$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/44452d33-9f71-38a1-8ce2-f9548e3b6b7e.roa File: 44452d33-9f71-38a1-8ce2-f9548e3b6b7e.roa (raw, json) Hash identifier: QLXB4QTWsJaiiUU5gmJXk8FVMjnQVmaz1SZjUeOCOb0= Subject key identifier: D2:F1:7E:0B:D9:FF:E1:BF:C7:F5:7C:68:32:86:C1:F4:82:78:A5:78 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B153C11D963099A6C90ED4180 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/44452d33-9f71-38a1-8ce2-f9548e3b6b7e.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:11:d9:63:09:9a:6c:90:ed:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=49aeebcf-2f7c-443d-a481-394422cbdae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:18:e3:ea:9f:50:8a:73:6e:9d:1e:b0:10:5c: 7a:35:fc:6d:2e:50:cb:e3:e8:d2:a4:ed:4d:f2:88: 27:84:c8:f7:1c:29:5e:64:2f:5c:f2:5f:a2:e4:70: bc:d3:7a:48:ca:70:bc:12:d4:2f:30:0c:c9:cb:b6: 4e:aa:a1:06:f7:49:92:a8:4a:6d:f0:de:f2:77:49: db:6c:0f:ad:f3:8b:1c:24:e7:4f:18:c1:90:0f:90: 89:57:78:6f:18:39:8e:d2:54:b9:84:74:68:cc:27: e3:56:c8:40:85:bb:28:a1:89:8e:11:cf:7f:f3:6c: dd:93:86:f0:77:a6:fc:70:97:f2:8c:77:12:66:f9: a2:64:0e:91:7d:9f:62:65:35:61:83:bd:d3:0a:d9: ec:e9:c0:07:60:d0:34:a0:63:c1:9b:b7:b9:b8:04: 92:59:ed:a5:fe:01:16:12:fb:de:59:9e:ca:31:71: df:62:49:a6:ea:78:0d:8d:60:56:8b:f6:ce:9d:de: ba:51:7a:b6:e7:42:32:a9:04:42:51:a7:52:f6:0d: 35:cf:3e:57:c1:5d:db:16:4f:35:51:2a:71:7b:30: e0:bf:10:cb:c4:19:03:01:55:ac:59:d0:77:de:02: 30:a2:13:3f:5a:0d:63:bf:c3:50:4b:7e:72:a4:46: 09:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F1:7E:0B:D9:FF:E1:BF:C7:F5:7C:68:32:86:C1:F4:82:78:A5:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/44452d33-9f71-38a1-8ce2-f9548e3b6b7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:97:56:ff:12:dd:b8:c6:d0:5d:b4:d8:9f:90:bb:d8:c2:85: 81:c4:06:71:d5:75:49:69:01:7b:9d:45:5e:86:b7:1a:39:17: 97:fd:b2:d4:ea:c6:f6:24:7d:0f:9d:0d:a7:c9:cb:50:23:0e: 39:ba:89:b8:0b:eb:1e:14:05:30:5f:11:f6:9f:3a:50:b9:5b: 11:58:e9:e6:52:52:9c:92:5f:67:0e:f1:dd:5e:54:ad:a5:61: 33:d5:66:a9:87:96:54:c1:8e:e4:07:4b:f8:6e:2e:dd:e6:25: c5:b2:1a:23:11:2d:4f:d4:db:93:d3:5c:41:1c:d0:3b:96:6d: f9:85:95:c0:ff:54:d7:04:fd:c1:f0:e4:d7:e4:0c:6c:db:9f: 41:b2:2f:fe:1e:ed:21:7b:0f:7d:af:ef:48:80:0a:65:11:f8: 13:ae:fd:d4:8d:17:45:c3:fe:5a:53:a7:ff:2c:a2:b9:ed:f7: 22:3a:17:b9:9a:6c:39:fd:17:67:1b:2b:e0:96:27:d1:e5:ed: 3b:0e:ba:19:61:4e:85:d5:81:eb:ab:e3:22:60:e0:64:b0:e0: 8f:c0:dc:4c:9b:ec:b3:b0:17:f6:26:8a:fe:e0:62:48:6e:36: dd:27:6c:fe:ab:ea:89:3d:76:65:cb:c6:dc:e1:fb:f6:f7:04: 08:2b:d2:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBHZYwmabJDtQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk NDlhZWViY2YtMmY3Yy00NDNkLWE0ODEtMzk0NDIyY2JkYWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRjj6p9QinNunR6wEFx6NfxtLlDL4+jSpO1N 8ognhMj3HCleZC9c8l+i5HC803pIynC8EtQvMAzJy7ZOqqEG90mSqEpt8N7yd0nb bA+t84scJOdPGMGQD5CJV3hvGDmO0lS5hHRozCfjVshAhbsooYmOEc9/82zdk4bw d6b8cJfyjHcSZvmiZA6RfZ9iZTVhg73TCtns6cAHYNA0oGPBm7e5uASSWe2l/gEW EvveWZ7KMXHfYkmm6ngNjWBWi/bOnd66UXq250IyqQRCUadS9g01zz5XwV3bFk81 USpxezDgvxDLxBkDAVWsWdB33gIwohM/Wg1jv8NQS35ypEYJEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLxfgvZ/+G/x/V8aDKGwfSCeKV4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDQ0NTJkMzMtOWY3MS0z OGExLThjZTItZjk1NDhlM2I2YjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWXVv8S3bjG0F202J+Qu9jChYHEBnHVdUlpAXudRV6Gtxo5F5f9stTq xvYkfQ+dDafJy1AjDjm6ibgL6x4UBTBfEfafOlC5WxFY6eZSUpySX2cO8d1eVK2l YTPVZqmHllTBjuQHS/huLt3mJcWyGiMRLU/U25PTXEEc0DuWbfmFlcD/VNcE/cHw 5NfkDGzbn0GyL/4e7SF7D32v70iACmUR+BOu/dSNF0XD/lpTp/8sornt9yI6F7ma bDn9F2cbK+CWJ9Hl7TsOuhlhToXVgeur4yJg4GSw4I/A3Eyb7LOwF/Ymiv7gYkhu Nt0nbP6r6ok9dmXLxtzh+/b3BAgr0u4= -----END CERTIFICATE-----Generated at Mon Oct 20 15:51:17 2025 by rpki-client