$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ffb1385a-fcf0-3f8e-9012-938f49909686.roa File: ffb1385a-fcf0-3f8e-9012-938f49909686.roa (raw, json) Hash identifier: 6bSDspU4bW5qCZG3GX+0HkfeaoKL0QP9Ld0fmMR3gFI= Subject key identifier: 2E:23:CE:8E:FD:B6:F3:BE:9F:9F:6D:8B:2D:3F:B7:DC:F3:47:EF:07 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B92DD443ACC160412024A4680 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ffb1385a-fcf0-3f8e-9012-938f49909686.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.33.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:44:3a:cc:16:04:12:02:4a:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=06f600c3-1208-4d6d-980c-5b66428d387b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:27:20:3c:a6:53:d4:04:3b:88:82:35:5e:06: 87:23:83:e0:28:a2:ab:1c:c5:c5:bb:d9:5a:b7:03: 2e:c5:54:bb:96:6a:b4:27:0e:26:2d:14:98:2b:e8: a3:1d:27:45:4d:9e:3b:17:d4:c8:a0:fe:3f:5d:b7: a9:e2:6c:18:d5:27:2a:62:d8:74:16:a9:c1:87:27: 52:13:12:fa:00:4c:c6:99:8c:1e:b7:4e:66:03:d5: 2a:5e:d5:c9:e4:62:3f:5b:6a:fd:55:64:c6:23:0f: 5a:3b:3c:ba:15:dd:db:bb:25:d0:b6:fa:3c:c3:37: d9:17:bb:52:76:b5:d9:56:73:81:d8:ee:a2:46:01: 6a:bb:53:d8:48:f9:e4:4f:2b:4a:56:c1:a2:83:12: 9e:51:f2:2b:4e:f8:0e:1f:16:90:42:a8:1f:8b:2b: eb:2c:36:50:ea:c8:11:4f:41:f6:f1:e2:31:90:3e: d5:f6:68:da:67:fc:76:0b:ec:c3:25:e0:9b:1e:b6: d3:09:35:19:6d:36:49:ee:27:2a:5a:cc:b0:64:5f: 81:72:f8:17:b1:70:71:7c:52:9d:5b:a9:ea:e9:9c: 44:96:11:e7:85:bf:23:3b:78:02:3f:6b:c7:fd:c6: e5:7b:60:a0:c7:07:3b:da:19:2a:34:44:1b:26:7c: c9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:23:CE:8E:FD:B6:F3:BE:9F:9F:6D:8B:2D:3F:B7:DC:F3:47:EF:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ffb1385a-fcf0-3f8e-9012-938f49909686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:5c:7e:94:81:e3:01:27:15:30:4a:3e:81:99:04:29:64:41: 33:3e:5a:cd:93:59:3b:28:e1:2e:a6:ac:07:e4:71:f2:55:bd: fb:56:6e:70:68:7e:38:5b:23:9e:f4:13:cb:63:70:02:08:e7: 81:41:c2:d0:ca:02:66:cb:bb:37:99:ab:d0:f3:5a:eb:91:12: f0:2d:73:68:47:76:44:e9:9e:4a:02:e0:b8:9c:44:46:29:a3: 0d:d0:34:3e:0e:ac:21:bf:c7:0c:a7:68:5c:ff:8b:a0:13:6a: 33:46:de:71:61:0a:a4:6b:d2:5c:19:bc:f0:a4:4b:63:fb:f4: b4:91:92:27:1e:24:aa:af:6d:0a:d2:e7:d6:88:5c:25:b8:7c: b8:a1:7a:54:92:d2:55:81:c4:2e:5d:3e:6b:8e:f2:0a:c3:50: 9e:fb:1e:90:c7:a8:54:37:d6:bd:2a:01:23:7d:6a:f5:a5:ce: 10:28:2a:67:d0:57:13:58:e6:ee:89:12:d0:0c:3e:7a:02:10: 3b:dd:cc:bd:78:26:8a:d1:ff:c7:a3:a9:d5:32:05:03:35:bc: 8e:c9:a1:80:8d:50:4b:c3:7e:28:9c:45:1b:e0:fc:d0:fc:c4: 79:55:b6:69:51:d5:ba:ae:2c:ae:72:9b:f7:d0:f7:88:e0:21: a8:6d:73:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3UQ6zBYEEgJKRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk MDZmNjAwYzMtMTIwOC00ZDZkLTk4MGMtNWI2NjQyOGQzODdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkicgPKZT1AQ7iII1XgaHI4PgKKKrHMXFu9la twMuxVS7lmq0Jw4mLRSYK+ijHSdFTZ47F9TIoP4/Xbep4mwY1ScqYth0FqnBhydS ExL6AEzGmYwet05mA9UqXtXJ5GI/W2r9VWTGIw9aOzy6Fd3buyXQtvo8wzfZF7tS drXZVnOB2O6iRgFqu1PYSPnkTytKVsGigxKeUfIrTvgOHxaQQqgfiyvrLDZQ6sgR T0H28eIxkD7V9mjaZ/x2C+zDJeCbHrbTCTUZbTZJ7icqWsywZF+BcvgXsXBxfFKd W6nq6ZxElhHnhb8jO3gCP2vH/cble2Cgxwc72hkqNEQbJnzJQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4jzo79tvO+n59tiy0/t9zzR+8HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZmZiMTM4NWEtZmNmMC0z ZjhlLTkwMTItOTM4ZjQ5OTA5Njg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRcfpSB4wEnFTBKPoGZBClkQTM+Ws2TWTso4S6mrAfkcfJVvftWbnBo fjhbI570E8tjcAII54FBwtDKAmbLuzeZq9DzWuuREvAtc2hHdkTpnkoC4LicREYp ow3QND4OrCG/xwynaFz/i6ATajNG3nFhCqRr0lwZvPCkS2P79LSRkiceJKqvbQrS 59aIXCW4fLihelSS0lWBxC5dPmuO8grDUJ77HpDHqFQ31r0qASN9avWlzhAoKmfQ VxNY5u6JEtAMPnoCEDvdzL14JorR/8ejqdUyBQM1vI7JoYCNUEvDfiicRRvg/ND8 xHlVtmlR1bquLK5ym/fQ94jgIahtc/Q= -----END CERTIFICATE-----Generated at Mon Oct 20 18:36:17 2025 by rpki-client