$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6a974e5c-7db3-322a-b1d2-d8ef64264249.roa File: 6a974e5c-7db3-322a-b1d2-d8ef64264249.roa (raw, json) Hash identifier: 1Gge9p3Jqnj6Iqz9nUb59jcCEI7fCXPwNG+a0qExvVs= Subject key identifier: 5E:81:7B:10:E2:4A:E4:1D:AF:D2:CA:84:93:95:93:67:E0:9C:7E:9E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B92DD43E63AAF029016960E00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6a974e5c-7db3-322a-b1d2-d8ef64264249.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.33.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:43:e6:3a:af:02:90:16:96:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=3c44e973-417e-422c-a56b-0727df86e8cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:51:4a:3d:45:0e:f1:4f:e2:47:8f:6e:6c:73: 15:2e:1f:36:17:8f:74:b7:25:e8:1b:5d:d7:06:ba: 5e:11:a8:e0:97:b6:76:c0:ae:93:63:6a:6b:58:05: ab:54:49:7b:3d:57:b3:4e:0a:d4:27:d5:70:82:3d: ac:0b:4b:78:da:d3:5d:9a:0b:2a:8a:b4:43:c1:2b: de:1e:1b:27:2c:8a:c1:23:63:0b:7b:52:19:3c:5b: 25:d9:8a:a5:7d:b9:5a:54:e8:e5:75:89:41:04:07: 09:ec:a0:1e:10:ae:bf:a9:2e:76:da:bb:48:c0:87: 07:d8:11:c8:61:e5:bd:78:8f:f9:30:2f:33:38:09: 5b:ed:b7:b7:b6:71:a0:db:4c:c8:90:6f:73:be:c0: 55:57:3c:2e:f2:98:17:24:a7:53:7d:4b:7a:c1:fb: 21:53:bf:91:8d:89:a2:11:ef:74:06:08:ef:48:ec: 10:9d:a1:e0:6b:fa:e6:67:bc:c0:9c:dc:15:a3:2e: 07:cb:f4:2e:db:44:fb:ba:02:76:44:e8:6c:56:06: 1b:01:bf:62:92:d0:07:18:10:b2:df:5d:91:40:f2: 17:34:4b:43:6b:17:1e:60:f1:73:8c:0e:70:cd:56: e4:8b:72:3e:1d:66:5a:84:65:2a:d7:fc:d8:b2:ba: ad:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:81:7B:10:E2:4A:E4:1D:AF:D2:CA:84:93:95:93:67:E0:9C:7E:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6a974e5c-7db3-322a-b1d2-d8ef64264249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:de:66:ad:92:21:75:99:f2:dc:3c:ef:b7:eb:a3:df:be:cc: 39:7d:a3:06:0e:86:ed:db:d0:eb:7d:30:57:89:e0:7e:c9:3f: fb:64:f1:ce:2a:2e:3e:4a:77:21:f3:5c:78:59:c5:e3:dd:53: 3c:79:a3:9c:34:ca:5a:bc:07:ec:51:be:76:57:66:12:8a:0e: 48:14:64:7e:cb:ed:e3:0f:e0:0b:d6:d7:f4:21:62:0f:70:6b: 2e:d5:b5:d6:6c:9a:89:4e:d4:37:a5:08:11:ff:16:be:02:ea: d2:8b:26:da:07:1a:68:8c:92:e2:b1:17:ee:18:bf:6a:e9:28: 22:96:c8:88:fe:d9:c9:f4:1a:95:c5:c4:c1:63:7c:61:5a:f0: f4:a1:3a:d6:3f:6a:36:c1:f1:e4:ba:21:e8:fe:54:fd:f2:22: 58:60:f0:63:61:0d:9b:2e:f4:ac:e3:d2:fd:79:26:e9:eb:2f: 82:95:6b:5e:06:bc:6f:ca:c2:2e:f6:bd:69:b3:7b:02:46:5a: 47:76:8f:a5:d2:c6:7f:80:3b:5e:da:5b:be:3b:47:53:a5:84: 93:f0:4d:43:43:3a:77:c2:c3:38:a5:8d:79:67:5a:0a:cf:63: b7:d1:b9:76:3f:1d:eb:e4:80:7a:43:b1:92:da:48:4b:d6:2b: f7:5e:f4:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3UPmOq8CkBaWDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk M2M0NGU5NzMtNDE3ZS00MjJjLWE1NmItMDcyN2RmODZlOGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFFKPUUO8U/iR49ubHMVLh82F490tyXoG13X BrpeEajgl7Z2wK6TY2prWAWrVEl7PVezTgrUJ9Vwgj2sC0t42tNdmgsqirRDwSve HhsnLIrBI2MLe1IZPFsl2YqlfblaVOjldYlBBAcJ7KAeEK6/qS522rtIwIcH2BHI YeW9eI/5MC8zOAlb7be3tnGg20zIkG9zvsBVVzwu8pgXJKdTfUt6wfshU7+RjYmi Ee90BgjvSOwQnaHga/rmZ7zAnNwVoy4Hy/Qu20T7ugJ2ROhsVgYbAb9iktAHGBCy 312RQPIXNEtDaxceYPFzjA5wzVbki3I+HWZahGUq1/zYsrqtLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6BexDiSuQdr9LKhJOVk2fgnH6eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmE5NzRlNWMtN2RiMy0z MjJhLWIxZDItZDhlZjY0MjY0MjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/eZq2SIXWZ8tw877fro9++zDl9owYOhu3b0Ot9MFeJ4H7JP/tk8c4q Lj5KdyHzXHhZxePdUzx5o5w0ylq8B+xRvnZXZhKKDkgUZH7L7eMP4AvW1/QhYg9w ay7VtdZsmolO1DelCBH/Fr4C6tKLJtoHGmiMkuKxF+4Yv2rpKCKWyIj+2cn0GpXF xMFjfGFa8PShOtY/ajbB8eS6Iej+VP3yIlhg8GNhDZsu9Kzj0v15JunrL4KVa14G vG/Kwi72vWmzewJGWkd2j6XSxn+AO17aW747R1OlhJPwTUNDOnfCwziljXlnWgrP Y7fRuXY/HevkgHpDsZLaSEvWK/de9H8= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:25 2025 by rpki-client