$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a224f8e7-d8e5-3c2c-8b2f-55a68efb823b.roa File: a224f8e7-d8e5-3c2c-8b2f-55a68efb823b.roa (raw, json) Hash identifier: T0llyI036T9SgcG/Bx2fefKNmxsKS/TN9+k6kzmnYR0= Subject key identifier: 3D:44:2F:36:28:C2:16:5A:17:0B:0E:11:8A:F7:6D:1A:5E:78:CE:56 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B3C51B11C84E1CD22D7827680 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a224f8e7-d8e5-3c2c-8b2f-55a68efb823b.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:b1:1c:84:e1:cd:22:d7:82:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=cfd624a5-b8fc-4853-b2bf-17ac88173ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d7:12:6d:6f:ad:52:c6:f8:71:15:34:f9:b5: a9:33:39:76:a8:27:c1:4f:ff:18:55:e1:ef:81:ad: 3b:f0:1c:75:7e:7f:08:89:f7:59:54:96:f9:42:9f: 7f:e3:5d:d6:c0:e2:d8:b7:ca:7a:16:29:09:38:34: 0e:be:6d:53:1d:10:1a:f6:b3:95:d7:78:fd:09:8a: 39:23:ab:04:9f:bd:b1:c5:3f:a6:d8:c5:49:a4:11: ba:87:d3:5b:6f:80:d0:6f:29:03:0b:3d:80:c1:42: bf:64:26:1b:26:ca:2b:22:de:33:4c:f2:b2:c5:dc: 1e:85:69:0e:24:b2:f2:c9:02:fd:6e:92:0f:f2:03: d0:f6:e9:db:5d:63:55:66:94:5a:40:ed:04:76:40: 1b:79:86:00:f3:95:7b:08:71:20:aa:85:22:f2:2f: f4:16:c3:85:d7:d4:f9:27:b6:80:e0:57:30:f0:18: ee:b3:c8:8d:50:47:5a:c8:a8:92:46:c7:22:d7:29: 86:12:ed:2a:5d:ee:79:bd:f9:76:c4:69:fa:03:9f: a8:a6:10:e5:17:b0:b9:61:44:ba:31:18:9c:0c:42: 57:f2:6f:aa:12:e0:70:31:4b:7b:23:5a:d2:be:85: 78:2c:39:e6:5b:6e:fc:bc:8a:a1:2b:ab:f6:aa:32: 2e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:44:2F:36:28:C2:16:5A:17:0B:0E:11:8A:F7:6D:1A:5E:78:CE:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a224f8e7-d8e5-3c2c-8b2f-55a68efb823b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:13:b3:6b:ea:bf:bf:65:71:a9:29:7b:31:3d:e8:b4:0f:33: 0c:0f:02:44:1f:c5:6b:53:41:cb:79:70:5f:c8:83:5b:8a:4b: 62:1f:ec:a0:64:89:87:74:f3:0e:e8:d1:4a:63:9b:4e:70:16: 02:0e:39:d9:76:c4:e2:bf:a6:27:38:92:5f:99:d1:b6:79:f8: 66:c2:7f:2a:84:c4:5d:3f:76:a3:f8:83:e9:13:48:a3:82:84: 34:03:e5:c9:dd:70:3f:8a:e8:07:fc:c0:39:fd:00:9d:3a:03: 73:f4:61:df:e1:c4:2d:20:69:42:99:87:8b:00:be:dc:32:7d: 4b:5c:3b:79:b4:4f:3a:eb:fb:da:80:d1:1d:24:89:be:92:55: c8:9a:14:e3:02:81:41:62:5d:21:1c:0a:6a:b7:a5:c7:de:9f: 9c:d4:71:d5:ad:e3:29:26:7a:14:06:5d:35:ef:af:5f:5b:4c: 96:86:3f:24:ef:fc:9a:52:41:cb:e2:63:96:d4:ac:fe:e8:88: 25:a9:d9:a8:94:50:d3:0a:77:39:9f:19:99:e9:85:37:6b:60: 66:ff:f2:03:4f:0d:ef:16:77:f4:fe:6a:fc:bd:30:a5:5a:5a: eb:06:30:1b:17:41:31:56:d0:4e:58:1b:6e:98:e8:92:15:e3: 7a:4f:ce:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8UbEchOHNIteCdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk Y2ZkNjI0YTUtYjhmYy00ODUzLWIyYmYtMTdhYzg4MTczZWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdcSbW+tUsb4cRU0+bWpMzl2qCfBT/8YVeHv ga078Bx1fn8IifdZVJb5Qp9/413WwOLYt8p6FikJODQOvm1THRAa9rOV13j9CYo5 I6sEn72xxT+m2MVJpBG6h9Nbb4DQbykDCz2AwUK/ZCYbJsorIt4zTPKyxdwehWkO JLLyyQL9bpIP8gPQ9unbXWNVZpRaQO0EdkAbeYYA85V7CHEgqoUi8i/0FsOF19T5 J7aA4Fcw8Bjus8iNUEdayKiSRsci1ymGEu0qXe55vfl2xGn6A5+ophDlF7C5YUS6 MRicDEJX8m+qEuBwMUt7I1rSvoV4LDnmW278vIqhK6v2qjIuLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1ELzYowhZaFwsOEYr3bRpeeM5WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTIyNGY4ZTctZDhlNS0z YzJjLThiMmYtNTVhNjhlZmI4MjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACETs2vqv79lcakpezE96LQPMwwPAkQfxWtTQct5cF/Ig1uKS2If7KBk iYd08w7o0Upjm05wFgIOOdl2xOK/pic4kl+Z0bZ5+GbCfyqExF0/dqP4g+kTSKOC hDQD5cndcD+K6Af8wDn9AJ06A3P0Yd/hxC0gaUKZh4sAvtwyfUtcO3m0Tzrr+9qA 0R0kib6SVciaFOMCgUFiXSEcCmq3pcfen5zUcdWt4ykmehQGXTXvr19bTJaGPyTv /JpSQcviY5bUrP7oiCWp2aiUUNMKdzmfGZnphTdrYGb/8gNPDe8Wd/T+avy9MKVa WusGMBsXQTFW0E5YG26Y6JIV43pPzrI= -----END CERTIFICATE-----Generated at Mon Oct 20 20:53:25 2025 by rpki-client