$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/433f4626-f5a4-3f5b-8402-ad0e6744411a.roa File: 433f4626-f5a4-3f5b-8402-ad0e6744411a.roa (raw, json) Hash identifier: /6hKp0WpafYyp4aAfTaCpZelA93Y+QBE2MMqINh58Qs= Subject key identifier: 1F:44:B2:A8:0C:28:3B:93:62:71:29:42:39:1F:00:21:81:B8:57:2B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B047C1DEE4A3EE31EF1E89EC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/433f4626-f5a4-3f5b-8402-ad0e6744411a.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:1d:ee:4a:3e:e3:1e:f1:e8:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=e4c75832-ebaf-4f7b-af26-17cb3563ba8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:df:67:03:e5:7f:40:14:1c:6a:43:41:4e:81: ff:84:4f:12:67:77:30:67:a1:be:cc:61:ab:98:3e: fe:b6:59:30:37:37:ce:c3:2c:d5:9d:fe:98:03:c1: 9f:17:7d:78:b0:15:c0:3b:58:a2:fb:ae:83:0d:e3: 92:54:17:7c:5a:a9:c7:72:d6:b5:26:9a:31:40:9a: 8a:3c:32:d1:27:30:c8:f0:42:b7:cd:bf:a5:f0:0c: 5e:7b:2d:1d:65:f9:a2:39:5b:bd:dc:3f:02:32:e6: 1b:ae:c3:36:9f:a2:59:f5:b0:2d:03:c5:cd:1d:82: ab:f8:c4:a5:f6:dc:d4:83:48:50:ed:dd:96:6d:3f: 4f:13:90:46:4d:b4:52:32:f8:1d:3a:99:e7:f3:5a: b2:b0:33:1a:a0:e6:59:21:a4:d4:74:a8:7d:8b:19: e5:57:e5:ee:72:9b:c9:2e:47:a3:64:0c:f0:91:4f: eb:86:46:b4:c2:26:e0:59:66:83:49:8a:82:6a:99: 2c:4e:33:8a:59:1a:b6:f8:95:c4:e9:c5:fa:f8:a2: ac:15:2a:4b:95:2c:a4:02:78:1c:8d:7b:ae:ff:23: c1:04:3f:86:f1:2a:04:2f:65:09:0c:17:40:14:01: c6:e4:a5:83:d1:47:d3:1f:17:d6:94:ef:6b:77:be: d8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:44:B2:A8:0C:28:3B:93:62:71:29:42:39:1F:00:21:81:B8:57:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/433f4626-f5a4-3f5b-8402-ad0e6744411a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:10:2a:95:59:57:a6:12:dd:9a:af:73:ff:00:96:5a:e0:1d: 53:f6:42:41:62:06:f6:3d:2d:8a:2c:f8:fe:7e:bb:c1:94:85: fc:57:5e:7d:a3:2f:7d:71:9a:e6:d2:b3:9f:c5:ef:5f:dd:01: 92:a7:6f:20:30:02:b9:f7:c0:5c:0c:80:24:1e:71:09:f6:e7: c6:dd:0c:e5:44:f3:e7:b8:24:d0:4e:cd:b2:f3:64:70:4b:3a: 95:af:7d:78:ed:35:eb:29:08:c9:65:05:20:c3:b2:51:09:4a: 0e:ef:a0:9a:ca:86:9f:d8:37:cf:6d:87:db:e4:de:0b:1c:d5: 78:aa:69:1b:35:6d:9f:01:94:c5:b4:d6:63:a4:15:0d:1b:bb: e1:36:82:b7:55:f6:cf:a0:9a:34:e6:13:ec:c7:f3:21:3e:0f: 99:c4:a2:33:c6:b0:c8:df:9f:03:fb:0f:d2:02:a2:e1:4e:87: c5:35:66:6a:14:d6:63:30:7a:29:10:6e:7a:f6:1c:93:de:cb: 16:ad:ac:3b:04:f7:f5:4d:3f:b9:64:51:da:04:44:4a:3c:6f: c5:63:70:68:61:56:a1:a8:54:d1:54:32:f1:8a:ad:6a:73:bf: 9d:cc:f3:ce:1b:3b:63:de:bf:12:0b:14:76:6b:db:ad:2e:38: 23:4f:84:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfB3uSj7jHvHonsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZTRjNzU4MzItZWJhZi00ZjdiLWFmMjYtMTdjYjM1NjNiYThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA399nA+V/QBQcakNBToH/hE8SZ3cwZ6G+zGGr mD7+tlkwNzfOwyzVnf6YA8GfF314sBXAO1ii+66DDeOSVBd8WqnHcta1JpoxQJqK PDLRJzDI8EK3zb+l8Axeey0dZfmiOVu93D8CMuYbrsM2n6JZ9bAtA8XNHYKr+MSl 9tzUg0hQ7d2WbT9PE5BGTbRSMvgdOpnn81qysDMaoOZZIaTUdKh9ixnlV+XucpvJ LkejZAzwkU/rhka0wibgWWaDSYqCapksTjOKWRq2+JXE6cX6+KKsFSpLlSykAngc jXuu/yPBBD+G8SoEL2UJDBdAFAHG5KWD0UfTHxfWlO9rd77YzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9EsqgMKDuTYnEpQjkfACGBuFcrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDMzZjQ2MjYtZjVhNC0z ZjViLTg0MDItYWQwZTY3NDQ0MTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwQKpVZV6YS3Zqvc/8AllrgHVP2QkFiBvY9LYos+P5+u8GUhfxXXn2j L31xmubSs5/F71/dAZKnbyAwArn3wFwMgCQecQn258bdDOVE8+e4JNBOzbLzZHBL OpWvfXjtNespCMllBSDDslEJSg7voJrKhp/YN89th9vk3gsc1XiqaRs1bZ8BlMW0 1mOkFQ0bu+E2grdV9s+gmjTmE+zH8yE+D5nEojPGsMjfnwP7D9ICouFOh8U1ZmoU 1mMweikQbnr2HJPeyxatrDsE9/VNP7lkUdoEREo8b8VjcGhhVqGoVNFUMvGKrWpz v53M884bO2PevxILFHZr260uOCNPhDw= -----END CERTIFICATE-----Generated at Mon Oct 20 16:00:01 2025 by rpki-client