$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5ff8c82c-02bc-3bf5-bf94-ec73f9393da9.roa File: 5ff8c82c-02bc-3bf5-bf94-ec73f9393da9.roa (raw, json) Hash identifier: qzTP1YG+j3YEcPdeZf3fdiP9a+pT4VKqc9WqtmmYwYM= Subject key identifier: 19:17:F4:84:F5:4C:80:C3:70:8A:B4:63:40:02:75:C5:54:97:2C:00 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B153C27D458DB0D5A092741D0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5ff8c82c-02bc-3bf5-bf94-ec73f9393da9.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:27:d4:58:db:0d:5a:09:27:41:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=2dc39e7b-7f2f-4eb1-86e0-89bc65cba05d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:dc:e6:b3:6b:1c:8c:db:a2:c9:3c:df:1b:9a: 06:f6:35:b1:64:7e:01:de:6d:fe:99:f7:0d:d9:94: 82:f2:b9:e4:99:84:40:75:1d:c9:36:50:10:35:04: 2c:27:6d:c9:62:be:c5:06:ab:3b:21:ce:28:d9:ed: 07:8a:da:c6:a6:6d:ee:b4:dc:59:57:2e:28:dc:86: e0:ca:40:4a:ea:87:0d:85:e9:1f:ce:99:f3:e9:f1: e9:30:43:e9:97:9d:d3:0b:09:9b:33:bb:f3:b1:31: 8e:59:c7:bd:07:3d:c5:87:cf:0c:d6:38:53:df:d6: 66:d8:1e:79:94:5c:f9:09:5a:a4:27:ce:82:54:7a: ea:08:75:5f:ee:cd:d0:51:be:18:f0:c6:dd:35:c5: cd:4f:c1:f2:4d:f6:bb:48:d7:92:44:c2:79:2f:09: 2e:6c:88:cb:7f:3b:22:ea:9a:7d:d8:af:80:75:e3: cf:b9:f7:e2:87:38:94:b4:99:28:f5:63:c6:0c:13: 84:3a:19:1f:36:72:5f:31:d9:62:81:af:62:de:5d: d4:cb:64:6e:ee:ff:98:9a:ca:45:d8:83:a0:00:b3: 31:ad:94:d4:c0:6d:37:0e:a9:f1:a4:83:9b:0e:ee: e2:18:b6:13:9e:d2:57:98:44:2e:72:18:fa:4c:b9: 51:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:17:F4:84:F5:4C:80:C3:70:8A:B4:63:40:02:75:C5:54:97:2C:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5ff8c82c-02bc-3bf5-bf94-ec73f9393da9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d2:62:18:90:a4:50:12:0b:aa:ff:74:8e:96:81:98:c7:19: ae:21:df:5c:6c:1f:28:ed:24:58:35:a2:db:2b:24:bd:56:da: 92:d5:37:40:16:b7:67:93:c5:29:45:de:2c:8d:0c:ec:43:91: bc:bd:b8:bd:33:be:8f:68:dd:e1:92:51:96:2a:49:ed:ee:00: 5a:33:ef:d9:15:cb:f5:c5:a4:67:84:71:c0:f0:bb:d2:3a:64: fa:4d:fa:c4:7d:aa:91:f2:16:ea:66:0f:9c:9a:8c:6c:ab:22: fa:f8:79:75:8c:b4:b3:f4:c7:44:8c:5f:d8:7d:17:c4:07:48: a0:bc:ab:0e:03:ef:0c:f5:fa:56:db:cf:fa:f6:a4:40:a4:a1: 9d:2b:28:b5:ba:8a:62:0d:e7:f4:44:f2:76:14:18:e0:d4:d0: 76:5f:2e:91:2a:1a:99:f5:90:51:6f:aa:31:fa:0a:61:3c:02: 5a:b0:ef:04:0f:74:b1:84:f0:43:05:60:66:41:31:42:47:97: 97:31:24:71:bd:f3:28:9a:d8:37:e7:41:88:f9:1a:f8:a2:f4: 95:44:d2:79:b1:47:29:19:58:2f:da:6f:85:d9:21:7f:35:7d: f3:cd:85:7b:82:59:dd:3b:30:81:13:68:6b:55:d8:55:82:bf: 67:12:d9:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPCfUWNsNWgknQdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk MmRjMzllN2ItN2YyZi00ZWIxLTg2ZTAtODliYzY1Y2JhMDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdzms2scjNuiyTzfG5oG9jWxZH4B3m3+mfcN 2ZSC8rnkmYRAdR3JNlAQNQQsJ23JYr7FBqs7Ic4o2e0HitrGpm3utNxZVy4o3Ibg ykBK6ocNhekfzpnz6fHpMEPpl53TCwmbM7vzsTGOWce9Bz3Fh88M1jhT39Zm2B55 lFz5CVqkJ86CVHrqCHVf7s3QUb4Y8MbdNcXNT8HyTfa7SNeSRMJ5LwkubIjLfzsi 6pp92K+AdePPuffihziUtJko9WPGDBOEOhkfNnJfMdliga9i3l3Uy2Ru7v+YmspF 2IOgALMxrZTUwG03DqnxpIObDu7iGLYTntJXmEQuchj6TLlRtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkX9IT1TIDDcIq0Y0ACdcVUlywAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWZmOGM4MmMtMDJiYy0z YmY1LWJmOTQtZWM3M2Y5MzkzZGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCF3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnSYhiQpFASC6r/dI6WgZjHGa4h31xsHyjtJFg1otsrJL1W2pLVN0AW t2eTxSlF3iyNDOxDkby9uL0zvo9o3eGSUZYqSe3uAFoz79kVy/XFpGeEccDwu9I6 ZPpN+sR9qpHyFupmD5yajGyrIvr4eXWMtLP0x0SMX9h9F8QHSKC8qw4D7wz1+lbb z/r2pECkoZ0rKLW6imIN5/RE8nYUGODU0HZfLpEqGpn1kFFvqjH6CmE8Alqw7wQP dLGE8EMFYGZBMUJHl5cxJHG98yia2DfnQYj5Gvii9JVE0nmxRykZWC/ab4XZIX81 ffPNhXuCWd07MIETaGtV2FWCv2cS2VE= -----END CERTIFICATE-----Generated at Mon Oct 20 20:55:57 2025 by rpki-client