$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d31bb3df-dc29-3abb-89db-3bdc50d24026.roa File: d31bb3df-dc29-3abb-89db-3bdc50d24026.roa (raw, json) Hash identifier: 233aYzXaLKMhhiHThjw9s5fjrmFEUjE7CYfQetj0nv0= Subject key identifier: 20:95:C3:8C:8D:8C:EF:1D:66:6E:20:5B:36:44:DE:F9:F2:B5:21:10 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B1C36D3D3372F8E080BBE2F90 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d31bb3df-dc29-3abb-89db-3bdc50d24026.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.33.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:d3:d3:37:2f:8e:08:0b:be:2f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=1141cc28-3c85-469e-90fb-55cbaa42efff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b6:9a:3b:70:bb:1b:72:26:b3:8e:f4:fa:e9: 1e:e5:2d:7f:18:63:4c:3d:c8:3c:3a:98:a8:8d:94: d9:fb:44:5f:ab:c7:97:9a:48:ff:6b:8e:4c:9f:96: 8f:5f:86:09:6a:02:72:c8:d6:44:5c:93:d8:cb:9b: 07:62:8a:83:62:32:37:49:88:f6:48:e6:9e:f7:12: de:76:d4:39:70:fe:9e:72:30:71:e6:4f:c6:6e:2f: 6a:30:ba:05:8a:d4:f3:d2:1c:97:3c:bc:6c:9c:69: e9:d9:92:d5:86:d0:3c:98:6e:a3:c6:e4:18:49:9c: 9d:45:51:28:98:71:74:ee:a1:c7:49:8a:fd:13:cf: bf:75:89:29:fc:59:07:be:f8:d9:aa:27:42:a3:9e: a3:d8:af:84:6a:da:77:b2:a9:24:3b:8e:d2:9a:cc: 94:1e:5a:5e:bd:94:13:a3:6c:be:7f:01:08:3f:11: 29:36:06:bd:d7:64:2e:8a:06:bb:5b:ca:be:b8:2a: 92:74:3c:de:6d:af:88:f7:7c:13:3c:48:c3:8f:d3: 64:78:34:7e:ff:bc:c1:a4:62:90:d8:22:c7:e4:c7: 7e:0c:fb:92:29:0b:4f:76:98:a9:bc:57:18:8a:4e: be:00:8c:8d:ac:9f:e5:b3:55:39:f0:82:3d:ed:57: 19:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:95:C3:8C:8D:8C:EF:1D:66:6E:20:5B:36:44:DE:F9:F2:B5:21:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d31bb3df-dc29-3abb-89db-3bdc50d24026.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:ec:53:94:8a:37:8d:63:68:f5:24:ce:31:88:a3:7a:ac:a5: 58:1e:d7:31:21:61:67:dc:0d:ab:cf:c4:6a:7f:fc:6d:4c:94: 72:c3:85:99:94:6d:2c:5f:0a:c4:a3:af:90:a7:cb:2f:5b:50: 42:ff:30:f5:0d:e7:3c:0b:b4:5b:03:49:7a:a5:21:aa:19:c4: 06:8b:0b:f9:30:f4:70:bf:f6:9a:66:a2:65:ca:e5:15:d2:cd: a8:eb:48:dd:29:3c:5a:fd:78:3a:5a:1d:52:35:b1:49:a0:c2: 4b:bb:93:7d:64:d9:8f:2d:c4:da:47:78:0a:12:a0:a0:ac:16: c9:a2:75:31:59:10:3b:b2:06:46:ff:a7:0c:80:2b:d1:b8:c6: bf:22:3e:7c:27:53:5b:ee:b4:b3:9d:dc:22:58:36:5c:34:2a: 53:32:c0:5e:ad:39:ab:6e:43:96:dd:fc:a3:58:c2:a1:65:c3: dc:c4:37:04:79:e4:c8:cd:97:6c:f0:fc:26:b6:34:64:d0:1b: 09:86:31:af:a6:de:65:0c:c3:8c:72:a4:cf:1a:d2:5c:e6:c4: b1:04:1f:61:93:ee:05:28:d0:e0:84:08:c6:ed:3c:34:82:83: d4:be:c7:d1:e3:f9:c7:22:49:f1:d8:d1:a1:9e:62:1a:1e:83: 75:0f:db:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNtPTNy+OCAu+L5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MTE0MWNjMjgtM2M4NS00NjllLTkwZmItNTVjYmFhNDJlZmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobaaO3C7G3Ims470+uke5S1/GGNMPcg8Opio jZTZ+0Rfq8eXmkj/a45Mn5aPX4YJagJyyNZEXJPYy5sHYoqDYjI3SYj2SOae9xLe dtQ5cP6ecjBx5k/Gbi9qMLoFitTz0hyXPLxsnGnp2ZLVhtA8mG6jxuQYSZydRVEo mHF07qHHSYr9E8+/dYkp/FkHvvjZqidCo56j2K+Eatp3sqkkO47SmsyUHlpevZQT o2y+fwEIPxEpNga912Quiga7W8q+uCqSdDzeba+I93wTPEjDj9NkeDR+/7zBpGKQ 2CLH5Md+DPuSKQtPdpipvFcYik6+AIyNrJ/ls1U58II97VcZlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCVw4yNjO8dZm4gWzZE3vnytSEQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDMxYmIzZGYtZGMyOS0z YWJiLTg5ZGItM2JkYzUwZDI0MDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnsU5SKN41jaPUkzjGIo3qspVge1zEhYWfcDavPxGp//G1MlHLDhZmU bSxfCsSjr5Cnyy9bUEL/MPUN5zwLtFsDSXqlIaoZxAaLC/kw9HC/9ppmomXK5RXS zajrSN0pPFr9eDpaHVI1sUmgwku7k31k2Y8txNpHeAoSoKCsFsmidTFZEDuyBkb/ pwyAK9G4xr8iPnwnU1vutLOd3CJYNlw0KlMywF6tOatuQ5bd/KNYwqFlw9zENwR5 5MjNl2zw/Ca2NGTQGwmGMa+m3mUMw4xypM8a0lzmxLEEH2GT7gUo0OCECMbtPDSC g9S+x9Hj+cciSfHY0aGeYhoeg3UP2+c= -----END CERTIFICATE-----Generated at Mon Oct 20 18:36:18 2025 by rpki-client