$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfc48a13-8ef5-3e8c-a89e-d0cca5676ba0.roa File: cfc48a13-8ef5-3e8c-a89e-d0cca5676ba0.roa (raw, json) Hash identifier: 6umikOk6jd0UG0zbczLbCt+HDclMAGhUSlcNXc1YMf8= Subject key identifier: 8B:A2:11:C5:59:C7:E0:5F:DA:C7:28:49:53:10:C0:AF:15:0D:E5:09 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B3C51B052D5F6B77A54074980 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfc48a13-8ef5-3e8c-a89e-d0cca5676ba0.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:b0:52:d5:f6:b7:7a:54:07:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=2b714521-fc1d-4dd9-a037-8878ad1b9d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7c:09:bd:12:77:84:e4:36:08:05:05:e4:d3: 80:6b:7b:ea:6a:3f:a3:32:c7:66:b2:42:84:d2:3d: d8:40:3f:b7:82:b3:ae:36:f8:55:7e:7c:1f:c4:e6: 8f:d9:a3:be:e2:72:cb:6a:95:f0:46:48:e8:c5:d9: cc:5d:20:b3:af:d9:f5:ae:60:f1:f3:4d:f1:99:76: a1:17:3f:e1:4f:04:2e:e1:21:53:91:37:10:39:64: b8:ba:e4:d3:a8:c2:d5:e9:c3:c1:f7:29:cb:7c:23: bf:0c:b4:d8:5b:8d:41:b2:26:ca:70:05:0e:d6:f5: a4:57:16:94:80:26:3d:f6:1a:80:6d:19:88:76:1b: c4:89:08:b8:72:ab:2f:c1:0d:89:f7:d8:06:9b:2e: 51:81:46:74:18:52:c7:c3:8c:11:0d:d2:ff:82:99: 7d:a7:ab:4b:96:84:1a:bd:eb:1e:3e:06:82:87:94: 67:44:28:cb:e5:09:b6:63:fc:90:0d:dd:80:ac:77: 36:a7:6f:3f:57:61:61:76:9a:27:2d:e4:8d:8b:0a: f0:5f:97:ee:d7:a5:5f:f1:0f:9f:65:33:a2:21:03: a8:8c:44:ae:5b:bf:11:e5:7f:95:b3:34:cf:79:23: 2c:d1:42:5b:fe:07:23:68:7b:35:76:96:2c:f2:f9: e2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A2:11:C5:59:C7:E0:5F:DA:C7:28:49:53:10:C0:AF:15:0D:E5:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfc48a13-8ef5-3e8c-a89e-d0cca5676ba0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:c9:ea:42:a3:f5:8a:7a:5c:56:5f:38:b7:89:c4:50:e3:e8: 8a:72:10:b4:b2:aa:05:84:d7:6a:5d:d5:4e:31:dd:ae:6d:f1: 16:ee:d9:87:41:48:be:bf:36:32:2f:c1:64:90:95:ad:b0:f3: 33:37:af:cc:7f:1f:83:ce:84:06:15:cc:2a:e5:86:e7:46:f6: 8f:d8:82:4e:12:f9:b5:6a:d2:c4:b7:b7:db:dd:48:96:76:09: 1a:5a:83:28:0f:3b:1d:54:52:1a:e9:8a:48:d4:cc:0b:e4:d9: ef:bf:ff:9f:76:77:b1:a1:2f:52:5d:4d:ad:6b:68:61:8e:ca: fe:d7:f6:74:ac:a6:80:23:ff:7f:f6:a3:f5:b1:76:10:ba:3d: 81:77:99:29:e6:43:16:75:21:2a:cb:d9:8e:85:bc:a3:22:e4: e2:f1:47:b7:e7:f9:60:45:cc:ee:0e:30:b2:5e:2b:03:66:19: 59:45:21:13:a8:23:55:e9:66:83:80:ba:58:a7:6c:8b:77:55: a7:9a:fb:dd:0d:10:d6:0b:b8:8b:e7:00:45:d6:0e:76:f3:39: 9c:e7:71:5b:42:1e:2b:68:04:b6:46:62:3c:fc:0b:a9:5d:e4: d5:ed:70:4e:02:e0:3c:19:2f:2b:9c:ca:91:46:47:84:94:24: 91:dd:bc:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8UbBS1fa3elQHSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk MmI3MTQ1MjEtZmMxZC00ZGQ5LWEwMzctODg3OGFkMWI5ZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXwJvRJ3hOQ2CAUF5NOAa3vqaj+jMsdmskKE 0j3YQD+3grOuNvhVfnwfxOaP2aO+4nLLapXwRkjoxdnMXSCzr9n1rmDx803xmXah Fz/hTwQu4SFTkTcQOWS4uuTTqMLV6cPB9ynLfCO/DLTYW41BsibKcAUO1vWkVxaU gCY99hqAbRmIdhvEiQi4cqsvwQ2J99gGmy5RgUZ0GFLHw4wRDdL/gpl9p6tLloQa vesePgaCh5RnRCjL5Qm2Y/yQDd2ArHc2p28/V2FhdponLeSNiwrwX5fu16Vf8Q+f ZTOiIQOojESuW78R5X+VszTPeSMs0UJb/gcjaHs1dpYs8vnicwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuiEcVZx+Bf2scoSVMQwK8VDeUJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2ZjNDhhMTMtOGVmNS0z ZThjLWE4OWUtZDBjY2E1Njc2YmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXJ6kKj9Yp6XFZfOLeJxFDj6IpyELSyqgWE12pd1U4x3a5t8Rbu2YdB SL6/NjIvwWSQla2w8zM3r8x/H4POhAYVzCrlhudG9o/Ygk4S+bVq0sS3t9vdSJZ2 CRpagygPOx1UUhrpikjUzAvk2e+//592d7GhL1JdTa1raGGOyv7X9nSspoAj/3/2 o/WxdhC6PYF3mSnmQxZ1ISrL2Y6FvKMi5OLxR7fn+WBFzO4OMLJeKwNmGVlFIROo I1XpZoOAulinbIt3Vaea+90NENYLuIvnAEXWDnbzOZzncVtCHitoBLZGYjz8C6ld 5NXtcE4C4DwZLyucypFGR4SUJJHdvGQ= -----END CERTIFICATE-----Generated at Mon Oct 20 18:33:24 2025 by rpki-client