$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/67c70cd1-ed22-3af2-a097-0dd4e22b1941.roa File: 67c70cd1-ed22-3af2-a097-0dd4e22b1941.roa (raw, json) Hash identifier: vmF8ZP/r1fqisGL92zfK017gLEebrS5tFtYpCnzR6U0= Subject key identifier: A2:A6:3D:B2:10:DA:39:10:B2:BE:D0:33:18:5B:A7:A5:20:6D:96:ED Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B047C1D72B8486C9476DA7600 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/67c70cd1-ed22-3af2-a097-0dd4e22b1941.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:1d:72:b8:48:6c:94:76:da:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=47e92395-a4ba-42b3-beb9-87de77db8326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5b:fd:ee:be:85:09:8b:9b:1e:f5:5c:a2:24: c8:6c:f3:d9:08:b5:11:6d:86:83:9b:ba:bb:7f:83: 7e:26:54:22:ff:50:90:70:85:bb:54:b6:93:35:b9: d9:94:4d:11:91:54:9f:e3:66:ab:a6:c3:35:d3:47: d3:eb:4f:2d:6f:33:70:77:65:e2:01:61:76:af:50: 13:60:33:41:76:89:bc:96:98:ed:67:85:06:24:db: 68:4a:3a:59:51:42:3e:a9:8a:9e:21:49:85:6f:5d: e2:e0:b3:3e:d8:8e:29:39:4d:39:7e:57:1a:51:b3: 3d:17:a8:1d:20:eb:c2:c2:f0:79:cf:d3:6a:15:20: 3d:52:12:2a:be:ce:c6:98:d0:f1:bb:04:d5:fc:95: 74:1f:1c:52:a4:31:19:39:b3:d9:f5:b5:d0:22:b0: e8:ed:15:24:c5:0e:1a:dd:e7:6c:d8:b0:42:d1:e7: cb:45:68:d1:88:3a:1b:7b:86:ba:bc:fb:f5:b8:57: e6:ef:59:dc:46:16:14:c2:e5:63:b2:7d:0d:91:56: 6f:29:ec:a4:fd:62:00:7d:ad:c4:f2:bd:65:42:39: 12:35:3f:32:cd:94:00:f3:ea:48:8a:c2:35:5f:75: 2e:a9:2e:98:94:98:f0:fb:89:e5:99:e9:70:77:e3: 6d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A6:3D:B2:10:DA:39:10:B2:BE:D0:33:18:5B:A7:A5:20:6D:96:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/67c70cd1-ed22-3af2-a097-0dd4e22b1941.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:f6:98:67:cc:6a:1d:a4:ae:91:c5:dc:4e:d2:db:c8:8c:04: 45:d9:08:6b:8f:86:ad:16:56:e1:5a:e2:fd:43:68:13:af:5b: 11:6d:0e:6c:af:f7:22:9a:a7:2d:cb:01:10:d0:4c:78:26:83: 11:af:c6:5b:56:fb:a8:dc:79:21:64:f9:ca:d5:1d:ee:71:c7: 70:fc:7e:06:28:c5:e8:f0:70:68:fc:0b:19:2f:2d:d7:1a:f9: f6:c6:bc:58:96:3a:b3:ec:31:c5:7d:a8:34:c5:69:f6:f3:3b: d4:e7:20:0f:7d:c4:55:47:33:d4:ad:20:f9:f5:8f:43:0e:54: 5c:72:7e:fc:b9:18:58:28:bb:62:2d:62:96:c8:81:33:bd:f4: 74:b0:08:c7:bf:4e:5d:67:54:98:e5:a8:be:45:9b:e9:d8:37: 9e:61:05:05:ff:86:9a:a9:58:81:11:23:aa:e6:f2:ec:d9:8c: d4:d5:90:cf:72:3d:aa:f0:86:38:d8:a5:5c:98:3e:11:0b:b2: e8:5c:81:f8:39:1a:31:17:99:90:f3:f3:d3:0d:88:bb:a4:53: 77:ad:b3:7e:aa:f5:9d:9f:a5:30:8a:6e:87:79:15:a3:10:55: c2:b9:fb:6a:1d:0e:f3:c4:81:d6:4e:89:03:a3:e9:0e:6f:76: ec:49:80:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfB1yuEhslHbadgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk NDdlOTIzOTUtYTRiYS00MmIzLWJlYjktODdkZTc3ZGI4MzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVv97r6FCYubHvVcoiTIbPPZCLURbYaDm7q7 f4N+JlQi/1CQcIW7VLaTNbnZlE0RkVSf42arpsM100fT608tbzNwd2XiAWF2r1AT YDNBdom8lpjtZ4UGJNtoSjpZUUI+qYqeIUmFb13i4LM+2I4pOU05flcaUbM9F6gd IOvCwvB5z9NqFSA9UhIqvs7GmNDxuwTV/JV0HxxSpDEZObPZ9bXQIrDo7RUkxQ4a 3eds2LBC0efLRWjRiDobe4a6vPv1uFfm71ncRhYUwuVjsn0NkVZvKeyk/WIAfa3E 8r1lQjkSNT8yzZQA8+pIisI1X3UuqS6YlJjw+4nlmelwd+NtmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKmPbIQ2jkQsr7QMxhbp6UgbZbtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjdjNzBjZDEtZWQyMi0z YWYyLWEwOTctMGRkNGUyMmIxOTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAT2mGfMah2krpHF3E7S28iMBEXZCGuPhq0WVuFa4v1DaBOvWxFtDmyv 9yKapy3LARDQTHgmgxGvxltW+6jceSFk+crVHe5xx3D8fgYoxejwcGj8CxkvLdca +fbGvFiWOrPsMcV9qDTFafbzO9TnIA99xFVHM9StIPn1j0MOVFxyfvy5GFgou2It YpbIgTO99HSwCMe/Tl1nVJjlqL5Fm+nYN55hBQX/hpqpWIERI6rm8uzZjNTVkM9y ParwhjjYpVyYPhELsuhcgfg5GjEXmZDz89MNiLukU3ets36q9Z2fpTCKbod5FaMQ VcK5+2odDvPEgdZOiQOj6Q5vduxJgJI= -----END CERTIFICATE-----Generated at Mon Oct 20 15:51:26 2025 by rpki-client