$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/989bb846-baa3-3143-83bd-8768ef87ff43.roa File: 989bb846-baa3-3143-83bd-8768ef87ff43.roa (raw, json) Hash identifier: dWIOaZXakol4SUte3rlaMHVLo1hU4u6bGunIkVjY9Fo= Subject key identifier: 21:FA:78:CE:C0:C8:26:2C:2F:EA:72:82:FC:F7:0E:4C:AE:65:DE:5A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B48E1C844949AB8D06EE0A1C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/989bb846-baa3-3143-83bd-8768ef87ff43.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.33.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:c8:44:94:9a:b8:d0:6e:e0:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=eaaba7d6-d26b-4cf6-883d-8586d5041a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:30:62:c5:b2:d2:43:37:9b:77:3b:bb:2b:e9: 6b:74:d5:63:59:5b:94:05:87:d2:5f:7b:69:d0:7b: 16:1c:87:22:9e:cc:a6:bc:6f:94:dd:ab:72:b8:69: 03:e6:6a:51:11:3f:02:8f:90:46:f8:c7:db:72:2d: ca:3d:13:70:a7:10:41:8d:c7:a5:bf:33:e5:9c:14: d7:14:3f:ab:7f:4a:fa:ec:03:69:02:7e:da:47:0a: ff:c9:3f:69:ed:9c:1d:f6:cf:ef:cb:1b:f4:1f:33: 9d:6a:17:e3:05:42:31:62:07:a4:9d:0d:14:ab:59: 47:bd:f3:21:eb:1c:f7:b5:0a:0e:6a:2b:c0:dd:c4: 53:0d:73:11:52:50:14:30:96:d6:cc:67:a7:42:15: 41:e3:af:f8:ec:4d:70:4c:38:05:66:0f:9f:15:03: dc:fc:34:cb:43:65:42:d7:bc:d7:2e:3e:f5:33:6c: 24:87:47:3b:fe:e3:1a:f2:98:1b:2e:88:b3:56:e5: 26:2b:2f:28:1d:e6:e0:ee:fb:c6:0f:0d:45:64:22: b0:f9:7a:e1:65:01:95:96:ab:a1:ce:35:42:77:ee: ee:56:51:c2:01:93:ba:81:6d:e9:c5:4f:41:67:c1: 81:84:75:84:15:16:0b:c7:81:d1:35:49:72:fb:f4: f4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FA:78:CE:C0:C8:26:2C:2F:EA:72:82:FC:F7:0E:4C:AE:65:DE:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/989bb846-baa3-3143-83bd-8768ef87ff43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:af:fa:74:73:28:a9:01:6d:e9:61:fd:5a:d4:55:6d:89:c0: 11:81:0a:91:15:41:54:62:32:47:fe:1d:e8:57:c2:71:9a:4b: e1:9f:15:c5:36:44:b5:1c:81:6e:7e:20:fa:bd:73:d4:cd:a2: ce:39:2d:e3:46:4d:30:24:6f:61:68:83:a4:eb:f6:8b:cf:1a: 8f:71:e8:76:0c:f9:d1:04:15:b1:89:cf:d6:0b:30:a0:f0:60: f2:01:7b:ce:7e:f2:bf:9a:77:ac:10:bc:52:30:02:e3:47:36: 20:35:d9:86:4c:d7:80:97:f4:e7:27:21:d4:a7:08:4f:32:9c: 61:78:cd:24:f2:57:25:fd:e2:32:82:55:dc:00:ee:1f:f2:7c: e1:4e:b6:57:d0:c5:2b:cc:eb:e8:54:6b:72:a2:8f:6d:78:f1: b6:c8:dc:4c:f5:d2:b3:61:e0:48:9f:2f:00:f0:90:a9:c7:08: 99:fb:e3:30:9f:9d:cd:d9:68:42:01:33:0e:0e:9e:fa:ad:4f: c0:e7:52:a9:6e:a0:cf:7e:ea:7b:dc:0b:94:2e:09:0c:1e:4d: 4f:12:a4:d3:f9:bf:a9:31:24:a2:ee:fe:58:dc:a8:66:48:80: aa:d6:47:fb:65:f8:a2:e3:f1:e6:bd:e1:9d:d3:64:72:86:71: 69:f0:ce:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4chElJq40G7gocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZWFhYmE3ZDYtZDI2Yi00Y2Y2LTg4M2QtODU4NmQ1MDQxYThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizBixbLSQzebdzu7K+lrdNVjWVuUBYfSX3tp 0HsWHIcinsymvG+U3atyuGkD5mpRET8Cj5BG+Mfbci3KPRNwpxBBjcelvzPlnBTX FD+rf0r67ANpAn7aRwr/yT9p7Zwd9s/vyxv0HzOdahfjBUIxYgeknQ0Uq1lHvfMh 6xz3tQoOaivA3cRTDXMRUlAUMJbWzGenQhVB46/47E1wTDgFZg+fFQPc/DTLQ2VC 17zXLj71M2wkh0c7/uMa8pgbLoizVuUmKy8oHebg7vvGDw1FZCKw+XrhZQGVlquh zjVCd+7uVlHCAZO6gW3pxU9BZ8GBhHWEFRYLx4HRNUly+/T0fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCH6eM7AyCYsL+pygvz3DkyuZd5aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTg5YmI4NDYtYmFhMy0z MTQzLTgzYmQtODc2OGVmODdmZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuv+nRzKKkBbelh/VrUVW2JwBGBCpEVQVRiMkf+HehXwnGaS+GfFcU2 RLUcgW5+IPq9c9TNos45LeNGTTAkb2Fog6Tr9ovPGo9x6HYM+dEEFbGJz9YLMKDw YPIBe85+8r+ad6wQvFIwAuNHNiA12YZM14CX9OcnIdSnCE8ynGF4zSTyVyX94jKC VdwA7h/yfOFOtlfQxSvM6+hUa3Kij2148bbI3Ez10rNh4EifLwDwkKnHCJn74zCf nc3ZaEIBMw4OnvqtT8DnUqluoM9+6nvcC5QuCQweTU8SpNP5v6kxJKLu/ljcqGZI gKrWR/tl+KLj8ea94Z3TZHKGcWnwzpc= -----END CERTIFICATE-----Generated at Mon Oct 20 18:37:12 2025 by rpki-client