$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/795156b6-7498-321b-9c02-ae19435bf64a.roa File: 795156b6-7498-321b-9c02-ae19435bf64a.roa (raw, json) Hash identifier: Osr8Ls+MOGKViUsUXyjLFJaqtBQH8q2XtTIdPSsVUcs= Subject key identifier: C1:CC:82:AE:5C:6E:91:CF:44:19:1E:25:A4:D6:21:10:47:CF:BD:53 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B52A7596B374C7DBA154EAE00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/795156b6-7498-321b-9c02-ae19435bf64a.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.33.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:59:6b:37:4c:7d:ba:15:4e:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=de789875-3f13-445c-931c-19d615ced5fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:46:2c:7b:c4:c2:42:b0:13:8d:e5:04:5d:a0: d0:fa:25:60:89:2b:e9:8a:e8:9e:b5:22:3b:34:00: 0f:1c:99:3c:c3:d9:5a:ec:9a:19:23:31:ed:69:e7: ed:0c:2a:1b:92:5e:44:d6:21:f6:a9:a6:e7:86:89: 94:5c:60:33:f9:f2:2c:61:d0:e2:86:2c:fe:69:d6: 8d:9c:b7:5f:13:90:78:29:e8:e3:0b:dd:f3:4c:8a: 8e:27:93:06:00:05:be:6b:1d:8a:cd:71:06:c4:71: 1e:30:8d:ac:c2:b4:93:76:51:ee:72:43:e9:e9:29: 3e:b1:78:25:f8:e1:80:72:07:da:21:f6:60:de:f2: aa:cc:d6:83:1b:3f:f9:02:93:ab:ec:2e:5d:da:0d: 05:16:32:92:cf:d6:fb:6d:71:a5:e8:84:84:fa:ce: 3d:ce:29:34:6f:35:53:6e:b4:e0:0b:f2:e2:61:0a: ae:07:07:6e:97:89:52:f7:1f:6b:be:9a:3f:2e:ba: 03:b3:b3:0a:31:cc:6a:a5:6e:25:b7:91:36:53:aa: 82:0d:b4:fb:55:19:6e:62:16:ca:48:fa:e4:ac:a8: 51:11:25:bc:12:8b:fa:ff:c4:cc:63:01:5a:3b:32: 6e:64:14:76:60:2a:22:02:08:a3:df:b1:1c:de:f1: c6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:CC:82:AE:5C:6E:91:CF:44:19:1E:25:A4:D6:21:10:47:CF:BD:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/795156b6-7498-321b-9c02-ae19435bf64a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:e3:11:d5:3c:9a:26:da:8a:dc:df:f2:83:2b:f4:e5:76:a4: d8:08:a6:dc:27:7b:59:86:5d:7d:b3:66:05:c6:e0:30:7f:e1: 2a:6a:b2:1d:11:cf:e6:7d:43:a9:d2:59:32:33:6e:51:f9:2e: 01:66:4e:d2:b8:37:1c:82:89:09:89:ff:41:3c:e7:e3:48:22: 0e:6a:3e:e7:06:7d:d7:a0:0c:f9:48:9c:90:6e:cd:50:96:33: 1a:04:65:41:6d:14:0b:46:a9:e9:d6:a9:12:22:ae:7d:a7:4b: cf:da:6a:e4:be:f8:da:0d:e1:ee:3b:2f:e5:74:88:80:20:4b: 12:a9:51:65:65:b9:c5:35:3c:67:04:f6:8c:39:ad:7d:16:f9: a0:34:9b:a6:dd:3a:d1:4a:fa:1f:41:df:e7:e7:59:ac:c5:5f: f6:af:c6:d1:4d:64:d5:cc:0b:40:de:23:53:4f:5f:8b:e8:0f: 47:3b:a6:71:9a:a0:8e:6d:44:0d:a6:9c:c3:56:3e:15:28:e7: 49:38:81:81:16:08:31:c6:77:d5:65:0e:5b:e8:c6:8c:bb:8a: 5b:c3:c4:d0:1d:f1:e0:95:80:4d:d3:91:2a:7c:5c:29:7c:1b: 9b:72:e3:d3:3d:66:cf:46:ea:3f:21:7d:a4:d1:94:59:af:0b: 67:ad:39:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1lrN0x9uhVOrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZGU3ODk4NzUtM2YxMy00NDVjLTkzMWMtMTlkNjE1Y2VkNWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEYse8TCQrATjeUEXaDQ+iVgiSvpiuietSI7 NAAPHJk8w9la7JoZIzHtaeftDCobkl5E1iH2qabnhomUXGAz+fIsYdDihiz+adaN nLdfE5B4KejjC93zTIqOJ5MGAAW+ax2KzXEGxHEeMI2swrSTdlHuckPp6Sk+sXgl +OGAcgfaIfZg3vKqzNaDGz/5ApOr7C5d2g0FFjKSz9b7bXGl6ISE+s49zik0bzVT brTgC/LiYQquBwdul4lS9x9rvpo/LroDs7MKMcxqpW4lt5E2U6qCDbT7VRluYhbK SPrkrKhRESW8Eov6/8TMYwFaOzJuZBR2YCoiAgij37Ec3vHGkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHMgq5cbpHPRBkeJaTWIRBHz71TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzk1MTU2YjYtNzQ5OC0z MjFiLTljMDItYWUxOTQzNWJmNjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7jEdU8mibaitzf8oMr9OV2pNgIptwne1mGXX2zZgXG4DB/4Spqsh0R z+Z9Q6nSWTIzblH5LgFmTtK4NxyCiQmJ/0E85+NIIg5qPucGfdegDPlInJBuzVCW MxoEZUFtFAtGqenWqRIirn2nS8/aauS++NoN4e47L+V0iIAgSxKpUWVlucU1PGcE 9ow5rX0W+aA0m6bdOtFK+h9B3+fnWazFX/avxtFNZNXMC0DeI1NPX4voD0c7pnGa oI5tRA2mnMNWPhUo50k4gYEWCDHGd9VlDlvoxoy7ilvDxNAd8eCVgE3TkSp8XCl8 G5ty49M9Zs9G6j8hfaTRlFmvC2etOWI= -----END CERTIFICATE-----Generated at Mon Oct 20 15:51:37 2025 by rpki-client