$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce3991cc-6dfe-33db-8152-8d60ebb2897a.roa File: ce3991cc-6dfe-33db-8152-8d60ebb2897a.roa (raw, json) Hash identifier: +EfXfZz7xYh+W9ZtoPE736xYcpYINqlax4HSqWHYLf4= Subject key identifier: 63:1B:8B:8E:8D:D4:36:93:A1:1C:53:D3:41:79:55:E9:06:17:7C:9A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B3C51AF8C741620F4AD10FF00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce3991cc-6dfe-33db-8152-8d60ebb2897a.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:af:8c:74:16:20:f4:ad:10:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=6e0c58e4-5835-411b-bee4-eca224f34e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:df:51:31:3f:f9:f2:83:2b:5d:02:5c:3b:e8: 10:a0:70:ee:a0:ea:12:5d:44:82:4d:91:9c:51:41: cd:e2:28:ad:df:57:d9:51:b6:0a:bc:86:a9:27:77: 61:9c:be:0a:35:78:5e:5a:45:fe:61:50:4f:98:e1: 60:07:db:3c:33:76:b5:39:5a:ca:b7:48:2a:3d:96: ca:57:74:49:21:f0:bf:5f:7d:f8:0f:d8:00:8b:37: 41:0f:fd:67:eb:65:03:98:af:89:2a:a5:7c:33:04: 94:42:6e:4a:70:93:a4:b4:4a:eb:3e:e9:b3:d0:dd: 80:3f:90:40:8f:33:20:8f:6b:a0:59:3d:d8:f3:5c: 36:1a:a9:f8:c4:04:9c:ab:03:9d:dc:1d:fa:5a:87: db:d5:6b:33:ec:30:a8:0e:8e:6c:1e:5a:26:6c:1a: 11:8b:51:d4:ca:f2:57:82:01:1b:a0:63:cc:79:c9: 19:63:5e:78:08:fd:dd:af:b0:b2:7d:9e:17:e0:ac: 68:59:c2:8b:e4:67:6e:76:e5:55:bf:f8:a7:07:b4: 0b:db:46:f2:ef:bf:1f:33:88:d0:a8:74:8a:28:b2: 68:62:19:d0:c1:2d:68:fa:29:7c:5c:0f:b4:46:a6: 6c:d9:d1:74:59:8b:c3:50:26:7f:d2:29:db:88:73: 70:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:1B:8B:8E:8D:D4:36:93:A1:1C:53:D3:41:79:55:E9:06:17:7C:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce3991cc-6dfe-33db-8152-8d60ebb2897a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:8a:5c:a1:33:c6:fa:96:a0:e5:72:6b:d7:aa:39:c2:90:40: 85:2c:de:7f:6c:f0:07:8e:61:cb:c2:10:4d:5b:55:9e:59:51: 62:39:0d:ac:e4:e4:f3:3d:2a:d5:2a:13:af:01:bc:b4:a2:f5: 14:8a:1c:9b:72:de:63:a2:80:9e:f5:81:bd:08:49:37:7e:43: 4a:4d:b5:11:c7:d3:60:f2:09:79:69:5b:d7:19:46:cd:ad:ec: 1b:50:88:b7:a0:4a:4a:9c:5b:62:b6:e2:47:aa:8d:b7:d1:6a: 9f:e6:20:d8:65:a1:c4:96:c3:d6:1c:bc:2a:0d:6e:f3:a7:c7: 43:8b:d5:70:1d:32:0f:c8:16:f7:16:5e:86:1b:00:ce:3b:ea: 85:09:07:86:a9:89:f6:ba:b9:8c:b0:cc:ba:fe:92:3a:0b:5f: 64:76:72:4d:38:36:a7:64:c5:79:0d:f2:16:b8:86:62:d7:58: 6a:a5:a5:7c:e6:15:56:de:12:47:73:74:5b:02:43:51:85:66: 36:eb:ef:97:b2:b1:e5:89:3f:d1:de:8b:dd:de:59:a5:c2:6a: 9e:52:19:19:07:6e:bf:15:74:88:bb:f0:62:46:50:70:8d:91: da:46:a8:92:b5:39:93:6d:b9:96:8c:50:32:2a:31:55:9a:a7: b9:92:48:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8Ua+MdBYg9K0Q/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk NmUwYzU4ZTQtNTgzNS00MTFiLWJlZTQtZWNhMjI0ZjM0ZTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAht9RMT/58oMrXQJcO+gQoHDuoOoSXUSCTZGc UUHN4iit31fZUbYKvIapJ3dhnL4KNXheWkX+YVBPmOFgB9s8M3a1OVrKt0gqPZbK V3RJIfC/X334D9gAizdBD/1n62UDmK+JKqV8MwSUQm5KcJOktErrPumz0N2AP5BA jzMgj2ugWT3Y81w2Gqn4xAScqwOd3B36Wofb1Wsz7DCoDo5sHlombBoRi1HUyvJX ggEboGPMeckZY154CP3dr7CyfZ4X4KxoWcKL5GduduVVv/inB7QL20by778fM4jQ qHSKKLJoYhnQwS1o+il8XA+0RqZs2dF0WYvDUCZ/0inbiHNwsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMbi46N1DaToRxT00F5VekGF3yaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2UzOTkxY2MtNmRmZS0z M2RiLTgxNTItOGQ2MGViYjI4OTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuKXKEzxvqWoOVya9eqOcKQQIUs3n9s8AeOYcvCEE1bVZ5ZUWI5Dazk 5PM9KtUqE68BvLSi9RSKHJty3mOigJ71gb0ISTd+Q0pNtRHH02DyCXlpW9cZRs2t 7BtQiLegSkqcW2K24keqjbfRap/mINhlocSWw9YcvCoNbvOnx0OL1XAdMg/IFvcW XoYbAM476oUJB4apifa6uYywzLr+kjoLX2R2ck04NqdkxXkN8ha4hmLXWGqlpXzm FVbeEkdzdFsCQ1GFZjbr75eyseWJP9Hei93eWaXCap5SGRkHbr8VdIi78GJGUHCN kdpGqJK1OZNtuZaMUDIqMVWap7mSSPw= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:55 2025 by rpki-client