$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/54229034-9041-3ee3-bfcd-6d8d02da3700.roa File: 54229034-9041-3ee3-bfcd-6d8d02da3700.roa (raw, json) Hash identifier: BfAGSktwIIMwWI2iPijRoq2Dj08hdCtsEq7hem2OHG8= Subject key identifier: D9:0C:DC:26:8F:8F:AB:B0:3C:33:D5:26:30:CD:04:8E:03:22:67:3D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BA0D2698A6B748460E3C7CC80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/54229034-9041-3ee3-bfcd-6d8d02da3700.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 8069 IP address blocks: 20.33.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:69:8a:6b:74:84:60:e3:c7:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=2d6bbd3e-46f3-4599-a289-2e95d0cb0454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:93:8c:89:7d:a9:91:d8:fe:15:fe:47:a2:07: 21:cc:76:c4:65:bc:88:f2:54:67:2c:d6:3c:05:55: 5b:10:f0:50:dd:2c:95:af:9a:93:79:28:18:c2:a3: eb:3f:e5:ee:72:7c:82:21:70:99:6e:bb:12:af:d8: d8:a0:9c:6a:29:7e:50:63:c3:56:b8:3f:1c:b2:c3: 55:3c:5a:9c:a0:c2:fe:c0:ad:01:c4:f2:0f:ca:46: 2d:1f:04:89:b4:7c:f9:d0:a9:6c:58:6a:97:28:02: 9f:c4:f7:ff:af:3e:e4:b1:5f:5e:c0:ca:d5:25:3a: 2c:c5:98:78:2d:6c:7c:de:09:f5:ee:4b:27:54:06: 42:fd:a7:6d:81:f5:d5:32:38:50:6e:1c:b1:d3:0a: 5e:40:5e:53:76:e2:73:63:fc:db:84:2d:05:31:69: 6c:3b:86:41:fc:bb:b2:cc:82:79:f8:ad:7a:b4:86: 2f:da:32:71:21:05:7a:71:cf:ac:cc:bd:1c:56:92: a3:f8:92:fc:ac:3c:37:1f:43:55:0e:08:12:38:45: c3:f3:d1:8e:11:c6:69:52:92:e0:95:0e:bf:bb:42: 50:d1:93:46:77:4b:0f:ad:ec:56:3a:2a:c1:1d:17: 4f:99:34:bf:dc:56:c1:8d:ce:e4:aa:d5:45:f2:e5: 6c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:0C:DC:26:8F:8F:AB:B0:3C:33:D5:26:30:CD:04:8E:03:22:67:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/54229034-9041-3ee3-bfcd-6d8d02da3700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:59:c4:46:e4:fb:49:90:2a:6a:85:c1:e8:3f:1c:0f:45:ab: e8:fd:a5:d7:71:73:92:ed:15:20:93:a2:16:c7:0b:d2:b8:a9: 16:60:9a:de:b9:1d:50:9c:99:8a:bb:13:1d:4d:58:dd:5b:b4: 3a:ec:51:36:a9:a1:e4:9b:36:55:a2:64:a3:c3:36:e0:22:dd: 21:84:8d:8a:81:94:55:28:e1:1a:ec:d7:23:56:9d:08:c5:b7: 90:87:ca:d9:0b:0f:65:85:c4:d0:b9:d6:3d:86:b1:c2:fb:fc: 7a:86:de:21:f6:f7:26:12:0c:ab:7c:b0:88:4d:f6:54:25:93: 76:39:1d:9b:9f:51:2a:c5:1c:29:bf:4d:fc:d8:ed:43:62:af: b5:65:a5:96:e9:d7:f7:d6:0a:4a:70:d4:ea:f9:8d:ad:1f:d0: 81:7a:5b:f1:92:ce:bb:a0:d0:92:b9:f8:da:e3:7b:30:67:9c: 3d:ae:a9:ec:c1:b1:28:8b:cc:dc:e5:ef:e6:48:0c:35:7e:78: 76:64:cd:fd:64:6c:0e:0e:d9:45:45:45:40:3a:77:ea:e0:0c: 81:67:bc:95:f0:bf:95:f1:be:b3:aa:b9:3c:17:a4:11:ca:00: b3:35:96:8e:42:2e:82:8f:c8:05:ee:b6:fb:6a:3d:a3:0e:ed: 4b:a4:e4:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mmKa3SEYOPHzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MmQ2YmJkM2UtNDZmMy00NTk5LWEyODktMmU5NWQwY2IwNDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JOMiX2pkdj+Ff5HogchzHbEZbyI8lRnLNY8 BVVbEPBQ3SyVr5qTeSgYwqPrP+XucnyCIXCZbrsSr9jYoJxqKX5QY8NWuD8cssNV PFqcoML+wK0BxPIPykYtHwSJtHz50KlsWGqXKAKfxPf/rz7ksV9ewMrVJTosxZh4 LWx83gn17ksnVAZC/adtgfXVMjhQbhyx0wpeQF5TduJzY/zbhC0FMWlsO4ZB/Luy zIJ5+K16tIYv2jJxIQV6cc+szL0cVpKj+JL8rDw3H0NVDggSOEXD89GOEcZpUpLg lQ6/u0JQ0ZNGd0sPrexWOirBHRdPmTS/3FbBjc7kqtVF8uVsIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkM3CaPj6uwPDPVJjDNBI4DImc9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTQyMjkwMzQtOTA0MS0z ZWUzLWJmY2QtNmQ4ZDAyZGEzNzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClZxEbk+0mQKmqFweg/HA9Fq+j9pddxc5LtFSCTohbHC9K4qRZgmt65 HVCcmYq7Ex1NWN1btDrsUTapoeSbNlWiZKPDNuAi3SGEjYqBlFUo4Rrs1yNWnQjF t5CHytkLD2WFxNC51j2GscL7/HqG3iH29yYSDKt8sIhN9lQlk3Y5HZufUSrFHCm/ TfzY7UNir7VlpZbp1/fWCkpw1Or5ja0f0IF6W/GSzrug0JK5+NrjezBnnD2uqezB sSiLzNzl7+ZIDDV+eHZkzf1kbA4O2UVFRUA6d+rgDIFnvJXwv5XxvrOquTwXpBHK ALM1lo5CLoKPyAXutvtqPaMO7Uuk5M0= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:08 2025 by rpki-client