$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6bd5db9a-f36f-3176-9d56-0cd93acf873e.roa File: 6bd5db9a-f36f-3176-9d56-0cd93acf873e.roa (raw, json) Hash identifier: BIOYCvN/LVu/Ncv38D/ZYmsb5ZQysrUlIfbl5YcGaBs= Subject key identifier: BE:EC:03:D2:DC:45:E8:A8:7F:52:BC:B7:26:00:02:82:60:81:B9:78 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B0CDC2246D8C1B6C67A05BA00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6bd5db9a-f36f-3176-9d56-0cd93acf873e.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 8069 IP address blocks: 20.33.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:22:46:d8:c1:b6:c6:7a:05:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=36c02cc6-a5f3-44ae-9edf-29bc2e83104e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1e:1a:a3:73:8f:79:e4:a2:01:6d:5e:ad:9a: 4c:fe:73:4a:30:fa:b1:6f:90:87:91:cd:de:08:1c: 90:21:f9:50:c0:11:ca:4e:a1:4f:18:03:1b:df:a0: 88:22:5a:0c:0b:09:b1:9e:1f:c8:61:08:41:0c:72: db:c0:a9:73:c6:03:25:9b:0e:59:9c:c1:b1:b5:b2: 31:8c:72:37:93:46:b4:63:ee:73:68:b0:2f:e8:95: 48:73:4f:c7:c0:5a:0f:3e:ce:d6:09:86:19:d4:78: 0a:41:bf:91:78:db:31:ad:07:17:69:36:a2:2b:67: 7b:20:4d:de:e3:48:5b:00:ea:4b:92:5f:e2:16:cb: 4f:79:39:ce:bc:21:b1:0b:8b:de:68:95:9d:9a:48: 75:b6:cb:e3:62:51:81:76:2c:3a:2c:a5:d2:4e:a6: a0:32:af:03:61:9c:6c:e1:71:27:9c:b9:55:59:f8: d3:2d:1c:6c:fe:01:01:71:ce:7d:8d:95:82:db:07: 9d:8b:7d:9a:1a:d0:a8:70:c5:cf:6d:47:7a:ad:ad: 71:3a:64:44:8a:95:9e:55:bc:69:46:df:7f:0d:2a: 9e:75:61:be:9d:0b:5f:2f:25:5b:59:58:c1:cb:64: 7d:de:cf:2a:3c:9e:3c:a5:d2:41:ac:e5:ca:a8:99: e5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:EC:03:D2:DC:45:E8:A8:7F:52:BC:B7:26:00:02:82:60:81:B9:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6bd5db9a-f36f-3176-9d56-0cd93acf873e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:06:b1:2e:32:d2:eb:bd:2f:87:cc:0e:ad:8f:73:6c:ca:88: 86:6c:45:2e:fd:fd:e3:2c:ac:0d:a3:bf:77:2d:75:b9:6a:ee: bf:6c:88:9e:5a:66:63:46:02:cf:ca:4e:04:2b:7f:90:4a:3f: 12:a9:c0:1c:4d:12:f3:72:49:81:a5:ed:35:e6:33:05:5a:7e: 82:c1:fa:23:63:95:ea:4e:41:6d:29:7e:d8:e1:b2:d6:f8:15: 4d:ab:87:12:e0:30:7c:2c:cf:57:ed:00:44:f7:84:8f:e5:5b: e3:8a:84:e0:a9:de:6a:d0:e5:5e:f5:c0:88:15:ea:fc:43:c4: 73:e5:4f:46:a8:5d:ef:5d:74:85:48:20:66:a1:b9:da:10:c0: 38:c3:6a:8c:18:ea:a9:8c:5c:54:51:40:ad:4e:00:ee:96:31: a9:70:bc:95:23:86:45:31:d7:0c:69:89:be:4c:cb:7d:5d:26: 90:19:32:ed:52:7b:5d:4e:2b:c9:93:0c:d5:d3:de:75:d0:4a: 64:d4:07:e6:28:62:5f:16:57:22:f9:c5:55:17:99:81:7c:1a: c7:df:9e:d2:07:0d:48:89:9a:f4:45:e3:e6:66:f6:93:02:03: ae:85:c8:f9:59:b5:2f:9a:53:d7:da:5e:5b:6a:75:db:e6:dd: cc:5f:af:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3CJG2MG2xnoFugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk MzZjMDJjYzYtYTVmMy00NGFlLTllZGYtMjliYzJlODMxMDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjR4ao3OPeeSiAW1erZpM/nNKMPqxb5CHkc3e CByQIflQwBHKTqFPGAMb36CIIloMCwmxnh/IYQhBDHLbwKlzxgMlmw5ZnMGxtbIx jHI3k0a0Y+5zaLAv6JVIc0/HwFoPPs7WCYYZ1HgKQb+ReNsxrQcXaTaiK2d7IE3e 40hbAOpLkl/iFstPeTnOvCGxC4veaJWdmkh1tsvjYlGBdiw6LKXSTqagMq8DYZxs 4XEnnLlVWfjTLRxs/gEBcc59jZWC2wedi32aGtCocMXPbUd6ra1xOmREipWeVbxp Rt9/DSqedWG+nQtfLyVbWVjBy2R93s8qPJ48pdJBrOXKqJnlfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7sA9LcReiof1K8tyYAAoJggbl4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmJkNWRiOWEtZjM2Zi0z MTc2LTlkNTYtMGNkOTNhY2Y4NzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUGsS4y0uu9L4fMDq2Pc2zKiIZsRS79/eMsrA2jv3ctdblq7r9siJ5a ZmNGAs/KTgQrf5BKPxKpwBxNEvNySYGl7TXmMwVafoLB+iNjlepOQW0pftjhstb4 FU2rhxLgMHwsz1ftAET3hI/lW+OKhOCp3mrQ5V71wIgV6vxDxHPlT0aoXe9ddIVI IGahudoQwDjDaowY6qmMXFRRQK1OAO6WMalwvJUjhkUx1wxpib5My31dJpAZMu1S e11OK8mTDNXT3nXQSmTUB+YoYl8WVyL5xVUXmYF8GsffntIHDUiJmvRF4+Zm9pMC A66FyPlZtS+aU9faXltqddvm3cxfr7M= -----END CERTIFICATE-----Generated at Mon Oct 20 15:51:16 2025 by rpki-client