$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e86bab7f-476b-3211-99b7-b56509930684.roa File: e86bab7f-476b-3211-99b7-b56509930684.roa (raw, json) Hash identifier: OkZla/sEjRV+KhSXqn6DEPG1CYQWzxWfLc3NvEt2Elk= Subject key identifier: FD:ED:DE:02:E6:B0:CC:FA:37:1C:EB:7B:FB:82:5B:D2:35:F4:AF:70 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B48E1C87CFDC9FC7AF6AA5F00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e86bab7f-476b-3211-99b7-b56509930684.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.33.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:c8:7c:fd:c9:fc:7a:f6:aa:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=7c5daaf1-4273-4a19-b005-3042204bdcfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a4:3a:69:22:36:b8:9e:08:f7:34:3c:b3:a7: 3f:0b:ef:cb:7a:2d:09:03:b5:cb:a7:19:17:b8:71: 2b:04:4f:f7:36:25:eb:7e:ae:7e:05:aa:d2:af:9a: f3:0e:e3:ab:f0:c7:ca:5a:be:8a:40:5e:29:ea:a6: 99:db:43:a6:5a:31:15:25:c3:11:24:7b:ce:50:8e: e3:64:42:aa:34:2c:6a:34:aa:1e:b1:73:64:f7:a9: 0b:a5:af:75:5a:b0:cb:64:2a:7e:9d:96:ed:7c:6e: 11:cf:e6:e0:40:0a:93:a4:b4:9f:a9:89:c9:b6:e6: cc:94:d0:b8:7c:a4:fa:77:52:de:7f:c6:4d:7c:ae: 75:1e:9a:88:10:ce:66:51:e2:fb:27:4c:1f:22:58: b9:23:03:e0:a7:b5:fd:af:10:01:38:c3:ef:22:43: 5c:40:d3:a8:d4:76:b4:46:f0:42:1b:95:94:0b:13: 73:67:2c:a0:a2:d3:fe:74:10:c7:60:31:75:7b:ea: f6:96:f3:89:87:4c:15:77:fc:51:23:10:3b:63:72: 50:d6:76:c6:9f:e0:56:b3:77:76:79:c8:9b:54:d1: ea:28:90:a9:d0:b6:c3:f3:7d:ee:8a:bf:e7:da:0f: b2:da:ad:dc:e8:9d:7f:f1:dc:21:d9:ba:5a:43:b8: 90:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:ED:DE:02:E6:B0:CC:FA:37:1C:EB:7B:FB:82:5B:D2:35:F4:AF:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e86bab7f-476b-3211-99b7-b56509930684.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:bf:4d:12:ee:1c:c9:ac:98:a1:a8:3e:8e:2d:de:29:9d:d5: 9c:e2:7f:52:23:ab:8d:cd:8f:bc:eb:72:9f:a4:77:74:09:aa: bc:f7:36:77:eb:0a:5f:5a:59:fd:71:3b:2e:4c:67:7c:ff:d1: a2:c9:e6:d5:2f:9d:92:60:7b:5f:78:cf:18:26:3c:0c:1e:62: 57:83:39:c4:92:0e:68:3a:01:a7:7a:c0:d7:dd:92:b5:70:97: 3e:20:b4:42:25:09:64:6a:7d:0b:14:93:75:f2:dd:19:73:b1: 57:d6:0f:32:1f:d2:4b:ef:5b:fa:2b:7e:50:44:5e:30:30:61: 54:27:88:85:11:0f:30:16:21:5c:7b:7c:ab:19:d2:e3:aa:f9: 6b:b0:a0:5d:c2:e5:db:f0:00:88:ff:45:04:09:46:e4:06:c0: 77:44:20:fe:5e:e6:57:26:d1:70:be:44:e0:d8:df:12:0c:d4: 04:a0:66:6c:19:61:76:e3:9f:4d:a1:4a:57:04:b4:5d:c9:ce: 9c:44:1d:aa:30:56:8a:34:ed:a4:f5:71:4b:33:32:25:c6:59: 0d:20:c7:3d:24:c3:0d:78:cf:f7:4e:2d:74:c7:fb:54:90:bb: 3b:99:a8:83:ff:f9:d3:be:92:33:03:ea:60:17:d4:60:88:31: 61:eb:41:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4ch8/cn8evaqXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk N2M1ZGFhZjEtNDI3My00YTE5LWIwMDUtMzA0MjIwNGJkY2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqQ6aSI2uJ4I9zQ8s6c/C+/Lei0JA7XLpxkX uHErBE/3NiXrfq5+BarSr5rzDuOr8MfKWr6KQF4p6qaZ20OmWjEVJcMRJHvOUI7j ZEKqNCxqNKoesXNk96kLpa91WrDLZCp+nZbtfG4Rz+bgQAqTpLSfqYnJtubMlNC4 fKT6d1Lef8ZNfK51HpqIEM5mUeL7J0wfIli5IwPgp7X9rxABOMPvIkNcQNOo1Ha0 RvBCG5WUCxNzZyygotP+dBDHYDF1e+r2lvOJh0wVd/xRIxA7Y3JQ1nbGn+BWs3d2 ecibVNHqKJCp0LbD833uir/n2g+y2q3c6J1/8dwh2bpaQ7iQZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3t3gLmsMz6Nxzre/uCW9I19K9wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTg2YmFiN2YtNDc2Yi0z MjExLTk5YjctYjU2NTA5OTMwNjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+/TRLuHMmsmKGoPo4t3imd1Zzif1Ijq43Nj7zrcp+kd3QJqrz3Nnfr Cl9aWf1xOy5MZ3z/0aLJ5tUvnZJge194zxgmPAweYleDOcSSDmg6Aad6wNfdkrVw lz4gtEIlCWRqfQsUk3Xy3RlzsVfWDzIf0kvvW/orflBEXjAwYVQniIURDzAWIVx7 fKsZ0uOq+WuwoF3C5dvwAIj/RQQJRuQGwHdEIP5e5lcm0XC+RODY3xIM1ASgZmwZ YXbjn02hSlcEtF3JzpxEHaowVoo07aT1cUszMiXGWQ0gxz0kww14z/dOLXTH+1SQ uzuZqIP/+dO+kjMD6mAX1GCIMWHrQUQ= -----END CERTIFICATE-----Generated at Mon Oct 20 21:10:20 2025 by rpki-client