$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e3baa8e1-c647-3c96-a38c-39faa625d5ca.roa File: e3baa8e1-c647-3c96-a38c-39faa625d5ca.roa (raw, json) Hash identifier: DXL5IO166Mp0jEk0jjp+SuiRzMGFU4mA4ifd0xBXwD8= Subject key identifier: 35:91:CB:A7:0C:94:5F:35:CE:82:3A:30:BF:A1:DD:38:40:E5:D5:3A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B52A7593582F94268B5974020 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e3baa8e1-c647-3c96-a38c-39faa625d5ca.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.33.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:59:35:82:f9:42:68:b5:97:40:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=d3f07793-e70c-4ae7-a48d-c48cdd7d7434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ec:7b:86:c3:cc:9f:1c:4a:4f:81:b8:50:86: 0b:6e:e2:e7:cd:e5:6f:99:a1:cc:cf:3b:8e:e0:76: 9d:de:ea:31:13:9e:dd:46:d4:a2:08:06:72:c5:9d: 9c:3c:9f:3b:4b:76:d3:e2:33:91:ca:95:c3:60:c0: da:b5:3b:ef:f7:36:cc:2c:dd:68:5a:17:2f:2d:a8: ab:c0:9d:1f:d3:3e:2d:b0:a6:61:02:7f:48:48:93: 1f:45:69:28:da:7f:f1:b4:98:9f:9c:80:47:2c:3d: ac:7b:60:8a:85:1d:92:db:3d:fa:9a:97:ec:ca:6d: c3:8e:c3:bd:71:9a:99:25:4b:5e:bf:d9:b0:f2:2a: 26:98:49:53:d2:78:10:e6:81:f3:c3:1b:04:29:c2: 40:10:e6:43:28:55:39:78:a5:9a:96:70:e8:fb:0f: e5:f7:81:10:87:5f:c9:38:9b:00:bd:47:cc:4f:c6: 5c:37:ff:b8:3d:4e:07:5a:6b:ba:80:fa:9d:41:67: c3:d1:5a:a2:e5:e9:d3:ee:21:04:54:b2:80:5a:d9: e8:0b:c1:4e:09:a8:5c:c8:06:00:5d:af:b0:69:de: a4:b5:f6:50:d9:cd:52:e0:84:5d:30:c8:1b:0b:7c: 70:24:2b:40:f6:29:49:a1:0e:c8:a0:a7:65:2f:23: 21:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:91:CB:A7:0C:94:5F:35:CE:82:3A:30:BF:A1:DD:38:40:E5:D5:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e3baa8e1-c647-3c96-a38c-39faa625d5ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:e3:ec:08:8d:83:ad:0c:a3:90:99:5a:8f:7a:e1:70:25:40: f2:89:84:2c:49:2c:8a:4e:fb:e7:e3:f1:67:b7:44:a8:81:4b: 12:a1:11:81:65:3e:d4:d3:ec:fa:90:49:6c:6d:4c:47:ec:41: 52:7c:80:fa:03:07:20:b8:ed:c3:fd:b1:cd:fa:ee:ca:51:a8: 67:81:59:97:e0:92:d6:01:d7:2d:91:7c:ba:97:4b:b7:6b:a5: 8d:95:d3:f0:67:73:b0:e0:97:73:58:2a:e5:bd:e6:9a:70:f6: b9:de:1a:ff:c8:92:9f:6b:cf:4a:e5:38:f9:3c:be:17:cf:5f: cb:89:85:df:11:ad:1b:70:3d:51:f8:9c:b4:da:5c:2b:08:bc: bf:66:d8:06:72:b9:a1:66:bc:1e:65:d5:c4:c3:c6:a8:7b:10: c7:d4:ea:e5:7f:5a:ea:70:6e:8d:2c:d8:88:a1:db:2d:2e:9c: f3:c8:a9:2d:eb:43:b7:fb:0f:04:55:ed:1a:73:42:7c:86:ec: 3d:88:dd:4a:98:a6:01:97:d1:f6:68:80:db:a8:28:18:08:3c: c4:c6:ae:7c:b8:bf:bb:d3:90:ee:50:96:76:27:aa:62:a7:64: 78:83:dc:d6:c6:5a:2a:c6:e0:fb:5f:c4:54:8d:d7:26:04:3d: a9:8f:e6:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1k1gvlCaLWXQCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZDNmMDc3OTMtZTcwYy00YWU3LWE0OGQtYzQ4Y2RkN2Q3NDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOx7hsPMnxxKT4G4UIYLbuLnzeVvmaHMzzuO 4Had3uoxE57dRtSiCAZyxZ2cPJ87S3bT4jORypXDYMDatTvv9zbMLN1oWhcvLair wJ0f0z4tsKZhAn9ISJMfRWko2n/xtJifnIBHLD2se2CKhR2S2z36mpfsym3DjsO9 cZqZJUtev9mw8iommElT0ngQ5oHzwxsEKcJAEOZDKFU5eKWalnDo+w/l94EQh1/J OJsAvUfMT8ZcN/+4PU4HWmu6gPqdQWfD0Vqi5enT7iEEVLKAWtnoC8FOCahcyAYA Xa+wad6ktfZQ2c1S4IRdMMgbC3xwJCtA9ilJoQ7IoKdlLyMhSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWRy6cMlF81zoI6ML+h3ThA5dU6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTNiYWE4ZTEtYzY0Ny0z Yzk2LWEzOGMtMzlmYWE2MjVkNWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXj7AiNg60Mo5CZWo964XAlQPKJhCxJLIpO++fj8We3RKiBSxKhEYFl PtTT7PqQSWxtTEfsQVJ8gPoDByC47cP9sc367spRqGeBWZfgktYB1y2RfLqXS7dr pY2V0/Bnc7Dgl3NYKuW95ppw9rneGv/Ikp9rz0rlOPk8vhfPX8uJhd8RrRtwPVH4 nLTaXCsIvL9m2AZyuaFmvB5l1cTDxqh7EMfU6uV/Wupwbo0s2Iih2y0unPPIqS3r Q7f7DwRV7RpzQnyG7D2I3UqYpgGX0fZogNuoKBgIPMTGrny4v7vTkO5QlnYnqmKn ZHiD3NbGWirG4PtfxFSN1yYEPamP5kI= -----END CERTIFICATE-----Generated at Mon Oct 20 15:51:24 2025 by rpki-client