$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/19eeb1b8-4ee6-3a5a-8669-0ec5d5e20141.roa File: 19eeb1b8-4ee6-3a5a-8669-0ec5d5e20141.roa (raw, json) Hash identifier: LXRRt0fKx+S+hEUvMUo/2nVRObv2MHAMl7M5e1ARAEE= Subject key identifier: 4A:FD:B2:8D:0E:35:8D:4F:C3:29:CD:D1:E1:A8:E7:E6:D0:99:A1:E7 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AFAB687FC65060EBF45BE5F80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/19eeb1b8-4ee6-3a5a-8669-0ec5d5e20141.roa Signing time: Tue 26 Aug 2025 01:00:32 +0000 ROA not before: Tue 26 Aug 2025 01:00:32 +0000 ROA not after: Mon 24 Nov 2025 02:00:32 +0000 asID: 8069 IP address blocks: 20.33.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:b6:87:fc:65:06:0e:bf:45:be:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 26 01:00:32 2025 GMT Not After : Nov 24 02:00:32 2025 GMT Subject: CN=31a33571-42cf-4cc7-b3d6-e4bbbe3203b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:79:b0:00:ec:3a:ca:76:37:7f:ce:0a:18:34: dd:5f:5f:30:66:32:8d:56:50:80:98:76:24:58:bf: ae:3d:73:5e:7b:64:b2:c9:60:e1:0c:18:d6:df:02: 61:20:f3:b2:29:2f:9e:c7:26:20:54:61:71:ff:fa: 77:43:08:ac:06:5c:bb:ef:5a:88:7c:61:d8:f0:d8: 8a:a5:5e:c1:a9:ac:4b:bc:ff:fb:83:65:91:a6:c8: 8b:b5:b5:39:4f:ea:a5:ac:c7:01:12:82:ee:d6:c2: 4a:2d:c3:49:53:8d:ac:ca:1c:36:0d:5d:f0:1d:ee: 6b:15:98:fc:32:b2:47:7a:3c:14:40:37:22:7c:26: 1f:23:91:18:a0:7b:86:5f:be:65:99:53:68:82:3d: 69:30:2f:28:77:f3:e0:eb:9f:ab:f3:6d:0d:fc:07: d2:fd:b3:ee:26:57:b8:bb:8c:f9:4c:1b:56:89:f9: f8:49:f3:7e:f2:f1:70:95:9a:0d:24:b7:da:42:c6: 1b:32:eb:cc:6c:a5:17:95:52:37:15:e1:6f:27:54: e2:89:e6:32:b0:9a:35:6c:9c:50:f5:14:33:39:45: c9:55:bb:9c:09:b9:0c:c1:90:3a:df:e9:ed:2c:f4: 22:e2:2a:21:39:96:83:44:01:ea:79:46:ab:7d:c4: d0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FD:B2:8D:0E:35:8D:4F:C3:29:CD:D1:E1:A8:E7:E6:D0:99:A1:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/19eeb1b8-4ee6-3a5a-8669-0ec5d5e20141.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:8e:cf:2b:27:bd:60:fe:77:33:59:48:70:22:72:3b:87:e8: 01:aa:ef:e6:8a:09:93:c8:2a:f9:8d:5c:6c:2b:13:e8:d9:f9: 1f:79:9e:a4:2c:2e:28:bd:01:66:51:5b:60:bd:5c:67:e4:e5: c7:db:09:31:2d:98:83:87:56:80:6d:e8:4b:e0:26:62:e1:d2: e8:b2:8b:8a:f0:f4:8d:40:f8:6f:22:e7:22:bc:69:2e:67:22: 33:7b:70:cf:47:ef:5b:e6:96:cf:27:13:43:19:69:19:39:3d: ae:de:05:2f:32:e3:92:21:47:2c:41:31:c3:df:d3:c1:85:f4: 1b:bb:94:33:92:ac:45:4f:9e:d8:d6:aa:0b:6b:0b:51:5b:90: bb:83:95:87:16:92:7f:6f:97:a6:00:5b:46:99:39:cb:cc:ae: f6:76:82:09:ce:ca:6d:1b:ca:eb:7f:84:d9:d6:17:42:84:d2: 0d:b3:6f:e7:e9:28:5b:b9:e3:fa:02:4f:7c:66:3a:f2:d0:07: ff:e6:7e:d3:d3:7b:2b:cb:39:02:15:61:ac:a9:64:af:5f:bd: cc:b9:4c:da:d9:0f:53:69:30:e9:ea:42:fb:78:19:b1:50:61: b1:d8:1b:98:9c:21:11:12:07:54:25:3e:2e:27:4d:0c:59:ea: 71:a0:d3:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr6tof8ZQYOv0W+X4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNjAxMDAzMloXDTI1MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk MzFhMzM1NzEtNDJjZi00Y2M3LWIzZDYtZTRiYmJlMzIwM2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXmwAOw6ynY3f84KGDTdX18wZjKNVlCAmHYk WL+uPXNee2SyyWDhDBjW3wJhIPOyKS+exyYgVGFx//p3QwisBly771qIfGHY8NiK pV7BqaxLvP/7g2WRpsiLtbU5T+qlrMcBEoLu1sJKLcNJU42syhw2DV3wHe5rFZj8 MrJHejwUQDcifCYfI5EYoHuGX75lmVNogj1pMC8od/Pg65+r820N/AfS/bPuJle4 u4z5TBtWifn4SfN+8vFwlZoNJLfaQsYbMuvMbKUXlVI3FeFvJ1TiieYysJo1bJxQ 9RQzOUXJVbucCbkMwZA63+ntLPQi4iohOZaDRAHqeUarfcTQgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEr9so0ONY1PwynN0eGo5+bQmaHnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTllZWIxYjgtNGVlNi0z YTVhLTg2NjktMGVjNWQ1ZTIwMTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaOzysnvWD+dzNZSHAicjuH6AGq7+aKCZPIKvmNXGwrE+jZ+R95nqQs Lii9AWZRW2C9XGfk5cfbCTEtmIOHVoBt6EvgJmLh0uiyi4rw9I1A+G8i5yK8aS5n IjN7cM9H71vmls8nE0MZaRk5Pa7eBS8y45IhRyxBMcPf08GF9Bu7lDOSrEVPntjW qgtrC1FbkLuDlYcWkn9vl6YAW0aZOcvMrvZ2ggnOym0byut/hNnWF0KE0g2zb+fp KFu54/oCT3xmOvLQB//mftPTeyvLOQIVYaypZK9fvcy5TNrZD1NpMOnqQvt4GbFQ YbHYG5icIRESB1QlPi4nTQxZ6nGg06A= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:08 2025 by rpki-client