$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/537a0bdf-4ba1-339b-a15e-dba503f0b8f4.roa File: 537a0bdf-4ba1-339b-a15e-dba503f0b8f4.roa (raw, json) Hash identifier: sKfY+4CHMNJEiWQEg1OSniPktOZhhVBSEq0NO/B1tX0= Subject key identifier: 42:05:D5:5B:19:DD:F6:1B:13:F6:C4:04:3A:5E:2B:E2:D7:32:D4:B9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B3C51B07AEDE1E952543E3874 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/537a0bdf-4ba1-339b-a15e-dba503f0b8f4.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:b0:7a:ed:e1:e9:52:54:3e:38:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=4ddc8542-d3f3-4670-b26f-1ae7a9e18a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6b:e8:d5:8e:95:08:40:32:76:79:f5:46:dc: af:69:a1:68:d1:19:af:ef:34:b0:a5:66:77:16:ec: ed:10:70:39:94:e4:6f:1c:6e:6d:96:4e:23:b5:8b: 8c:bd:81:f6:6d:b0:03:4d:dd:af:97:50:a0:d3:59: 53:99:c1:ca:88:e0:3f:b6:ac:c1:0d:a4:3a:43:6f: 83:a2:84:3d:9c:08:4a:6b:da:97:e8:43:dd:c0:8f: 01:7f:2b:b7:a6:a2:53:b1:42:6a:78:13:cf:e5:bf: 7a:cc:8c:e2:05:f9:e5:a6:b5:5d:54:c3:97:65:9e: 50:f4:d6:0f:8e:97:1a:72:df:6a:86:ef:7b:77:4b: 4e:95:52:07:e8:2e:a8:b9:60:c9:a5:10:b7:a0:96: 7b:94:55:9e:ee:2f:af:98:27:7c:59:a5:94:37:7d: 04:9a:96:f0:00:33:2a:42:72:67:88:1f:d2:09:c1: 67:88:67:50:ea:b9:d8:01:7e:27:3c:e1:c0:14:aa: 85:a0:1f:0b:ae:69:78:33:ee:54:f5:a4:0f:0b:a8: bd:3f:fd:aa:e5:dd:01:d9:0b:53:45:02:d2:ce:96: 12:33:4f:1e:47:ff:a1:f1:eb:dc:96:79:58:1e:55: 19:ba:25:e1:a6:43:0f:9c:65:2f:d3:e4:e7:ed:f1: 0b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:05:D5:5B:19:DD:F6:1B:13:F6:C4:04:3A:5E:2B:E2:D7:32:D4:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/537a0bdf-4ba1-339b-a15e-dba503f0b8f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:0d:37:e2:6b:eb:be:74:5d:c7:8e:91:57:91:c1:23:af:9c: 06:52:e5:5b:56:48:0f:cf:af:91:fe:1c:bd:9d:61:e3:2d:fd: 82:3b:e1:af:75:49:0e:6c:0d:2d:eb:18:18:4d:8b:c2:c7:fe: d8:a2:54:ec:1b:ed:f8:0e:5b:6c:d2:a5:61:08:34:64:46:cf: 79:3a:90:05:92:75:3d:3d:9a:da:1a:cc:8e:80:8b:1b:32:a6: 8b:30:35:5d:f5:45:ce:75:3e:a4:7f:30:5f:39:56:9b:28:4e: 49:af:f9:76:06:4f:09:3d:e7:31:a3:5f:ab:27:e1:e8:2d:31: 71:f3:71:1a:31:af:fe:f5:ed:1b:ed:58:44:58:b6:61:fc:e7: 1e:47:d5:f4:83:fa:12:c4:2f:49:f6:77:72:12:a3:22:4d:98: 20:f3:55:f4:0b:6e:72:8c:58:50:32:f3:26:bb:64:aa:a8:72: 89:d8:e9:f1:38:a7:3e:f2:99:17:f2:ea:be:19:5d:96:ce:6b: 0e:df:be:4d:00:45:3f:1b:6d:05:32:52:23:9a:74:35:d0:da: ea:bc:85:66:da:80:2b:0a:f9:f2:87:41:ee:d1:58:be:c8:29: 46:e9:fe:39:12:48:02:f8:65:bc:ff:01:28:43:99:69:86:b8: 96:3a:0c:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8UbB67eHpUlQ+OHQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk NGRkYzg1NDItZDNmMy00NjcwLWIyNmYtMWFlN2E5ZTE4YTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2vo1Y6VCEAydnn1RtyvaaFo0Rmv7zSwpWZ3 FuztEHA5lORvHG5tlk4jtYuMvYH2bbADTd2vl1Cg01lTmcHKiOA/tqzBDaQ6Q2+D ooQ9nAhKa9qX6EPdwI8Bfyu3pqJTsUJqeBPP5b96zIziBfnlprVdVMOXZZ5Q9NYP jpcact9qhu97d0tOlVIH6C6ouWDJpRC3oJZ7lFWe7i+vmCd8WaWUN30EmpbwADMq QnJniB/SCcFniGdQ6rnYAX4nPOHAFKqFoB8Lrml4M+5U9aQPC6i9P/2q5d0B2QtT RQLSzpYSM08eR/+h8evclnlYHlUZuiXhpkMPnGUv0+Tn7fELrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIF1VsZ3fYbE/bEBDpeK+LXMtS5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTM3YTBiZGYtNGJhMS0z MzliLWExNWUtZGJhNTAzZjBiOGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYNN+Jr6750XceOkVeRwSOvnAZS5VtWSA/Pr5H+HL2dYeMt/YI74a91 SQ5sDS3rGBhNi8LH/tiiVOwb7fgOW2zSpWEINGRGz3k6kAWSdT09mtoazI6Aixsy poswNV31Rc51PqR/MF85VpsoTkmv+XYGTwk95zGjX6sn4egtMXHzcRoxr/717Rvt WERYtmH85x5H1fSD+hLEL0n2d3ISoyJNmCDzVfQLbnKMWFAy8ya7ZKqoconY6fE4 pz7ymRfy6r4ZXZbOaw7fvk0ART8bbQUyUiOadDXQ2uq8hWbagCsK+fKHQe7RWL7I KUbp/jkSSAL4Zbz/AShDmWmGuJY6DN0= -----END CERTIFICATE-----Generated at Mon Oct 20 20:56:01 2025 by rpki-client