$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eb03a7f7-a2fd-3faf-b4ab-371042807aa7.roa File: eb03a7f7-a2fd-3faf-b4ab-371042807aa7.roa (raw, json) Hash identifier: 27OaZyczUY8Seeje8HlQPFPyZonJ+MMxBHNVLx7hCvk= Subject key identifier: 48:41:BE:DB:3D:92:24:7B:D6:5B:58:CE:43:9F:38:8C:B9:97:C9:FE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B52A7598C3F7FD542DDAC33A0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eb03a7f7-a2fd-3faf-b4ab-371042807aa7.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.33.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:59:8c:3f:7f:d5:42:dd:ac:33:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=4c38960e-a229-497a-97d1-f2255091b0a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0e:42:78:a7:0b:de:b8:81:e8:76:93:ed:40: 83:46:c1:1d:4d:ea:0a:13:9b:fe:32:a0:15:3d:bc: a6:14:a2:80:fa:29:8f:94:20:cf:c9:46:fe:05:b2: f8:c4:2c:49:80:d5:c8:ba:f4:89:26:c8:e4:6e:8c: bd:6b:38:1f:17:88:21:ee:e8:b4:a1:d3:3a:47:e1: 23:97:6b:36:01:3c:00:cd:b4:61:2f:32:90:d2:de: 4c:fe:79:f6:5a:4e:4a:61:00:38:9d:91:17:3a:44: b1:f0:b1:2a:6b:f7:fb:09:38:bb:cb:49:b9:7e:a7: 39:ad:c8:03:aa:5d:84:68:17:b8:d0:89:f6:fc:16: c3:91:9b:9a:c9:ef:c3:6d:e7:ba:6d:74:37:c3:a6: 83:00:e9:f2:28:c2:e9:16:a6:53:03:a6:91:b3:43: f3:0e:85:43:93:a8:1e:99:d0:f4:b9:8f:2c:d5:bd: e0:bb:5d:c3:05:b3:e4:cd:5a:44:66:19:bb:23:d8: d4:e2:2f:3f:2a:e4:17:d6:5b:36:a2:49:17:94:53: f3:43:bd:bd:1b:76:9e:62:51:04:64:ac:94:f2:9b: 54:06:80:54:16:4b:45:a6:c0:87:6c:3c:e8:d5:75: 29:25:2b:0a:05:67:3b:6e:99:9f:c7:a9:c9:e6:0a: 06:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:41:BE:DB:3D:92:24:7B:D6:5B:58:CE:43:9F:38:8C:B9:97:C9:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eb03a7f7-a2fd-3faf-b4ab-371042807aa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:c5:1a:e5:5e:44:45:86:6a:02:21:a1:f5:49:be:f1:6a:8f: be:40:f8:c4:cb:23:b2:35:fc:54:82:79:16:10:59:8a:58:88: c3:46:c4:a9:79:ad:80:24:05:3e:ec:85:04:ea:97:30:de:b3: d4:90:70:94:19:37:9c:f9:84:41:15:38:5f:d1:96:d9:03:55: 49:00:fe:61:93:56:e7:b2:7f:34:d8:72:ce:ad:fb:ed:13:c1: d6:21:91:a9:8f:ad:e3:4b:63:f4:46:94:e3:65:a7:e1:5b:c7: 47:4f:be:71:a6:50:06:4b:38:59:6e:6f:4a:27:e8:01:d1:b2: 26:fd:92:77:c7:6a:86:8a:c3:b1:10:52:2b:b0:09:cb:07:e8: 77:17:2a:71:63:f0:23:1f:07:8d:a3:4f:90:8b:7a:f5:11:15: ba:d2:92:96:33:5c:4c:c9:0b:b3:9a:1e:8c:db:cd:3a:5e:a5: 2f:45:11:f7:51:24:37:5e:ea:47:86:f2:be:f7:68:a7:d5:dc: 4c:7b:ba:d8:32:c0:82:9f:83:8d:15:63:f3:df:e9:dd:59:e0: 51:81:07:06:1b:9d:59:a4:4f:f3:88:e6:93:03:e4:c6:b6:50: fe:71:0b:b2:43:f9:f4:eb:e8:6a:f9:3d:e2:4d:6a:cc:37:9c: be:21:4d:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1mMP3/VQt2sM6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NGMzODk2MGUtYTIyOS00OTdhLTk3ZDEtZjIyNTUwOTFiMGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA5CeKcL3riB6HaT7UCDRsEdTeoKE5v+MqAV PbymFKKA+imPlCDPyUb+BbL4xCxJgNXIuvSJJsjkboy9azgfF4gh7ui0odM6R+Ej l2s2ATwAzbRhLzKQ0t5M/nn2Wk5KYQA4nZEXOkSx8LEqa/f7CTi7y0m5fqc5rcgD ql2EaBe40In2/BbDkZuaye/Dbee6bXQ3w6aDAOnyKMLpFqZTA6aRs0PzDoVDk6ge mdD0uY8s1b3gu13DBbPkzVpEZhm7I9jU4i8/KuQX1ls2okkXlFPzQ729G3aeYlEE ZKyU8ptUBoBUFktFpsCHbDzo1XUpJSsKBWc7bpmfx6nJ5goGDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhBvts9kiR71ltYzkOfOIy5l8n+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWIwM2E3ZjctYTJmZC0z ZmFmLWI0YWItMzcxMDQyODA3YWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfFGuVeREWGagIhofVJvvFqj75A+MTLI7I1/FSCeRYQWYpYiMNGxKl5 rYAkBT7shQTqlzDes9SQcJQZN5z5hEEVOF/RltkDVUkA/mGTVueyfzTYcs6t++0T wdYhkamPreNLY/RGlONlp+Fbx0dPvnGmUAZLOFlub0on6AHRsib9knfHaoaKw7EQ UiuwCcsH6HcXKnFj8CMfB42jT5CLevURFbrSkpYzXEzJC7OaHozbzTpepS9FEfdR JDde6keG8r73aKfV3Ex7utgywIKfg40VY/Pf6d1Z4FGBBwYbnVmkT/OI5pMD5Ma2 UP5xC7JD+fTr6Gr5PeJNasw3nL4hTQQ= -----END CERTIFICATE-----Generated at Mon Oct 20 18:36:27 2025 by rpki-client