$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f45acc02-de81-35fc-8583-59e61118770c.roa File: f45acc02-de81-35fc-8583-59e61118770c.roa (raw, json) Hash identifier: a2vJeOJlpultZDb4tGs6msnbvFyNuxOUohVMBdCdzDk= Subject key identifier: 5D:9B:FE:C7:02:F0:7D:5A:1C:8C:06:16:2B:E1:32:43:4C:CF:EE:15 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B0CDC237212C0AE3C2F905680 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f45acc02-de81-35fc-8583-59e61118770c.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 8069 IP address blocks: 20.33.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:23:72:12:c0:ae:3c:2f:90:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=79344b4a-5429-44fe-853a-a72d1c0cb91e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:97:55:02:c4:a6:f8:ce:6b:30:83:41:8f:f7: fe:83:4a:ee:cc:88:a8:c4:94:78:84:17:29:28:0e: d0:08:b5:27:34:ca:db:b8:ea:26:90:d1:05:74:54: 9b:2c:ad:fa:cd:e1:95:c3:15:44:05:46:7f:bb:bd: ed:22:4a:80:10:53:dc:30:15:b2:5a:3b:59:dc:20: 52:46:ef:ab:04:8f:a5:6d:73:b6:22:be:67:ba:65: a9:20:35:e9:ff:07:63:53:92:cf:c8:0b:89:87:59: 96:7c:9a:87:1f:60:2b:04:ec:30:32:dc:de:f5:a3: 2d:0e:06:c5:13:ab:17:ee:07:a0:e7:76:a8:74:d1: ea:f0:87:e8:38:80:39:c5:55:69:4e:b9:1e:f0:91: b1:0a:73:51:c1:a0:83:43:50:aa:5b:06:58:f5:a0: af:d0:ff:a1:6c:a2:d3:34:cf:5d:ba:28:68:dd:e6: 3a:e3:97:7f:b6:2a:cb:a1:99:ed:b0:ed:9a:3c:f5: bf:33:a6:8e:30:ea:83:68:74:07:83:bd:dd:11:34: b3:99:3c:fa:ca:44:46:dc:10:a8:bd:7e:f9:16:69: 28:0c:d2:06:7f:9c:3e:aa:c6:8a:05:c7:55:3b:c3: ab:06:e1:f8:db:90:82:52:17:22:45:a5:ef:f1:79: 03:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:9B:FE:C7:02:F0:7D:5A:1C:8C:06:16:2B:E1:32:43:4C:CF:EE:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f45acc02-de81-35fc-8583-59e61118770c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:99:fb:e0:79:07:6c:5d:66:45:d8:0e:63:09:a3:76:63:16: 11:69:20:ca:28:51:94:61:43:58:01:5b:bf:bf:7e:b8:d0:98: 40:74:12:69:e5:a4:68:6b:53:06:61:b9:e6:c5:21:b7:94:17: 3b:cd:42:19:3d:54:69:78:02:ee:0f:45:86:10:6e:a9:ce:6f: f9:b1:d6:a6:96:77:58:14:20:f5:16:ac:3a:1b:f3:4b:ed:3a: 35:4f:69:c0:f8:6b:d3:10:b5:f2:38:50:93:d5:07:10:90:9c: 4b:80:d4:db:57:df:cf:fc:c5:9e:8c:2b:71:a6:af:39:33:ac: 4d:7f:c9:5e:e9:85:15:96:aa:7f:f0:f1:a2:7b:9d:2f:46:af: 58:5e:3f:a5:42:52:35:2c:62:48:91:da:e7:15:64:99:f4:ae: ff:c1:67:aa:7e:6f:45:f1:48:ac:15:72:75:ac:f7:3a:8b:d5: 2b:d4:e8:40:0c:29:60:54:b4:5a:ba:6f:83:86:95:dc:ea:06: 78:e3:5c:63:66:54:68:14:9d:d9:f3:48:54:61:48:9f:9f:96: 32:d5:38:5f:81:ba:01:8e:18:34:50:a5:c4:15:3e:87:97:7d: 8d:75:96:0c:b5:d8:d9:1f:89:c5:3b:58:c6:69:18:b0:71:c2: e6:67:52:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3CNyEsCuPC+QVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk NzkzNDRiNGEtNTQyOS00NGZlLTg1M2EtYTcyZDFjMGNiOTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pdVAsSm+M5rMINBj/f+g0ruzIioxJR4hBcp KA7QCLUnNMrbuOomkNEFdFSbLK36zeGVwxVEBUZ/u73tIkqAEFPcMBWyWjtZ3CBS Ru+rBI+lbXO2Ir5numWpIDXp/wdjU5LPyAuJh1mWfJqHH2ArBOwwMtze9aMtDgbF E6sX7geg53aodNHq8IfoOIA5xVVpTrke8JGxCnNRwaCDQ1CqWwZY9aCv0P+hbKLT NM9duiho3eY645d/tirLoZntsO2aPPW/M6aOMOqDaHQHg73dETSzmTz6ykRG3BCo vX75FmkoDNIGf5w+qsaKBcdVO8OrBuH425CCUhciRaXv8XkDqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2b/scC8H1aHIwGFivhMkNMz+4VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjQ1YWNjMDItZGU4MS0z NWZjLTg1ODMtNTllNjExMTg3NzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeZ++B5B2xdZkXYDmMJo3ZjFhFpIMooUZRhQ1gBW7+/frjQmEB0Emnl pGhrUwZhuebFIbeUFzvNQhk9VGl4Au4PRYYQbqnOb/mx1qaWd1gUIPUWrDob80vt OjVPacD4a9MQtfI4UJPVBxCQnEuA1NtX38/8xZ6MK3GmrzkzrE1/yV7phRWWqn/w 8aJ7nS9Gr1heP6VCUjUsYkiR2ucVZJn0rv/BZ6p+b0XxSKwVcnWs9zqL1SvU6EAM KWBUtFq6b4OGldzqBnjjXGNmVGgUndnzSFRhSJ+fljLVOF+BugGOGDRQpcQVPoeX fY11lgy12NkficU7WMZpGLBxwuZnUmU= -----END CERTIFICATE-----Generated at Mon Oct 20 18:36:30 2025 by rpki-client