$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1013a95f-fd72-3dce-bfb5-521c56744daa.roa File: 1013a95f-fd72-3dce-bfb5-521c56744daa.roa (raw, json) Hash identifier: 9Z9oUSynU8I2I/l55KMNq0JrfKAqlj6HIFgE5NOGIKc= Subject key identifier: E7:02:6B:0F:22:78:61:BB:27:9B:42:85:04:E8:F0:C9:FB:74:52:5E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B48E1C7F9D0802D4DBE91AC80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1013a95f-fd72-3dce-bfb5-521c56744daa.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.33.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:c7:f9:d0:80:2d:4d:be:91:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=e504a697-04f1-4635-bd5c-f515afdad801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d2:b3:5b:9e:e2:4a:3d:91:1b:ea:80:6b:ac: b9:b8:b2:2a:a6:4a:15:1f:2f:bf:87:dd:93:e5:ee: f2:41:7d:e6:40:09:a4:56:27:91:10:2e:d9:b0:32: 68:21:6d:3e:a1:c5:a2:c4:e0:40:c9:b8:9b:ba:bd: 79:2e:d1:cb:8f:e5:90:23:69:c4:cd:bd:07:ca:62: 8a:f3:6d:14:af:8c:ca:e9:40:a3:4e:eb:51:b8:b6: 14:26:5c:b3:8a:b2:96:06:7f:a3:49:7d:f8:a8:6a: db:4d:9d:a8:2f:47:22:c5:5b:44:3c:cc:64:9e:f5: f7:e8:7d:68:f1:53:27:34:76:b9:40:ab:3a:ec:23: 07:fe:e2:82:30:56:b8:f6:b9:7e:45:6d:41:a9:8b: c9:60:7e:9c:a8:a3:d0:18:85:e4:5e:3c:6e:86:47: e8:14:e7:95:62:aa:97:e4:2f:60:f7:82:39:d0:07: 01:e2:0a:0a:9a:95:16:24:97:39:5a:16:b0:76:b4: 55:49:fa:ae:3b:6a:b6:13:9e:36:16:49:09:16:ac: 06:91:6a:45:66:3b:70:7b:e5:9a:ed:44:87:14:65: 49:c3:14:77:bc:0a:3d:cb:a5:de:44:55:57:39:42: 97:11:8e:79:d0:4a:82:b5:69:be:0d:f1:f7:fa:d1: 14:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:02:6B:0F:22:78:61:BB:27:9B:42:85:04:E8:F0:C9:FB:74:52:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1013a95f-fd72-3dce-bfb5-521c56744daa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:dc:78:ca:35:fc:b7:f0:51:85:3c:9e:41:ac:f5:1e:48:c7: da:c6:38:cc:bf:7f:b1:9e:30:ce:33:5c:1e:a3:d1:ea:92:89: 84:86:10:a6:1c:d4:18:ec:fa:b8:9f:24:6d:b6:e8:4c:b5:98: 29:8f:f8:fd:88:20:7f:7d:0b:63:45:6d:4a:de:9d:93:c1:19: cd:59:ff:cc:c7:e6:c2:ee:f5:36:61:a5:64:20:0f:b6:15:1b: f5:35:7e:44:04:86:af:40:01:1e:1e:1e:e1:87:b9:b2:8c:80: 19:07:52:fc:50:b0:5b:81:3a:18:a9:01:75:17:21:9b:36:61: 47:be:2e:44:7c:7e:f4:f9:57:87:67:b7:be:84:03:c9:ae:b6: 99:09:ef:ee:5c:90:ac:1a:46:d6:c9:dc:08:fc:5d:4d:81:54: 46:73:ca:9c:fe:9b:7c:94:43:73:4c:a1:8c:95:ba:fc:79:a7: a5:25:cd:92:2b:10:f5:34:9b:35:19:64:cc:7f:bc:a8:ff:78: d6:1d:dd:5b:6b:1f:7f:ac:fd:99:7e:ef:ca:77:32:b8:7b:d9: 38:df:1b:f7:57:fe:95:a9:1e:13:3d:f5:2b:f8:65:f3:1d:dc: e6:ba:30:10:6d:e9:30:c1:2d:63:87:3d:50:bf:1e:32:d0:9f: 10:43:83:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4cf50IAtTb6RrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTUwNGE2OTctMDRmMS00NjM1LWJkNWMtZjUxNWFmZGFkODAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtKzW57iSj2RG+qAa6y5uLIqpkoVHy+/h92T 5e7yQX3mQAmkVieREC7ZsDJoIW0+ocWixOBAybibur15LtHLj+WQI2nEzb0HymKK 820Ur4zK6UCjTutRuLYUJlyzirKWBn+jSX34qGrbTZ2oL0cixVtEPMxknvX36H1o 8VMnNHa5QKs67CMH/uKCMFa49rl+RW1BqYvJYH6cqKPQGIXkXjxuhkfoFOeVYqqX 5C9g94I50AcB4goKmpUWJJc5WhawdrRVSfquO2q2E542FkkJFqwGkWpFZjtwe+Wa 7USHFGVJwxR3vAo9y6XeRFVXOUKXEY550EqCtWm+DfH3+tEUmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcCaw8ieGG7J5tChQTo8Mn7dFJeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTAxM2E5NWYtZmQ3Mi0z ZGNlLWJmYjUtNTIxYzU2NzQ0ZGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrceMo1/LfwUYU8nkGs9R5Ix9rGOMy/f7GeMM4zXB6j0eqSiYSGEKYc 1Bjs+rifJG226Ey1mCmP+P2IIH99C2NFbUrenZPBGc1Z/8zH5sLu9TZhpWQgD7YV G/U1fkQEhq9AAR4eHuGHubKMgBkHUvxQsFuBOhipAXUXIZs2YUe+LkR8fvT5V4dn t76EA8mutpkJ7+5ckKwaRtbJ3Aj8XU2BVEZzypz+m3yUQ3NMoYyVuvx5p6UlzZIr EPU0mzUZZMx/vKj/eNYd3VtrH3+s/Zl+78p3Mrh72TjfG/dX/pWpHhM99Sv4ZfMd 3Oa6MBBt6TDBLWOHPVC/HjLQnxBDgyQ= -----END CERTIFICATE-----Generated at Wed Nov 5 07:08:58 2025 by rpki-client