$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/adce9981-1640-3807-863a-5100ced68525.roa File: adce9981-1640-3807-863a-5100ced68525.roa (raw, json) Hash identifier: 6+KnqKpZxqVmSFuUpLdsYMBLXLkJsShneXhKARxGGXo= Subject key identifier: DD:FC:3B:B0:DB:C8:93:C5:16:9B:AD:15:BF:60:C6:12:9A:75:27:D7 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B3C51B0CF8945C09574D72580 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/adce9981-1640-3807-863a-5100ced68525.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:b0:cf:89:45:c0:95:74:d7:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=b5b2be68-2e2e-476c-a210-8be562d5c610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:75:86:75:fe:57:ea:e0:06:75:62:34:1b:35: e2:10:45:25:f8:76:83:b8:48:46:02:7a:1f:8a:0a: d3:4c:27:77:45:40:87:70:16:3c:a8:26:35:df:6a: db:18:bb:b6:25:6e:b3:99:67:b8:f0:96:5b:00:ec: f3:80:55:7b:f7:97:72:c0:23:4e:60:98:61:89:ec: f4:58:53:b3:17:98:16:f3:39:d7:29:e5:d1:e0:ad: aa:35:0d:fb:24:65:d0:b6:80:e6:87:b7:7f:08:9c: 56:3c:07:a4:f9:94:bf:12:35:c1:9c:cc:4b:2c:01: 3a:40:6a:61:d2:8a:29:54:a6:d6:0d:eb:fd:f2:4c: 46:a0:09:c4:a4:6b:bc:fd:f3:1c:cb:ad:09:3a:fe: f9:7e:52:22:95:66:c5:3c:94:78:22:ff:01:74:32: 19:c0:58:f6:d4:e5:9d:a7:32:2b:c0:8b:c8:6d:f2: ad:ce:0e:c5:c2:f8:96:7a:db:df:38:65:63:cf:01: 85:cb:cc:6d:cb:d8:b0:86:fd:77:80:e2:6f:1d:69: de:1b:d7:02:8d:2d:58:83:95:16:03:d8:4f:a9:fe: 8d:50:f0:e7:65:89:b6:29:1f:5f:74:36:ad:38:12: 8c:09:9a:4c:7d:77:b4:36:a3:1a:39:9e:9f:95:84: 5d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FC:3B:B0:DB:C8:93:C5:16:9B:AD:15:BF:60:C6:12:9A:75:27:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/adce9981-1640-3807-863a-5100ced68525.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:d6:9c:11:4a:9a:f5:ad:f5:1a:68:07:2a:3f:d2:6f:32:ba: 77:cc:e2:75:04:cc:20:e7:19:09:91:a5:65:85:2d:bb:2e:46: 98:0a:3a:a6:d4:16:2b:93:6d:5d:5f:18:08:58:e1:5e:55:52: c0:7a:18:64:ab:19:da:c6:1b:8d:79:05:fe:34:40:19:ef:78: 0f:e3:e8:4c:30:54:7e:33:19:e7:c8:65:35:b0:89:16:52:3a: 18:56:a7:1b:3b:05:c3:9f:0c:07:92:bd:e1:a1:66:ef:a5:06: 56:bf:cf:fe:2d:f0:f9:86:5c:2a:33:77:c6:23:ac:b7:a3:04: a9:43:25:4d:17:56:90:37:1c:a7:da:29:fc:c1:54:65:ec:75: 74:22:f4:bf:f3:4c:2f:18:79:d4:e8:22:02:7a:d3:fe:70:7f: e5:dc:b2:e7:bc:a2:41:36:5c:cb:ac:57:f3:31:1e:f3:b1:67: 82:5f:85:af:3b:95:8d:06:42:03:f2:bb:b7:87:0d:5e:a8:46: df:97:07:52:94:c9:20:b0:23:c2:7b:33:05:bd:1a:80:19:95: 43:40:b0:4d:65:2d:7d:91:cb:c3:0a:a4:08:ce:73:2a:c7:4c: 8c:ff:84:0f:d4:da:e3:cd:81:5c:47:a4:25:80:24:88:f9:41: 46:9a:33:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8UbDPiUXAlXTXJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk YjViMmJlNjgtMmUyZS00NzZjLWEyMTAtOGJlNTYyZDVjNjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznWGdf5X6uAGdWI0GzXiEEUl+HaDuEhGAnof igrTTCd3RUCHcBY8qCY132rbGLu2JW6zmWe48JZbAOzzgFV795dywCNOYJhhiez0 WFOzF5gW8znXKeXR4K2qNQ37JGXQtoDmh7d/CJxWPAek+ZS/EjXBnMxLLAE6QGph 0oopVKbWDev98kxGoAnEpGu8/fMcy60JOv75flIilWbFPJR4Iv8BdDIZwFj21OWd pzIrwIvIbfKtzg7FwviWetvfOGVjzwGFy8xty9iwhv13gOJvHWneG9cCjS1Yg5UW A9hPqf6NUPDnZYm2KR9fdDatOBKMCZpMfXe0NqMaOZ6flYRdewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN38O7DbyJPFFputFb9gxhKadSfXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWRjZTk5ODEtMTY0MC0z ODA3LTg2M2EtNTEwMGNlZDY4NTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/WnBFKmvWt9RpoByo/0m8yunfM4nUEzCDnGQmRpWWFLbsuRpgKOqbU FiuTbV1fGAhY4V5VUsB6GGSrGdrGG415Bf40QBnveA/j6EwwVH4zGefIZTWwiRZS OhhWpxs7BcOfDAeSveGhZu+lBla/z/4t8PmGXCozd8YjrLejBKlDJU0XVpA3HKfa KfzBVGXsdXQi9L/zTC8YedToIgJ60/5wf+Xcsue8okE2XMusV/MxHvOxZ4Jfha87 lY0GQgPyu7eHDV6oRt+XB1KUySCwI8J7MwW9GoAZlUNAsE1lLX2Ry8MKpAjOcyrH TIz/hA/U2uPNgVxHpCWAJIj5QUaaMyo= -----END CERTIFICATE-----Generated at Wed Nov 5 08:55:56 2025 by rpki-client