$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/33088dce-4351-3949-b0c1-0d50e44527bc.roa File: 33088dce-4351-3949-b0c1-0d50e44527bc.roa (raw, json) Hash identifier: dMD1qayn+5Vtf0Yuz/9Vz38Cn3JJLRm8onUwqwVULAM= Subject key identifier: D4:FD:14:79:0E:42:8F:0C:CF:B2:2A:C9:71:1A:24:64:EB:AD:FA:B3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B92DD4418A260801C7CE1A200 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/33088dce-4351-3949-b0c1-0d50e44527bc.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.33.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:44:18:a2:60:80:1c:7c:e1:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=9b0378e4-68c5-46c4-9c87-78a0020e6d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:97:dc:36:0a:a1:8d:6f:61:4d:8d:6c:14:3c: 8d:01:d0:11:42:8e:68:21:a5:d9:51:7e:38:a2:ad: b5:b6:18:05:ec:82:c5:40:6a:63:08:d9:e4:80:82: 8b:9e:d7:c9:59:07:fa:e5:95:33:76:2b:4f:d3:c2: f9:d3:a7:4e:3b:9c:05:1d:70:3c:42:fb:3e:8b:63: c2:a7:5f:ad:66:5c:b0:ca:a3:26:28:e5:f0:e5:e1: 57:97:45:03:a6:cd:80:08:a7:0d:84:1d:82:76:c9: 59:3f:d2:58:69:ee:fb:f5:e9:a7:33:0d:b8:74:9c: fe:00:eb:e4:43:25:1a:06:77:88:38:ba:3d:48:a8: b4:ce:17:57:f9:1a:ac:a3:c6:69:6b:e6:2d:7f:ef: b8:df:31:26:3a:d0:fe:f0:e6:07:62:ca:b4:6e:81: 0d:3b:01:bb:22:25:d6:54:56:48:ee:66:71:91:89: a3:44:bf:ef:fe:2b:a5:2a:90:33:4d:87:1e:05:51: 38:88:73:8a:56:3e:5b:cb:f5:47:78:df:05:12:d2: 8f:ec:22:f7:ae:3e:c9:67:63:98:79:5f:79:07:65: 36:68:63:45:b0:e2:05:0d:ae:49:b6:22:fc:a5:52: bb:46:a3:05:01:e3:5e:82:0a:2f:94:e9:15:02:a9: fb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FD:14:79:0E:42:8F:0C:CF:B2:2A:C9:71:1A:24:64:EB:AD:FA:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/33088dce-4351-3949-b0c1-0d50e44527bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:1a:52:5d:ea:e3:d5:5b:3c:08:08:e0:58:2a:e5:81:f2:5e: 67:8a:cf:94:48:43:49:34:13:17:d1:d1:49:e4:6a:2d:4f:d4: 24:66:5d:5a:33:7f:ba:3a:c2:97:b0:2b:9b:cd:63:2f:62:ba: 79:d2:2a:33:14:19:50:d0:25:dd:82:91:92:22:52:49:1a:02: 86:f5:86:b3:e9:dd:c6:57:1c:71:31:24:a5:32:30:3e:3b:2e: 9f:1a:b7:b0:9c:34:6b:a7:98:48:ef:4c:02:f5:19:6d:5d:e1: 94:14:e0:4b:cb:43:67:b6:6d:30:07:07:bb:5e:1c:05:c6:bd: 03:92:d5:e5:65:5b:24:2d:c7:64:a8:7e:c0:f9:fd:3f:fa:57: 6e:ab:c2:86:72:a6:3f:43:7a:9f:ed:6a:7e:da:62:8d:4f:e1: 66:fa:b9:2e:d5:e2:fd:75:4c:e0:67:f4:de:51:e8:55:c3:36: 13:be:4a:a6:a1:58:b8:d6:fe:c3:e1:53:71:11:2f:63:30:76: 1a:6f:db:b4:c6:08:70:03:02:99:45:f5:ad:a3:ce:81:7a:74: 9c:de:91:a5:e8:d3:62:a0:f6:4b:43:08:ef:e5:60:33:fd:d0: d0:f4:8b:93:94:1b:c9:49:87:ca:88:e6:89:ac:04:a4:b8:6f: bb:b0:45:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3UQYomCAHHzhogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk OWIwMzc4ZTQtNjhjNS00NmM0LTljODctNzhhMDAyMGU2ZDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JfcNgqhjW9hTY1sFDyNAdARQo5oIaXZUX44 oq21thgF7ILFQGpjCNnkgIKLntfJWQf65ZUzditP08L506dOO5wFHXA8Qvs+i2PC p1+tZlywyqMmKOXw5eFXl0UDps2ACKcNhB2CdslZP9JYae779emnMw24dJz+AOvk QyUaBneIOLo9SKi0zhdX+Rqso8Zpa+Ytf++43zEmOtD+8OYHYsq0boENOwG7IiXW VFZI7mZxkYmjRL/v/iulKpAzTYceBVE4iHOKVj5by/VHeN8FEtKP7CL3rj7JZ2OY eV95B2U2aGNFsOIFDa5JtiL8pVK7RqMFAeNeggovlOkVAqn7JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNT9FHkOQo8Mz7IqyXEaJGTrrfqzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzMwODhkY2UtNDM1MS0z OTQ5LWIwYzEtMGQ1MGU0NDUyN2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsaUl3q49VbPAgI4Fgq5YHyXmeKz5RIQ0k0ExfR0Unkai1P1CRmXVoz f7o6wpewK5vNYy9iunnSKjMUGVDQJd2CkZIiUkkaAob1hrPp3cZXHHExJKUyMD47 Lp8at7CcNGunmEjvTAL1GW1d4ZQU4EvLQ2e2bTAHB7teHAXGvQOS1eVlWyQtx2So fsD5/T/6V26rwoZypj9Dep/tan7aYo1P4Wb6uS7V4v11TOBn9N5R6FXDNhO+Sqah WLjW/sPhU3ERL2Mwdhpv27TGCHADAplF9a2jzoF6dJzekaXo02Kg9ktDCO/lYDP9 0ND0i5OUG8lJh8qI5omsBKS4b7uwRRs= -----END CERTIFICATE-----Generated at Wed Nov 5 10:37:39 2025 by rpki-client