$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5411a0e2-71bf-3e49-a170-f2238edd14df.roa File: 5411a0e2-71bf-3e49-a170-f2238edd14df.roa (raw, json) Hash identifier: XKYWt/tGBgn8cnM2ftevKyBORzkB0uCXbAaC8YMdqGA= Subject key identifier: 2F:1D:F8:B6:7E:92:28:86:35:46:6C:08:62:80:20:9D:00:63:21:8E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B84E789E9AAA0D68713FDB2C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5411a0e2-71bf-3e49-a170-f2238edd14df.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 8069 IP address blocks: 20.33.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:89:e9:aa:a0:d6:87:13:fd:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=fef291fd-4119-4ab8-855f-128b45af4698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e7:71:9f:78:59:f7:82:1a:7f:8e:b3:9c:30: b1:c6:d7:83:c8:f8:58:f7:f7:5f:41:93:0e:bd:60: 28:2a:e0:72:df:51:de:7d:91:0b:58:69:61:02:07: 4e:e0:0c:01:50:48:da:f9:ad:f7:8f:a8:71:8c:a7: 69:1c:e8:0c:67:1b:a4:cb:fc:c5:28:b4:93:22:a1: 49:c7:f7:88:21:b7:a0:b7:74:db:a3:c5:9e:d0:23: d1:18:38:21:82:fe:a4:bf:3c:25:c2:86:58:92:cd: 9d:db:c9:a2:bb:ff:3f:64:ae:65:9b:50:76:8a:e3: 41:1c:58:78:e1:fe:10:e7:e4:10:73:54:08:67:58: 4b:23:ec:87:c9:3d:95:75:6d:c7:38:9a:e0:ad:da: 66:4d:62:c7:35:ec:8b:c9:e3:21:24:52:66:cd:a5: 01:61:73:46:65:51:d6:c6:77:62:63:94:8b:8c:87: 8f:de:77:9a:8b:3a:18:9a:c8:82:65:14:df:11:9f: ad:1d:aa:ad:53:51:f2:01:cb:0f:fd:af:d4:4b:84: 89:8d:3f:2b:cc:cc:cd:af:73:c1:2f:0e:12:3b:01: 15:8c:77:56:42:15:48:d0:1a:99:1e:b9:2e:83:3b: 73:43:bb:95:61:2a:7f:30:1c:92:5b:e6:ad:b7:92: 2b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:1D:F8:B6:7E:92:28:86:35:46:6C:08:62:80:20:9D:00:63:21:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5411a0e2-71bf-3e49-a170-f2238edd14df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:90:d0:79:24:0f:28:dd:5d:60:2d:57:14:c9:a4:a8:cd:1f: 7f:66:0d:e6:dc:9a:6b:d9:7b:d6:fb:01:50:02:bb:4b:68:21: 5c:ba:41:b4:ea:d6:10:b3:e4:bc:99:8b:0f:f0:11:ea:e1:28: 2e:2b:8b:72:2f:bc:c3:73:28:a1:b3:13:7e:c9:88:34:f5:43: 80:95:b2:b3:3a:f9:6c:f4:fe:2d:0b:62:8d:0f:e7:e9:6d:65: 92:ef:b4:aa:a6:01:03:71:77:4b:ad:3f:1c:c4:ff:12:5f:85: 57:66:6e:72:71:2d:74:18:a4:c0:e3:7a:5a:d0:df:87:6e:d1: 74:b6:a6:0c:8c:59:c8:4f:7a:03:f2:60:e4:94:24:02:20:87: a2:ef:51:5b:d4:dd:a6:15:7a:c8:e9:96:10:bf:38:b0:3e:12: 04:b9:9b:f7:9d:26:81:78:d9:4c:e0:3b:68:51:d0:a8:f2:19: 4d:08:5a:50:0e:5d:71:08:27:cb:80:9b:e2:c3:cd:94:35:15: b9:83:59:32:5e:15:e8:d7:32:74:1d:74:1b:15:50:c2:92:fa: 4e:8e:e6:fc:99:03:65:89:76:58:51:91:92:d2:7d:7e:f6:e5: 38:3a:e7:20:3a:58:04:32:f8:66:1f:00:ad:35:36:ba:b4:63: 30:aa:12:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54npqqDWhxP9ssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZmVmMjkxZmQtNDExOS00YWI4LTg1NWYtMTI4YjQ1YWY0Njk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOdxn3hZ94Iaf46znDCxxteDyPhY9/dfQZMO vWAoKuBy31HefZELWGlhAgdO4AwBUEja+a33j6hxjKdpHOgMZxuky/zFKLSTIqFJ x/eIIbegt3Tbo8We0CPRGDghgv6kvzwlwoZYks2d28miu/8/ZK5lm1B2iuNBHFh4 4f4Q5+QQc1QIZ1hLI+yHyT2VdW3HOJrgrdpmTWLHNeyLyeMhJFJmzaUBYXNGZVHW xndiY5SLjIeP3neaizoYmsiCZRTfEZ+tHaqtU1HyAcsP/a/US4SJjT8rzMzNr3PB Lw4SOwEVjHdWQhVI0BqZHrkugztzQ7uVYSp/MBySW+att5Ir1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8d+LZ+kiiGNUZsCGKAIJ0AYyGOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTQxMWEwZTItNzFiZi0z ZTQ5LWExNzAtZjIyMzhlZGQxNGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaQ0HkkDyjdXWAtVxTJpKjNH39mDebcmmvZe9b7AVACu0toIVy6QbTq 1hCz5LyZiw/wEerhKC4ri3IvvMNzKKGzE37JiDT1Q4CVsrM6+Wz0/i0LYo0P5+lt ZZLvtKqmAQNxd0utPxzE/xJfhVdmbnJxLXQYpMDjelrQ34du0XS2pgyMWchPegPy YOSUJAIgh6LvUVvU3aYVesjplhC/OLA+EgS5m/edJoF42UzgO2hR0KjyGU0IWlAO XXEIJ8uAm+LDzZQ1FbmDWTJeFejXMnQddBsVUMKS+k6O5vyZA2WJdlhRkZLSfX72 5Tg65yA6WAQy+GYfAK01Nrq0YzCqEp0= -----END CERTIFICATE-----Generated at Mon Oct 20 18:36:29 2025 by rpki-client