$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5649da9b-3839-3d07-bcad-0c91e11ba7ce.roa File: 5649da9b-3839-3d07-bcad-0c91e11ba7ce.roa (raw, json) Hash identifier: 7Kx9qQIGooP9MoomLTKNyPr7MXYC/IFSJk6zf5pF+do= Subject key identifier: C8:AC:B9:85:87:B5:D5:3B:6F:09:B9:E0:61:E5:C9:4E:0B:B0:7C:C4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B48E1C8319EDEC108DB6A48C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5649da9b-3839-3d07-bcad-0c91e11ba7ce.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.33.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:c8:31:9e:de:c1:08:db:6a:48:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=83995fe3-8cc2-436f-a425-3d41c046f773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d7:a3:c5:2a:60:f3:2c:91:37:13:a1:db:ea: c1:b4:1b:1b:57:95:41:67:8b:31:78:f4:ab:87:39: 34:2f:15:6f:43:96:d0:5a:01:c1:4c:2b:b3:37:86: 4f:bb:a9:ce:0d:3e:58:e5:54:fe:67:82:77:d3:a1: b1:f7:7a:08:79:06:90:07:10:cc:8f:bb:99:82:c0: be:f8:d2:40:8b:77:de:2e:7f:99:f6:7c:f6:92:ce: fa:cb:0f:78:77:c1:de:e9:c5:eb:57:87:26:9c:89: 1b:f9:7a:bd:e6:ca:7b:47:dc:21:6c:cb:5a:2f:92: 6d:b9:3a:3b:31:cf:79:f0:46:73:85:0a:19:08:a5: 4b:3a:b1:54:d7:7f:0d:b2:27:f8:1a:37:00:d1:e3: f7:98:1e:76:00:a4:a4:f2:6b:2e:a1:c4:6f:b2:38: 0d:d7:4c:bd:78:e7:1f:d7:a8:88:9a:6f:88:61:fe: c5:42:a3:5c:9f:34:b6:d7:eb:78:ab:18:23:b3:b9: 1b:ef:50:e9:60:30:bd:4f:d1:87:9a:35:e3:dd:36: d4:7e:7f:eb:a9:e0:26:0e:94:ff:4c:73:b5:d3:f0: 5a:ea:ce:aa:03:f5:b3:c2:22:5b:0e:c5:cb:56:fb: 0c:5a:56:a1:6d:cb:a4:6a:6a:d1:49:e0:98:36:4f: 41:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AC:B9:85:87:B5:D5:3B:6F:09:B9:E0:61:E5:C9:4E:0B:B0:7C:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5649da9b-3839-3d07-bcad-0c91e11ba7ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ca:0e:30:f9:f4:16:0d:47:90:93:91:7c:c0:28:48:a6:c2: a3:f1:28:af:da:0a:87:bc:27:0a:f9:cf:91:d4:27:25:e5:36: c8:1a:b9:12:89:70:29:75:7c:72:a8:64:a6:1a:f0:a8:6b:e3: fd:67:a8:a8:db:0d:11:86:4b:e9:4c:9d:f5:94:82:e9:da:6d: 1b:cb:8b:24:00:a8:fa:9b:1b:f8:4a:4e:5b:07:17:69:8f:92: d3:74:5f:3d:db:a4:71:f4:c3:4f:37:70:a2:ac:4e:70:44:6f: 78:6a:57:f7:6d:bf:e4:7a:f1:58:27:67:39:d3:38:be:6e:71: ca:80:44:d6:61:0c:84:89:d8:a3:c8:c1:99:ec:c7:85:fe:e8: 22:80:8a:e9:ca:1a:b6:3e:c4:58:14:f0:a5:f3:f0:d7:48:f2: de:64:39:ce:3c:a7:41:ff:a1:54:b7:5d:31:64:fb:cd:a1:03: 0f:aa:95:bd:bc:72:7e:17:6b:eb:cb:1c:72:33:19:b6:dd:08: 56:ab:44:a9:da:54:06:b8:77:20:ce:a3:0c:dc:b7:0d:9b:8f: 9c:e0:c9:d4:b4:fa:2c:fe:cd:83:db:38:56:03:46:95:34:8e: a8:91:9d:cd:84:e5:91:93:0c:80:01:1b:33:d5:e5:cf:b9:25: 33:34:64:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4cgxnt7BCNtqSMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ODM5OTVmZTMtOGNjMi00MzZmLWE0MjUtM2Q0MWMwNDZmNzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntejxSpg8yyRNxOh2+rBtBsbV5VBZ4sxePSr hzk0LxVvQ5bQWgHBTCuzN4ZPu6nODT5Y5VT+Z4J306Gx93oIeQaQBxDMj7uZgsC+ +NJAi3feLn+Z9nz2ks76yw94d8He6cXrV4cmnIkb+Xq95sp7R9whbMtaL5JtuTo7 Mc958EZzhQoZCKVLOrFU138Nsif4GjcA0eP3mB52AKSk8msuocRvsjgN10y9eOcf 16iImm+IYf7FQqNcnzS21+t4qxgjs7kb71DpYDC9T9GHmjXj3TbUfn/rqeAmDpT/ THO10/Ba6s6qA/WzwiJbDsXLVvsMWlahbcukamrRSeCYNk9BHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMisuYWHtdU7bwm54GHlyU4LsHzEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTY0OWRhOWItMzgzOS0z ZDA3LWJjYWQtMGM5MWUxMWJhN2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHKDjD59BYNR5CTkXzAKEimwqPxKK/aCoe8Jwr5z5HUJyXlNsgauRKJ cCl1fHKoZKYa8Khr4/1nqKjbDRGGS+lMnfWUgunabRvLiyQAqPqbG/hKTlsHF2mP ktN0Xz3bpHH0w083cKKsTnBEb3hqV/dtv+R68VgnZznTOL5uccqARNZhDISJ2KPI wZnsx4X+6CKAiunKGrY+xFgU8KXz8NdI8t5kOc48p0H/oVS3XTFk+82hAw+qlb28 cn4Xa+vLHHIzGbbdCFarRKnaVAa4dyDOowzctw2bj5zgydS0+iz+zYPbOFYDRpU0 jqiRnc2E5ZGTDIABGzPV5c+5JTM0ZB8= -----END CERTIFICATE-----Generated at Mon Oct 20 15:51:29 2025 by rpki-client