$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfce08b9-fa20-3011-97ac-85c4ba3785d5.roa File: cfce08b9-fa20-3011-97ac-85c4ba3785d5.roa (raw, json) Hash identifier: bC+BGmvIQ3YSurCW2ym/pWdqIMZMvoS4XC2vyayI4t8= Subject key identifier: BA:26:70:26:CC:84:FE:03:36:ED:5E:5C:B6:F0:98:33:11:B6:C9:BA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B92DD43D4DBEFE10B7AEC9880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfce08b9-fa20-3011-97ac-85c4ba3785d5.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.33.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:43:d4:db:ef:e1:0b:7a:ec:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=76cc9055-b38b-4913-8e92-ee1e9ef5db06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f1:88:4b:a5:24:0b:da:46:9f:52:64:84:97: 47:c6:a4:e4:b7:25:7e:b4:bc:a9:a7:65:d2:8a:f3: 4d:d2:21:be:aa:b9:c5:57:31:02:9e:c3:0c:bd:69: 45:d1:95:21:a8:3a:2b:da:e4:b2:b2:95:8b:e3:1c: 5c:a3:c6:95:8c:32:6d:3f:66:95:c5:5c:3b:e9:6e: 8c:c2:78:10:7d:62:7a:3c:32:78:ab:69:8e:d1:6c: b1:98:0e:41:63:b5:f4:84:22:ad:7b:0a:c4:ff:e0: 48:f1:f5:49:53:1a:86:c0:60:02:2a:ba:12:6c:29: 31:40:54:d3:e7:4b:5a:80:c5:7f:11:83:f2:d6:62: 69:d1:a1:a6:78:51:37:4f:45:11:1d:73:52:81:33: bb:83:7c:2a:6b:a4:a0:33:61:e8:a7:2a:51:e9:c1: bc:81:0b:95:19:75:d7:f3:19:91:6a:0b:e5:ee:3c: 3a:75:d6:a9:2c:00:6f:08:ff:ba:f4:25:ce:b6:1f: bb:c6:5f:49:3f:dd:24:3e:46:27:43:03:71:98:bf: fe:6c:9c:07:72:dc:73:20:79:02:ad:32:de:49:b5: 63:c8:12:69:12:c0:36:0b:a7:d2:64:09:82:f3:c0: 56:a1:ce:bf:3c:9d:49:bc:c0:61:e4:8a:3f:d2:66: fc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:26:70:26:CC:84:FE:03:36:ED:5E:5C:B6:F0:98:33:11:B6:C9:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfce08b9-fa20-3011-97ac-85c4ba3785d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:aa:5c:a2:ae:cc:40:05:16:52:1b:98:cb:63:f5:96:c5:79: 4f:b3:63:ee:7d:8b:7b:7f:bf:08:6d:8f:c9:b7:53:9e:27:c0: b3:92:94:c0:ba:f2:1a:48:18:67:38:0d:71:aa:6e:78:ed:f6: 90:c1:65:85:6c:2e:f1:58:fa:a1:4d:86:da:eb:74:e5:44:a9: 6c:ec:61:12:79:7b:38:1b:1c:06:4e:0d:7e:02:b4:2f:31:9e: 14:56:0c:82:59:1d:df:4d:38:a5:45:17:96:5f:05:fd:3f:e2: 6e:d3:0b:35:b1:f5:93:f4:10:16:3b:8a:83:5d:58:a8:3d:e8: fb:68:b9:5b:49:f2:da:bf:1c:f7:b7:c4:00:4e:f9:6a:bd:cb: 43:7e:3a:a9:e5:ae:8d:fa:e8:b7:a3:60:3f:30:7a:96:ea:3b: 28:3f:67:ee:d6:a0:e8:03:76:7e:a6:a5:49:de:18:4b:7c:13: 93:db:eb:34:bd:24:08:17:b5:eb:d5:aa:bb:96:30:3d:fc:59: 46:94:75:2f:c2:00:4a:9b:56:5a:e8:ba:e0:1a:ec:2e:f5:82: 4d:34:67:df:d9:52:6c:e7:31:ac:d0:d1:12:e6:5e:6a:b3:a7: 37:08:b8:6e:74:1c:71:fe:6d:a6:a3:72:80:67:b2:32:09:e0: af:56:a8:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3UPU2+/hC3rsmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk NzZjYzkwNTUtYjM4Yi00OTEzLThlOTItZWUxZTllZjVkYjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfGIS6UkC9pGn1JkhJdHxqTktyV+tLypp2XS ivNN0iG+qrnFVzECnsMMvWlF0ZUhqDor2uSyspWL4xxco8aVjDJtP2aVxVw76W6M wngQfWJ6PDJ4q2mO0WyxmA5BY7X0hCKtewrE/+BI8fVJUxqGwGACKroSbCkxQFTT 50tagMV/EYPy1mJp0aGmeFE3T0URHXNSgTO7g3wqa6SgM2HopypR6cG8gQuVGXXX 8xmRagvl7jw6ddapLABvCP+69CXOth+7xl9JP90kPkYnQwNxmL/+bJwHctxzIHkC rTLeSbVjyBJpEsA2C6fSZAmC88BWoc6/PJ1JvMBh5Io/0mb8dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLomcCbMhP4DNu1eXLbwmDMRtsm6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2ZjZTA4YjktZmEyMC0z MDExLTk3YWMtODVjNGJhMzc4NWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+qXKKuzEAFFlIbmMtj9ZbFeU+zY+59i3t/vwhtj8m3U54nwLOSlMC6 8hpIGGc4DXGqbnjt9pDBZYVsLvFY+qFNhtrrdOVEqWzsYRJ5ezgbHAZODX4CtC8x nhRWDIJZHd9NOKVFF5ZfBf0/4m7TCzWx9ZP0EBY7ioNdWKg96PtouVtJ8tq/HPe3 xABO+Wq9y0N+Oqnlro366LejYD8wepbqOyg/Z+7WoOgDdn6mpUneGEt8E5Pb6zS9 JAgXtevVqruWMD38WUaUdS/CAEqbVlrouuAa7C71gk00Z9/ZUmznMazQ0RLmXmqz pzcIuG50HHH+baajcoBnsjIJ4K9WqI4= -----END CERTIFICATE-----Generated at Mon Oct 20 16:00:00 2025 by rpki-client