$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e0a983e4-3360-3f43-af95-dfcb084edaa1.roa File: e0a983e4-3360-3f43-af95-dfcb084edaa1.roa (raw, json) Hash identifier: LXfYsO9aERUjsPrM7ZE5oTV86UYW+XdrPNY3PitdKs0= Subject key identifier: A5:C7:EF:4F:AD:CB:CA:EE:3C:E5:01:67:E3:EB:30:43:16:48:CC:2B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B92DD437007F71F1F58D516C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e0a983e4-3360-3f43-af95-dfcb084edaa1.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.33.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:43:70:07:f7:1f:1f:58:d5:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=09ed09b5-4099-49a5-8774-b1b1620488ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a8:94:93:51:da:bb:6c:81:b9:b1:d3:fc:0d: 4d:37:e4:7d:a4:85:b5:60:03:b0:ef:c4:0f:15:90: 0e:44:72:cc:c3:6d:96:22:d1:5e:0f:39:c3:ba:43: 32:fc:0e:9a:6a:09:80:cf:9a:a4:c9:a3:d2:58:ae: 73:d9:0e:db:5b:8f:a8:52:a5:2a:ed:86:bb:cc:ed: b1:fb:f7:c2:d5:36:a5:27:fa:72:df:3f:9b:22:eb: 31:2e:33:8e:d0:5d:22:36:22:1c:11:b7:6f:6f:c6: a0:07:67:b0:5f:1b:f7:8c:77:17:54:9e:5c:f5:0d: 65:4c:89:28:a6:bd:e7:aa:6d:0e:3e:a4:97:97:e2: 28:26:45:7e:76:71:bb:e8:9c:81:75:45:38:0a:0e: 02:36:c9:4a:4f:2b:21:e6:99:83:31:9a:2f:64:3b: 02:07:74:a0:ce:4b:25:91:ab:a5:f0:d6:d3:f5:b9: d8:e3:19:40:7f:3d:a4:fb:12:b9:d4:4e:64:ef:24: cd:f5:47:f1:b3:0e:c4:11:6e:b5:2b:0c:aa:f6:e5: 41:c3:03:93:89:5c:73:46:93:a7:c8:f8:c7:be:f7: 32:88:4a:7c:96:39:00:81:4a:e3:3b:48:3a:31:fa: 46:30:24:17:4b:8e:b2:da:7a:ba:3b:6a:95:49:09: 7e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C7:EF:4F:AD:CB:CA:EE:3C:E5:01:67:E3:EB:30:43:16:48:CC:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e0a983e4-3360-3f43-af95-dfcb084edaa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:92:cb:6e:27:09:78:9d:5a:0a:e9:e3:81:5f:35:93:82:ed: 7c:b6:d9:6f:43:6a:b5:d1:b8:7b:e1:22:b0:f6:d4:b0:07:61: 62:db:71:58:d5:e1:a1:9c:c5:24:47:c0:41:76:bd:d8:49:b3: 3d:e7:67:2a:fb:48:ee:f5:c0:4e:58:cf:fa:b4:13:aa:f5:ad: 46:a9:05:9f:b5:1e:f8:ca:98:bd:d6:08:5e:2d:39:56:66:e7: ae:85:e4:06:a2:1d:45:92:11:13:23:e7:74:65:7f:41:49:6e: bd:8f:0c:a8:49:fb:dc:0e:6e:49:34:b7:ca:e6:59:4a:de:aa: 9a:6c:77:ef:dc:54:33:bf:72:d8:f8:04:ee:93:b8:a1:a0:4b: bf:2e:6a:07:a1:a6:8d:e8:51:bd:6c:9d:9e:8b:63:7a:c7:6f: 8f:3b:ac:45:dc:67:16:62:78:5f:02:0b:6a:6e:d9:1d:be:9c: bb:42:4c:dc:60:ed:cc:29:b7:32:54:ce:e9:d8:c6:e4:e6:ba: 1a:4c:97:19:f0:6a:64:0a:41:17:1d:c3:e4:4c:6a:15:2a:cb: 18:87:c6:21:68:47:64:ce:64:8a:c1:34:dd:73:8f:0a:b2:6b: ea:5f:b7:a9:cd:52:85:96:83:21:57:66:a9:14:6e:78:05:5c: ae:0c:1d:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3UNwB/cfH1jVFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk MDllZDA5YjUtNDA5OS00OWE1LTg3NzQtYjFiMTYyMDQ4OGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqiUk1Hau2yBubHT/A1NN+R9pIW1YAOw78QP FZAORHLMw22WItFeDznDukMy/A6aagmAz5qkyaPSWK5z2Q7bW4+oUqUq7Ya7zO2x +/fC1TalJ/py3z+bIusxLjOO0F0iNiIcEbdvb8agB2ewXxv3jHcXVJ5c9Q1lTIko pr3nqm0OPqSXl+IoJkV+dnG76JyBdUU4Cg4CNslKTysh5pmDMZovZDsCB3Sgzksl kaul8NbT9bnY4xlAfz2k+xK51E5k7yTN9Ufxsw7EEW61Kwyq9uVBwwOTiVxzRpOn yPjHvvcyiEp8ljkAgUrjO0g6MfpGMCQXS46y2nq6O2qVSQl+KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXH70+ty8ruPOUBZ+PrMEMWSMwrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTBhOTgzZTQtMzM2MC0z ZjQzLWFmOTUtZGZjYjA4NGVkYWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaSy24nCXidWgrp44FfNZOC7Xy22W9DarXRuHvhIrD21LAHYWLbcVjV 4aGcxSRHwEF2vdhJsz3nZyr7SO71wE5Yz/q0E6r1rUapBZ+1HvjKmL3WCF4tOVZm 566F5AaiHUWSERMj53Rlf0FJbr2PDKhJ+9wObkk0t8rmWUreqppsd+/cVDO/ctj4 BO6TuKGgS78uagehpo3oUb1snZ6LY3rHb487rEXcZxZieF8CC2pu2R2+nLtCTNxg 7cwptzJUzunYxuTmuhpMlxnwamQKQRcdw+RMahUqyxiHxiFoR2TOZIrBNN1zjwqy a+pft6nNUoWWgyFXZqkUbngFXK4MHeY= -----END CERTIFICATE-----Generated at Mon Oct 20 16:00:03 2025 by rpki-client