$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e1e3adb7-10ca-3931-aa09-29f96ea8d2ec.roa File: e1e3adb7-10ca-3931-aa09-29f96ea8d2ec.roa (raw, json) Hash identifier: b4EBYwW0pz6EVAfqVLNgCq4agaAtjKGg3+uySW9XAKw= Subject key identifier: AC:01:71:79:7B:22:E2:8E:B2:97:AF:11:CE:0D:97:8F:AF:79:4D:3A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B0746C87EA405EB982CE5E700 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e1e3adb7-10ca-3931-aa09-29f96ea8d2ec.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.33.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:c8:7e:a4:05:eb:98:2c:e5:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=c34153f2-b8c6-42eb-858d-c4f22c01a067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a5:49:68:c1:e3:2a:aa:4d:ca:8f:49:e0:5c: 75:e7:88:e7:28:12:f8:5a:be:55:e3:49:96:a6:45: 5e:97:1f:c7:e4:40:26:3f:33:bc:1f:b4:7d:4a:12: f8:43:c2:00:f0:e5:f7:cd:a2:87:5b:9c:c9:d7:f1: 38:15:fd:6b:2d:44:eb:a1:e3:93:ab:ad:35:5b:de: ed:3c:97:c9:d1:26:86:19:d2:4c:f5:b8:77:b7:c3: f5:76:d0:0f:5d:b5:94:e6:80:df:b9:a8:78:68:01: 4b:9b:f9:b0:e5:09:05:dc:db:81:ab:6f:ce:6d:75: aa:43:42:e6:1b:31:ae:23:ab:5a:d4:20:1f:0b:7e: d5:cd:7b:65:73:7a:f5:5b:70:d3:04:13:f3:af:79: 07:31:c0:3e:22:13:42:57:26:99:6e:f7:40:e6:d2: 2e:9f:6b:db:06:fc:16:68:f9:f5:9f:d2:33:d0:6e: 27:e9:84:ba:1b:01:99:9d:85:7e:b5:18:03:43:ca: 0b:08:ad:b4:3d:40:fe:29:ec:f0:d1:bc:17:f6:5a: 19:7c:6f:78:dc:b8:65:1b:80:66:fe:e9:55:26:e5: 80:e9:68:8f:6a:bd:d9:2a:13:ea:9f:fc:c9:84:e2: 78:22:af:fa:db:30:8d:ad:12:c3:9e:eb:ea:23:d0: 28:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:01:71:79:7B:22:E2:8E:B2:97:AF:11:CE:0D:97:8F:AF:79:4D:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e1e3adb7-10ca-3931-aa09-29f96ea8d2ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:a3:b3:e1:9c:2e:83:6d:44:1c:29:c1:75:94:04:0e:d6:51: 67:bb:fe:fb:15:1c:74:87:f8:d0:1e:5b:77:62:57:4f:b7:03: a6:2f:10:59:71:9f:59:b3:a2:b1:56:c5:1c:f8:bf:9b:66:e1: a4:13:77:04:e1:e3:a4:fa:ac:97:64:7d:a6:b5:06:0e:53:9e: 3e:29:fa:87:17:7b:93:6e:d9:40:8c:93:14:e5:26:cd:91:86: 4e:8f:63:f2:7b:78:5c:09:aa:44:79:c6:a2:6e:6c:a3:98:e7: c0:b8:f5:ec:17:5f:1b:83:67:0e:a9:1c:c4:2f:78:1b:b8:27: 74:42:28:c5:52:27:d1:89:3c:56:cb:c0:a4:f1:f5:8c:33:fb: 2e:5c:95:0b:18:a9:33:e9:69:59:45:5a:e6:d9:32:30:39:7a: c1:13:9f:23:c0:c3:9a:ec:32:be:2f:a4:70:55:4c:36:3a:04: 40:05:d7:87:60:0b:88:b4:b3:69:e4:87:70:af:27:d2:41:2b: 3e:0e:d5:89:e7:ce:55:a6:2a:e0:4a:c9:e2:11:70:93:56:d0: b1:83:32:df:e6:cb:8f:1d:05:ca:a3:23:32:04:0b:de:34:b5: 75:93:5c:b9:a0:b7:72:38:b2:71:5c:06:0b:f9:ed:9a:d1:12: 75:99:ce:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRsh+pAXrmCzl5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk YzM0MTUzZjItYjhjNi00MmViLTg1OGQtYzRmMjJjMDFhMDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qVJaMHjKqpNyo9J4Fx154jnKBL4Wr5V40mW pkVelx/H5EAmPzO8H7R9ShL4Q8IA8OX3zaKHW5zJ1/E4Ff1rLUTroeOTq601W97t PJfJ0SaGGdJM9bh3t8P1dtAPXbWU5oDfuah4aAFLm/mw5QkF3NuBq2/ObXWqQ0Lm GzGuI6ta1CAfC37VzXtlc3r1W3DTBBPzr3kHMcA+IhNCVyaZbvdA5tIun2vbBvwW aPn1n9Iz0G4n6YS6GwGZnYV+tRgDQ8oLCK20PUD+Kezw0bwX9loZfG943LhlG4Bm /ulVJuWA6WiPar3ZKhPqn/zJhOJ4Iq/62zCNrRLDnuvqI9Ao/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwBcXl7IuKOspevEc4Nl4+veU06MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTFlM2FkYjctMTBjYS0z OTMxLWFhMDktMjlmOTZlYThkMmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqjs+GcLoNtRBwpwXWUBA7WUWe7/vsVHHSH+NAeW3diV0+3A6YvEFlx n1mzorFWxRz4v5tm4aQTdwTh46T6rJdkfaa1Bg5Tnj4p+ocXe5Nu2UCMkxTlJs2R hk6PY/J7eFwJqkR5xqJubKOY58C49ewXXxuDZw6pHMQveBu4J3RCKMVSJ9GJPFbL wKTx9Ywz+y5clQsYqTPpaVlFWubZMjA5esETnyPAw5rsMr4vpHBVTDY6BEAF14dg C4i0s2nkh3CvJ9JBKz4O1YnnzlWmKuBKyeIRcJNW0LGDMt/my48dBcqjIzIEC940 tXWTXLmgt3I4snFcBgv57ZrREnWZzns= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:48 2025 by rpki-client