$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25993c8f-1295-3237-87f5-6f89f9180d01.roa File: 25993c8f-1295-3237-87f5-6f89f9180d01.roa (raw, json) Hash identifier: R3dEDkgqfPC1qoBgP1Wxk4gfGmF6F+rvV90ABO06ZaY= Subject key identifier: 56:45:FD:6C:9E:2F:21:43:9A:E6:C0:47:00:7A:59:13:D7:5F:C8:B5 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B047C1D0B2C0A5817D2C9E080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25993c8f-1295-3237-87f5-6f89f9180d01.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:1d:0b:2c:0a:58:17:d2:c9:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=6f700374-44e2-4594-840d-92257d76ec82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2b:c4:05:7d:cd:28:73:bf:02:ec:8e:95:59: 8f:18:77:3c:f0:cc:5c:55:37:5d:e6:7b:3d:47:3b: 99:78:3d:1d:87:91:95:d5:25:2e:d4:42:d0:66:66: 91:9c:9f:2f:c6:06:7e:40:f4:05:6e:1c:3a:89:44: de:e6:97:07:c7:51:b9:b9:54:2e:a0:05:6d:47:08: ff:0e:0d:8f:cc:07:f6:90:f9:1e:6d:9c:5f:53:3e: c8:09:cb:b3:93:94:9d:55:33:cb:05:ea:2f:63:d0: 99:73:25:47:78:6e:20:89:44:15:d3:11:b3:52:a2: 26:ae:75:e5:c6:30:2e:d8:5b:a4:8a:c8:2e:2c:66: 2d:5d:b9:a9:ae:89:27:73:a0:ea:39:3d:82:dd:7e: a4:2b:e5:17:55:09:59:cc:c3:87:0a:36:60:6f:a2: aa:09:80:b6:2e:16:2f:5e:dc:29:01:d8:27:fe:be: 88:f2:36:60:fe:00:da:94:7b:9d:7d:91:8d:04:f0: 71:38:b6:fc:1d:7b:60:5b:fc:55:99:1e:00:f6:c5: 88:65:ff:8d:78:05:ee:e1:c3:96:c5:a6:9e:19:a9: 2b:fd:fd:20:3d:73:4c:d5:aa:d6:28:f0:07:94:dd: 09:c6:9e:4e:52:93:e3:78:44:6c:63:96:7f:80:5a: 0d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:45:FD:6C:9E:2F:21:43:9A:E6:C0:47:00:7A:59:13:D7:5F:C8:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25993c8f-1295-3237-87f5-6f89f9180d01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:ff:6a:b0:51:3a:48:af:1a:23:b3:4d:45:29:58:73:0c:74: 77:25:7a:df:7a:a6:b4:c1:05:ae:42:bf:08:99:c4:8a:06:67: ba:2f:b3:10:65:bc:33:0a:d0:b5:93:0a:0a:fc:9a:a6:4f:45: da:f5:7b:64:39:4f:3c:92:8b:6a:1e:63:c2:3a:74:c3:c4:e2: 0d:4a:d3:56:53:eb:3e:ee:de:e4:5e:3d:d8:72:85:c4:64:2d: f1:cd:58:8e:d7:34:01:7b:14:7f:9f:71:2a:5f:e0:f6:58:26: 97:c9:01:99:25:a7:46:05:39:29:ea:fd:e3:58:f2:a8:bb:b1: 11:ee:79:4e:27:33:41:0c:4e:31:0e:2c:7b:8a:83:d8:59:90: 0c:4a:77:b0:6b:77:42:e8:c8:90:a9:ee:44:0b:1f:be:c8:8c: e7:4f:5a:b0:e2:2f:7f:04:7f:7f:f9:18:cf:bc:48:a8:90:ce: 76:dd:5d:67:5d:8d:07:43:2e:df:28:e4:14:6e:49:13:b9:87: 80:bb:bb:1e:96:b8:b6:e0:fd:34:45:f1:f7:2e:15:af:0a:54: e9:06:11:91:98:be:dc:21:11:1b:c5:d4:cc:6d:74:52:83:5f: 57:cf:18:71:92:ee:c4:ca:2a:c6:d1:86:0e:b6:63:27:46:76: 6b:92:c9:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfB0LLApYF9LJ4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk NmY3MDAzNzQtNDRlMi00NTk0LTg0MGQtOTIyNTdkNzZlYzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjivEBX3NKHO/AuyOlVmPGHc88MxcVTdd5ns9 RzuZeD0dh5GV1SUu1ELQZmaRnJ8vxgZ+QPQFbhw6iUTe5pcHx1G5uVQuoAVtRwj/ Dg2PzAf2kPkebZxfUz7ICcuzk5SdVTPLBeovY9CZcyVHeG4giUQV0xGzUqImrnXl xjAu2FukisguLGYtXbmproknc6DqOT2C3X6kK+UXVQlZzMOHCjZgb6KqCYC2LhYv XtwpAdgn/r6I8jZg/gDalHudfZGNBPBxOLb8HXtgW/xVmR4A9sWIZf+NeAXu4cOW xaaeGakr/f0gPXNM1arWKPAHlN0Jxp5OUpPjeERsY5Z/gFoNBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZF/WyeLyFDmubARwB6WRPXX8i1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjU5OTNjOGYtMTI5NS0z MjM3LTg3ZjUtNmY4OWY5MTgwZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEL/arBROkivGiOzTUUpWHMMdHclet96prTBBa5CvwiZxIoGZ7ovsxBl vDMK0LWTCgr8mqZPRdr1e2Q5TzySi2oeY8I6dMPE4g1K01ZT6z7u3uRePdhyhcRk LfHNWI7XNAF7FH+fcSpf4PZYJpfJAZklp0YFOSnq/eNY8qi7sRHueU4nM0EMTjEO LHuKg9hZkAxKd7Brd0LoyJCp7kQLH77IjOdPWrDiL38Ef3/5GM+8SKiQznbdXWdd jQdDLt8o5BRuSRO5h4C7ux6WuLbg/TRF8fcuFa8KVOkGEZGYvtwhERvF1MxtdFKD X1fPGHGS7sTKKsbRhg62YydGdmuSyYU= -----END CERTIFICATE-----Generated at Mon Oct 20 15:56:57 2025 by rpki-client