$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/969933aa-bc02-357d-875f-85af16f668ef.roa File: 969933aa-bc02-357d-875f-85af16f668ef.roa (raw, json) Hash identifier: OXWD5vFDz6x/P79QAVFfikSgdUK6IyYzEokFMNFrVjI= Subject key identifier: AA:4D:20:1B:11:C3:D9:51:1B:E9:05:37:35:49:BD:08:A3:69:1B:26 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B3C51B1300323A767711B7C80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/969933aa-bc02-357d-875f-85af16f668ef.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:b1:30:03:23:a7:67:71:1b:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=3110f2c9-f0db-4ff3-b267-b404b6a0d403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b6:52:7f:43:58:df:eb:66:1d:f0:e4:a3:a8: c7:89:c3:60:45:2a:8d:07:d5:1b:2b:4d:5e:c9:25: 14:74:04:5a:52:74:35:14:3c:76:c4:ef:d5:f6:b5: f4:5e:7d:45:31:d8:d0:9a:84:41:ca:d6:00:da:8e: b4:5e:08:27:12:70:16:83:16:24:b8:23:b1:57:08: 36:40:29:1b:fd:75:2a:c0:7c:42:a4:ed:d9:f2:f5: 5d:0a:65:2c:be:52:d9:cb:e0:e6:de:71:f5:f2:e9: 50:b9:ab:ef:01:97:f0:09:12:e8:da:f5:e1:34:26: cf:db:45:1b:9c:36:e5:97:e6:16:b5:fb:e2:90:22: 27:20:dc:4a:b8:00:ed:58:5a:e8:f5:4b:2c:f2:ee: d4:e9:13:af:7a:ff:6e:4e:07:b9:55:2d:47:b6:d7: 36:63:a6:7d:a1:2a:b6:43:5b:41:8c:7b:f0:ba:4c: 87:c8:19:77:70:9b:e5:5e:58:4a:83:ba:87:40:57: c5:45:61:f1:7f:9f:30:3f:ef:50:b0:3f:d3:a6:89: 75:2e:21:1c:8e:fe:8f:c7:86:b5:07:1e:f8:34:25: 2f:e1:de:ab:bc:60:c9:cd:05:14:09:c4:25:ea:fa: ad:ab:f0:65:74:7c:31:a2:ac:13:39:89:58:19:3c: 88:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:4D:20:1B:11:C3:D9:51:1B:E9:05:37:35:49:BD:08:A3:69:1B:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/969933aa-bc02-357d-875f-85af16f668ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:9b:4a:86:21:d0:44:4c:99:a6:aa:e5:3d:85:7d:4f:4a:27: 03:ad:1f:6c:fc:0f:86:c6:ec:79:ea:ab:d8:2c:96:53:6e:ba: e2:0f:82:10:51:08:39:74:ee:bc:3b:c3:cc:6e:a7:f7:d0:ea: 9d:30:b4:30:77:54:07:5d:80:6c:51:3d:49:96:fc:80:75:a9: e7:05:06:60:d1:6e:80:d1:03:8c:6c:7a:78:75:b6:7f:80:2f: c7:ae:44:bf:f4:89:1d:53:c2:38:9b:30:16:5c:ac:65:5b:30: 53:e9:68:84:6b:9d:53:fb:e7:ce:45:29:f1:f7:93:09:f5:67: f7:b1:98:d0:1d:42:4e:02:d3:9a:dd:fd:67:e1:a2:92:2c:ad: 93:3b:43:7d:fc:96:b1:85:0e:81:bb:06:43:44:49:6e:f4:1b: f4:a3:9c:6f:ad:45:04:f9:05:6e:e0:b4:f0:64:a5:10:a6:48: 07:40:60:0e:1f:75:10:c2:04:6a:96:ae:1c:fa:88:dc:a8:9a: 44:81:75:ca:d3:3a:b8:fd:bf:87:74:8c:5c:1d:4f:f3:d7:0b: 1d:b3:5f:e1:1b:92:f2:63:94:9f:0b:d5:a1:98:bd:26:06:31: 47:52:bf:fb:ab:9b:59:31:6e:8e:54:35:7f:df:d8:57:e9:06: 98:40:62:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8UbEwAyOnZ3EbfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk MzExMGYyYzktZjBkYi00ZmYzLWIyNjctYjQwNGI2YTBkNDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLZSf0NY3+tmHfDko6jHicNgRSqNB9UbK01e ySUUdARaUnQ1FDx2xO/V9rX0Xn1FMdjQmoRBytYA2o60XggnEnAWgxYkuCOxVwg2 QCkb/XUqwHxCpO3Z8vVdCmUsvlLZy+Dm3nH18ulQuavvAZfwCRLo2vXhNCbP20Ub nDbll+YWtfvikCInINxKuADtWFro9Uss8u7U6ROvev9uTge5VS1Httc2Y6Z9oSq2 Q1tBjHvwukyHyBl3cJvlXlhKg7qHQFfFRWHxf58wP+9QsD/Tpol1LiEcjv6Px4a1 Bx74NCUv4d6rvGDJzQUUCcQl6vqtq/BldHwxoqwTOYlYGTyIJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpNIBsRw9lRG+kFNzVJvQijaRsmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTY5OTMzYWEtYmMwMi0z NTdkLTg3NWYtODVhZjE2ZjY2OGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADabSoYh0ERMmaaq5T2FfU9KJwOtH2z8D4bG7Hnqq9gsllNuuuIPghBR CDl07rw7w8xup/fQ6p0wtDB3VAddgGxRPUmW/IB1qecFBmDRboDRA4xsenh1tn+A L8euRL/0iR1TwjibMBZcrGVbMFPpaIRrnVP7585FKfH3kwn1Z/exmNAdQk4C05rd /WfhopIsrZM7Q338lrGFDoG7BkNESW70G/SjnG+tRQT5BW7gtPBkpRCmSAdAYA4f dRDCBGqWrhz6iNyomkSBdcrTOrj9v4d0jFwdT/PXCx2zX+EbkvJjlJ8L1aGYvSYG MUdSv/urm1kxbo5UNX/f2FfpBphAYn4= -----END CERTIFICATE-----Generated at Mon Oct 20 15:51:35 2025 by rpki-client