$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/73bef919-66f8-303b-95b1-221664a1d714.roa File: 73bef919-66f8-303b-95b1-221664a1d714.roa (raw, json) Hash identifier: w/PLT/1srUjMgl5iWWBZUc2yvqlymdhKv1B8np+k03A= Subject key identifier: 1C:68:C3:1C:EE:FB:C2:2B:B6:BF:B9:05:B0:94:DE:8E:8E:A6:0D:63 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AF6869192EEE287320CDD0D00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/73bef919-66f8-303b-95b1-221664a1d714.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.33.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:91:92:ee:e2:87:32:0c:dd:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=70d4e875-9987-40b3-b2e0-6220f9eac00d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:90:6d:75:da:f8:c8:aa:b9:f5:7e:cb:d9:3f: 23:aa:22:b3:66:45:6a:6d:1e:8e:21:d8:97:6a:e4: f4:0e:c9:20:e9:fd:fc:d1:57:3b:be:d7:5c:aa:63: 60:d5:42:f4:d1:a7:4c:43:f3:79:a2:4b:c7:78:35: 62:d1:b2:97:7b:00:0b:67:40:84:22:11:03:f0:0a: 19:1e:db:6b:89:e1:fc:0d:ac:d2:d3:6b:c9:aa:50: e9:40:52:70:30:54:48:00:fe:83:5c:60:97:b5:e9: ed:d6:7e:2c:aa:ab:66:c8:0e:5c:dc:07:62:f3:32: cf:fb:44:37:15:66:b7:e1:3f:67:f3:60:b2:56:56: c1:0d:57:00:d5:e9:4a:1d:02:98:56:26:94:b6:bf: 6e:e0:cf:87:24:7e:1f:c0:d9:61:08:8c:89:90:7d: cb:d3:02:74:54:f9:cb:0d:b0:92:f3:89:94:ae:bf: 5d:ca:b9:61:cd:5f:71:f3:eb:d9:9d:dc:43:f0:76: ff:a2:45:14:60:c0:c1:e8:a0:50:82:a2:b6:6f:5a: d8:d8:51:6c:83:b6:71:eb:47:c2:ce:56:a6:90:1c: 83:0f:fb:30:24:67:c1:3b:44:b4:0c:b9:b8:19:04: 17:91:6e:f3:b5:01:b5:1e:a4:36:e5:5c:6a:40:bd: 77:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:68:C3:1C:EE:FB:C2:2B:B6:BF:B9:05:B0:94:DE:8E:8E:A6:0D:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/73bef919-66f8-303b-95b1-221664a1d714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:c0:20:84:ea:44:43:89:ad:69:9f:6a:9c:47:78:53:dc:a4: f9:8a:60:6a:99:f9:6f:11:e1:c6:72:96:c5:54:59:a2:85:88: ca:95:be:df:fd:51:a2:bf:36:b0:35:ee:03:7b:f7:7c:4b:e1: e1:6c:2d:35:79:5c:c6:c4:ea:1a:f1:8c:83:5f:a3:58:ff:e9: 2b:38:20:dc:c2:24:8f:7b:e8:80:ae:40:5f:f0:5a:d9:3b:dd: 88:44:50:a3:59:0c:f6:05:7d:56:d8:51:5b:7e:dd:eb:6a:f9: fb:26:be:d3:85:33:7c:27:41:f6:23:1b:67:b8:e1:b8:77:2a: 1d:e3:58:0f:36:f5:8a:7b:54:03:2e:9b:52:3b:84:8f:d8:65: 96:7f:c8:c7:8c:73:fc:7d:e4:5a:ca:54:58:2c:fc:91:f6:2a: b8:fb:65:3d:03:08:ef:a5:4e:0c:bb:6c:e3:30:bc:44:71:d4: ec:4f:ba:56:5c:29:59:04:86:ed:c5:87:f0:36:84:20:8f:bc: e2:48:63:ce:d6:26:1c:9e:c1:87:b9:f7:39:87:05:1a:fc:80: f7:fe:c6:89:0a:1d:13:61:92:1e:8a:af:88:02:42:ec:30:ae: 76:72:e1:74:a0:ab:60:f7:54:01:44:66:8c:ea:a8:e9:08:84: 6f:47:cb:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2hpGS7uKHMgzdDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk NzBkNGU4NzUtOTk4Ny00MGIzLWIyZTAtNjIyMGY5ZWFjMDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5Btddr4yKq59X7L2T8jqiKzZkVqbR6OIdiX auT0Dskg6f380Vc7vtdcqmNg1UL00adMQ/N5okvHeDVi0bKXewALZ0CEIhED8AoZ HttrieH8DazS02vJqlDpQFJwMFRIAP6DXGCXtent1n4sqqtmyA5c3Adi8zLP+0Q3 FWa34T9n82CyVlbBDVcA1elKHQKYViaUtr9u4M+HJH4fwNlhCIyJkH3L0wJ0VPnL DbCS84mUrr9dyrlhzV9x8+vZndxD8Hb/okUUYMDB6KBQgqK2b1rY2FFsg7Zx60fC zlamkByDD/swJGfBO0S0DLm4GQQXkW7ztQG1HqQ25VxqQL13/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxowxzu+8Irtr+5BbCU3o6Opg1jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzNiZWY5MTktNjZmOC0z MDNiLTk1YjEtMjIxNjY0YTFkNzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCF6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLAIITqREOJrWmfapxHeFPcpPmKYGqZ+W8R4cZylsVUWaKFiMqVvt/9 UaK/NrA17gN793xL4eFsLTV5XMbE6hrxjINfo1j/6Ss4INzCJI976ICuQF/wWtk7 3YhEUKNZDPYFfVbYUVt+3etq+fsmvtOFM3wnQfYjG2e44bh3Kh3jWA829Yp7VAMu m1I7hI/YZZZ/yMeMc/x95FrKVFgs/JH2Krj7ZT0DCO+lTgy7bOMwvERx1OxPulZc KVkEhu3Fh/A2hCCPvOJIY87WJhyewYe59zmHBRr8gPf+xokKHRNhkh6Kr4gCQuww rnZy4XSgq2D3VAFEZozqqOkIhG9HyxM= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:08 2025 by rpki-client