMtRTRDk2obSEhFLKJpfOJvo2nu94kC2rFFP/MrI9IO6P6Z eWteG7NZrQ5z80UBA9qy+sibiUoWYUY= -----END CERTIFICATE-----Generated at Mon Oct 20 16:00:00 2025 by rpki-client