$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/da902bdd-b291-3f52-9179-510d31b3bb85.roa File: da902bdd-b291-3f52-9179-510d31b3bb85.roa (raw, json) Hash identifier: qENGk1etp9IAmwpIdOO1A9i3sw/K5aPmicryDQl9pPU= Subject key identifier: 9E:5D:38:76:8F:93:42:34:A6:66:36:B5:EC:39:28:3A:57:3D:04:CA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B3C51AF68A9796536CB3C4780 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/da902bdd-b291-3f52-9179-510d31b3bb85.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:af:68:a9:79:65:36:cb:3c:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=2330300a-82c2-4ea7-9a9c-0ce114d7edbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ed:3d:6f:db:bb:2b:4a:90:ea:1b:c4:62:62: 99:6b:7e:0d:79:65:ea:1c:1f:2c:36:d8:84:ac:0d: 1e:0c:65:33:0d:ad:95:9c:86:df:ac:18:70:03:4c: 47:bf:de:c4:c9:e3:81:68:bb:af:57:88:55:eb:47: a8:03:4a:00:75:f0:84:38:3c:33:44:3c:21:da:4f: ad:ee:2f:13:ba:41:0b:80:df:ec:d2:ac:94:b8:63: 34:99:66:f3:3c:f5:20:86:1e:8f:11:9f:18:95:ab: 18:40:b1:49:b4:8d:ef:0e:47:b1:03:a1:9b:8a:d1: 2c:1b:53:87:d0:67:bf:d0:35:a7:27:48:58:6c:0d: 8f:34:f1:81:0b:83:d5:06:41:af:8b:0d:b6:a6:00: e4:d8:3c:a2:ae:a1:bb:3e:90:3b:75:bf:ea:cf:23: d8:66:15:b3:61:dc:69:a9:74:9b:0e:5e:17:de:5c: 5b:d1:68:74:3f:df:56:ca:c2:68:20:82:6e:b8:e7: 60:e5:b0:13:c4:ee:05:67:27:55:35:44:69:d5:64: 59:b4:9f:50:27:1d:cc:57:59:d2:73:ac:53:b4:44: 4c:c4:3c:3e:ce:80:cb:35:0d:49:b7:ce:b7:27:7a: ec:d2:42:da:af:b0:57:61:94:91:e1:21:45:5f:71: 5e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:5D:38:76:8F:93:42:34:A6:66:36:B5:EC:39:28:3A:57:3D:04:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/da902bdd-b291-3f52-9179-510d31b3bb85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:da:b0:38:1b:18:c9:23:fb:12:bf:2a:31:28:12:d2:d8:03: 2d:84:15:62:1e:c3:28:33:7f:b8:62:c9:59:fc:7a:d2:94:cb: db:b4:de:a1:a9:58:02:fe:c9:22:63:00:f1:60:c8:79:82:8e: 05:a5:50:21:5b:cb:68:cf:48:6b:80:ef:b0:ad:e0:71:5e:68: 2e:5d:0a:d3:87:a8:e7:df:47:2d:4e:7c:37:7c:fc:b5:c5:5f: da:90:6a:c6:90:72:68:02:ab:5b:07:06:7c:be:6e:de:27:0b: 99:de:ac:fd:44:cf:e2:7e:73:e2:da:03:75:f2:0d:e2:6a:c7: c5:d3:fb:54:bf:1f:f2:9c:c1:91:52:4d:d2:01:0d:1f:5e:bd: da:71:4d:31:ec:cd:86:43:f7:00:3d:02:d4:61:7b:f2:04:e7: 71:11:1a:e8:4f:0d:01:ae:b9:bf:72:04:43:7b:5d:22:7c:41: b2:43:45:dd:5a:2d:b6:4d:2b:1e:4c:73:61:89:ef:1a:6b:a8: 84:cd:5c:bf:20:cd:b1:9c:39:93:de:82:18:bd:7f:5e:ff:46: af:01:4f:5c:91:63:23:ba:9b:9b:65:50:3c:c0:e8:95:55:0b: 46:b4:6c:4f:f0:f3:6a:dd:fc:5c:7a:8e:8e:78:9a:41:4a:d7: 05:d9:c8:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8Ua9oqXllNss8R4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk MjMzMDMwMGEtODJjMi00ZWE3LTlhOWMtMGNlMTE0ZDdlZGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO09b9u7K0qQ6hvEYmKZa34NeWXqHB8sNtiE rA0eDGUzDa2VnIbfrBhwA0xHv97EyeOBaLuvV4hV60eoA0oAdfCEODwzRDwh2k+t 7i8TukELgN/s0qyUuGM0mWbzPPUghh6PEZ8YlasYQLFJtI3vDkexA6GbitEsG1OH 0Ge/0DWnJ0hYbA2PNPGBC4PVBkGviw22pgDk2DyirqG7PpA7db/qzyPYZhWzYdxp qXSbDl4X3lxb0Wh0P99WysJoIIJuuOdg5bATxO4FZydVNURp1WRZtJ9QJx3MV1nS c6xTtERMxDw+zoDLNQ1Jt863J3rs0kLar7BXYZSR4SFFX3FenQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5dOHaPk0I0pmY2tew5KDpXPQTKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGE5MDJiZGQtYjI5MS0z ZjUyLTkxNzktNTEwZDMxYjNiYjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPasDgbGMkj+xK/KjEoEtLYAy2EFWIewygzf7hiyVn8etKUy9u03qGp WAL+ySJjAPFgyHmCjgWlUCFby2jPSGuA77Ct4HFeaC5dCtOHqOffRy1OfDd8/LXF X9qQasaQcmgCq1sHBny+bt4nC5nerP1Ez+J+c+LaA3XyDeJqx8XT+1S/H/KcwZFS TdIBDR9evdpxTTHszYZD9wA9AtRhe/IE53ERGuhPDQGuub9yBEN7XSJ8QbJDRd1a LbZNKx5Mc2GJ7xprqITNXL8gzbGcOZPeghi9f17/Rq8BT1yRYyO6m5tlUDzA6JVV C0a0bE/w82rd/Fx6jo54mkFK1wXZyB4= -----END CERTIFICATE-----Generated at Mon Oct 20 21:10:21 2025 by rpki-client