$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/77dcec28-3dd5-33e9-b1bb-17b034a18bc1.roa File: 77dcec28-3dd5-33e9-b1bb-17b034a18bc1.roa (raw, json) Hash identifier: emFfOWtvTVccMr0sFFYPjsh5cX3p5KvujMrKbi6Y5pA= Subject key identifier: E7:F3:20:83:54:6B:0E:71:04:A1:F3:9C:07:89:F9:7E:CB:EC:5C:34 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AFAB688F30D79E9D26E810B80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/77dcec28-3dd5-33e9-b1bb-17b034a18bc1.roa Signing time: Tue 26 Aug 2025 01:00:32 +0000 ROA not before: Tue 26 Aug 2025 01:00:32 +0000 ROA not after: Mon 24 Nov 2025 02:00:32 +0000 asID: 8069 IP address blocks: 20.33.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:b6:88:f3:0d:79:e9:d2:6e:81:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 26 01:00:32 2025 GMT Not After : Nov 24 02:00:32 2025 GMT Subject: CN=e7592642-4d62-4e99-a017-5e86e349af6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:05:ee:4a:05:ca:f4:f7:97:2a:12:eb:8b:ea: 6c:0c:d1:ca:b4:51:eb:58:b9:cb:0b:55:30:f0:24: 94:8e:2d:cf:e3:3f:f3:64:d9:c1:97:58:13:c8:61: e8:a5:06:d9:d8:e9:73:ec:4d:03:37:12:3e:34:57: e2:4d:eb:b3:bf:c6:4b:81:f9:ab:4c:51:cf:86:3b: 61:54:59:15:19:3d:92:60:21:b4:8f:75:b1:f5:b5: 81:6d:78:c6:d6:5c:60:0c:5e:6d:28:ca:22:22:89: 0b:1b:a6:ad:86:27:5f:ab:a9:20:03:77:6e:51:8e: 67:83:d7:7b:0a:79:83:97:fc:20:97:d8:b2:e0:29: 11:8a:70:02:d9:79:fb:6b:46:c2:eb:1f:da:6a:58: 36:79:a8:97:d5:32:f2:ee:fc:a3:5b:9d:64:31:d3: 86:29:fa:ae:1c:de:55:ec:37:c9:d1:ab:ee:5c:f3: 35:cb:cc:bf:94:38:e0:21:b8:54:6c:a8:b1:4c:fc: 3f:1f:09:72:84:2b:3a:94:22:41:9d:79:8f:3f:09: f4:31:8e:16:bf:aa:c4:65:ba:dd:7e:87:e6:21:b7: 2f:5a:55:c6:b6:4a:c9:a4:fe:ce:80:97:70:4a:c5: fd:41:a0:94:9f:b3:fb:0f:a3:38:63:dc:19:cc:8b: 4e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F3:20:83:54:6B:0E:71:04:A1:F3:9C:07:89:F9:7E:CB:EC:5C:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/77dcec28-3dd5-33e9-b1bb-17b034a18bc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:b2:3f:b5:ed:5a:6a:0b:13:6c:2e:12:19:3f:5a:fd:2b:78: 96:3e:f9:3a:8e:9d:f4:d9:b4:e1:da:19:4b:32:10:4a:4a:62: 77:f7:2c:03:f5:a7:ba:69:ef:47:95:d5:4a:4c:96:0d:b4:e5: e5:a5:f3:e6:9c:71:b9:95:c5:2b:24:60:74:16:ba:40:01:ca: 14:16:f8:85:2d:07:16:95:9d:b7:fd:40:8c:e9:7c:2e:50:c0: e3:d0:4a:a1:6a:f8:6b:f8:23:c6:fd:c4:9a:a5:dd:94:2b:da: b2:9d:0e:d0:8c:6c:59:92:84:6b:5e:33:05:a3:71:d4:0d:50: ac:c8:f3:f8:4c:9e:9c:5a:ad:db:b5:1c:c1:1e:bc:1b:6e:de: 2b:bd:51:77:02:74:7e:c4:44:f0:89:e0:e9:ad:05:c1:c7:82: d7:16:27:51:fc:57:48:bb:77:99:72:57:4a:72:e1:8b:ce:bb: a9:59:2e:51:fe:f4:d1:0d:a4:83:e9:f2:39:68:4f:45:cb:d6: 0d:13:74:b8:5e:95:13:b7:5d:68:1f:86:45:32:c0:2a:7c:96: f8:86:31:dd:f2:05:23:af:64:8f:ea:83:d5:27:3a:b3:fd:c3: 87:f2:fc:ad:64:1b:3c:95:f2:fc:bc:a9:c3:a9:50:25:b8:19: d3:d9:f1:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr6tojzDXnp0m6BC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNjAxMDAzMloXDTI1MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk ZTc1OTI2NDItNGQ2Mi00ZTk5LWEwMTctNWU4NmUzNDlhZjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQXuSgXK9PeXKhLri+psDNHKtFHrWLnLC1Uw 8CSUji3P4z/zZNnBl1gTyGHopQbZ2Olz7E0DNxI+NFfiTeuzv8ZLgfmrTFHPhjth VFkVGT2SYCG0j3Wx9bWBbXjG1lxgDF5tKMoiIokLG6athidfq6kgA3duUY5ng9d7 CnmDl/wgl9iy4CkRinAC2Xn7a0bC6x/aalg2eaiX1TLy7vyjW51kMdOGKfquHN5V 7DfJ0avuXPM1y8y/lDjgIbhUbKixTPw/HwlyhCs6lCJBnXmPPwn0MY4Wv6rEZbrd fofmIbcvWlXGtkrJpP7OgJdwSsX9QaCUn7P7D6M4Y9wZzItO4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfzIINUaw5xBKHznAeJ+X7L7Fw0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzdkY2VjMjgtM2RkNS0z M2U5LWIxYmItMTdiMDM0YTE4YmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWyP7XtWmoLE2wuEhk/Wv0reJY++TqOnfTZtOHaGUsyEEpKYnf3LAP1 p7pp70eV1UpMlg205eWl8+accbmVxSskYHQWukAByhQW+IUtBxaVnbf9QIzpfC5Q wOPQSqFq+Gv4I8b9xJql3ZQr2rKdDtCMbFmShGteMwWjcdQNUKzI8/hMnpxardu1 HMEevBtu3iu9UXcCdH7ERPCJ4OmtBcHHgtcWJ1H8V0i7d5lyV0py4YvOu6lZLlH+ 9NENpIPp8jloT0XL1g0TdLhelRO3XWgfhkUywCp8lviGMd3yBSOvZI/qg9UnOrP9 w4fy/K1kGzyV8vy8qcOpUCW4GdPZ8Yc= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:16 2025 by rpki-client