$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7ef2643f-2ef0-3242-9320-0ac22ae783f3.roa File: 7ef2643f-2ef0-3242-9320-0ac22ae783f3.roa (raw, json) Hash identifier: oH+4X5wdFu93jUPGmlxA5g6Cd88hVj+MAM83l6o7/CE= Subject key identifier: 2E:72:4A:90:52:23:43:A3:59:EA:FC:FB:27:8A:A3:6F:FF:DA:A8:F6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B52A7597A66995C66FD31E780 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7ef2643f-2ef0-3242-9320-0ac22ae783f3.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.33.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:59:7a:66:99:5c:66:fd:31:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=6773f87a-5320-4bf4-b9e7-14982adc0e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:23:42:b4:b6:d7:f3:47:d7:5e:79:60:1e:7b: 36:b4:5f:6e:fb:13:c9:98:d6:bc:14:b3:0a:8c:26: 23:63:1b:7f:32:d8:7d:4f:be:1a:05:53:1b:a8:c0: 8c:71:72:b5:0c:58:03:15:65:aa:9a:14:1c:92:94: 53:20:c9:90:57:6f:f3:2d:1b:af:06:b4:cf:09:a2: 13:fe:7b:df:c3:84:66:52:15:6c:67:43:15:2f:06: 1f:14:ad:57:30:aa:08:0d:b8:2f:06:c2:a1:28:01: cc:f9:ba:67:f8:52:4b:0f:a0:dd:a5:d5:74:88:4b: 47:24:b4:01:e1:71:b5:d0:a5:b4:bf:19:f5:04:c3: f0:7c:6b:56:89:11:8b:2c:8c:5d:eb:c9:bd:cc:3b: f3:24:c3:0f:8b:f8:c8:74:a0:70:e0:82:96:07:47: 5b:ff:0e:18:fe:a5:76:3c:ca:07:9d:4c:5c:da:a2: 37:98:fe:ea:cc:02:6e:bb:77:da:22:ae:64:91:75: e6:50:df:31:d9:67:e4:33:67:9a:81:50:8f:20:e9: 2d:3d:40:4f:6d:67:a1:d0:70:af:0c:b8:fa:60:94: 4d:ce:6d:27:05:61:35:e5:ab:81:ae:a2:7e:98:9e: d6:40:b3:85:2d:69:98:8b:3a:30:73:e4:d2:46:fd: 5b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:72:4A:90:52:23:43:A3:59:EA:FC:FB:27:8A:A3:6F:FF:DA:A8:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7ef2643f-2ef0-3242-9320-0ac22ae783f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:dc:4b:ce:2d:fa:1b:ce:32:fc:fd:c0:f8:ab:c0:e9:01:00: 5a:26:98:29:3a:76:c2:36:e9:b7:a5:b3:15:aa:67:1c:aa:7f: a5:d2:03:e1:62:9a:96:47:53:48:ef:46:a3:97:53:aa:4f:9b: 8c:7c:98:c0:19:3e:84:16:2c:40:39:c0:3b:b7:a5:56:b2:5b: ac:95:bc:5e:83:a0:ec:df:d7:8a:db:60:74:7e:bc:75:3e:9b: 2e:65:d4:1b:c9:18:e6:d9:56:e8:1d:85:a1:0d:e0:87:84:45: 72:14:f1:24:e4:45:58:7a:b0:07:aa:61:98:a5:ef:14:40:6c: 4d:1f:ed:d7:4f:bc:99:f2:7b:d1:74:ee:06:47:53:2d:cf:ba: 46:1b:f6:3c:43:b7:b6:14:e5:a9:c3:81:0e:9d:d2:c1:6a:cb: 35:df:81:8f:a8:b8:76:d1:07:c8:6e:5d:ee:1c:41:80:4a:92: 29:6a:f7:e5:03:f9:82:c7:9e:d1:92:eb:d1:6c:e8:53:df:50: bd:73:e7:b3:0e:72:89:c0:9f:57:9f:86:c9:c0:23:7e:84:5c: 27:92:90:07:67:4a:27:a3:62:e2:df:20:1a:32:61:0d:08:11: 75:24:40:c1:0b:68:9a:fd:6d:87:d1:f8:6a:df:73:12:d5:5f: 61:36:7d:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1l6ZplcZv0x54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk Njc3M2Y4N2EtNTMyMC00YmY0LWI5ZTctMTQ5ODJhZGMwZTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiNCtLbX80fXXnlgHns2tF9u+xPJmNa8FLMK jCYjYxt/Mth9T74aBVMbqMCMcXK1DFgDFWWqmhQckpRTIMmQV2/zLRuvBrTPCaIT /nvfw4RmUhVsZ0MVLwYfFK1XMKoIDbgvBsKhKAHM+bpn+FJLD6DdpdV0iEtHJLQB 4XG10KW0vxn1BMPwfGtWiRGLLIxd68m9zDvzJMMPi/jIdKBw4IKWB0db/w4Y/qV2 PMoHnUxc2qI3mP7qzAJuu3faIq5kkXXmUN8x2WfkM2eagVCPIOktPUBPbWeh0HCv DLj6YJRNzm0nBWE15auBrqJ+mJ7WQLOFLWmYizowc+TSRv1beQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5ySpBSI0OjWer8+yeKo2//2qj2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2VmMjY0M2YtMmVmMC0z MjQyLTkzMjAtMGFjMjJhZTc4M2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfcS84t+hvOMvz9wPirwOkBAFommCk6dsI26belsxWqZxyqf6XSA+Fi mpZHU0jvRqOXU6pPm4x8mMAZPoQWLEA5wDu3pVayW6yVvF6DoOzf14rbYHR+vHU+ my5l1BvJGObZVugdhaEN4IeERXIU8STkRVh6sAeqYZil7xRAbE0f7ddPvJnye9F0 7gZHUy3PukYb9jxDt7YU5anDgQ6d0sFqyzXfgY+ouHbRB8huXe4cQYBKkilq9+UD +YLHntGS69Fs6FPfUL1z57MOconAn1efhsnAI36EXCeSkAdnSiejYuLfIBoyYQ0I EXUkQMELaJr9bYfR+GrfcxLVX2E2fYc= -----END CERTIFICATE-----Generated at Mon Oct 20 18:36:30 2025 by rpki-client