$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/02a83350-670d-3cb6-afe2-eff642f4f27c.roa File: 02a83350-670d-3cb6-afe2-eff642f4f27c.roa (raw, json) Hash identifier: JNiu6M1s+UV651ZRMTM4zxWi4ZaCekkASqdr6s8gFr4= Subject key identifier: C5:43:D5:D8:EB:77:73:AE:3A:9A:F3:14:D5:52:05:44:C9:BC:95:E6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B047C1D61E6C68E8420F1AB00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/02a83350-670d-3cb6-afe2-eff642f4f27c.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:1d:61:e6:c6:8e:84:20:f1:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=ea15b5c5-6fed-4566-989d-f01d7a5995a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:96:5a:09:e8:19:78:23:56:03:50:77:f4:cd: 54:6d:d5:62:57:82:e9:3f:40:83:75:28:a3:25:fc: 21:2d:76:a4:39:7c:44:bd:ff:df:20:88:d0:af:15: e4:76:92:8f:9e:b0:91:88:6a:11:d4:ee:39:77:66: f8:c7:70:a3:9d:49:f2:db:cc:70:a2:f5:b6:2f:4e: 6f:3a:b5:37:0c:b6:54:49:e8:4a:fc:94:09:6a:a1: aa:34:60:1a:df:00:4e:b2:ae:64:81:8c:0d:c5:da: ca:42:60:6b:87:e0:02:37:ec:be:0b:34:e4:c2:7d: 85:e8:09:82:09:fc:54:61:81:90:88:5e:7d:d6:9c: 29:0d:a9:ff:20:94:20:49:7a:c5:e7:72:eb:88:dd: 57:e7:83:81:f2:fa:a1:d3:6a:2f:72:64:9d:c3:ad: c2:29:5b:80:ad:58:dc:17:d7:08:ec:84:d7:e1:cc: fb:6e:0b:c3:d0:34:6b:22:72:13:02:69:d9:df:b0: e5:27:e0:37:d3:5e:ba:e7:06:56:ef:c4:48:86:dc: 10:60:81:de:60:7b:f0:12:f6:ba:b6:ae:31:80:5b: 2b:28:41:f7:8f:8e:46:84:b1:69:7f:0d:6f:de:27: 77:03:11:61:1e:7b:9b:95:97:1c:b9:5d:f5:d1:34: 9b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:43:D5:D8:EB:77:73:AE:3A:9A:F3:14:D5:52:05:44:C9:BC:95:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/02a83350-670d-3cb6-afe2-eff642f4f27c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:2c:97:cb:bb:30:7a:02:d7:fb:fa:aa:98:2f:ed:5d:9e:2f: 18:aa:6d:31:4b:cd:da:ac:02:9c:00:cc:ee:b8:9b:bb:0b:8e: d5:ca:d8:79:0b:a0:ec:63:bc:82:d6:fa:ca:fc:c5:79:c3:f6: 84:87:2a:79:c9:f2:f7:3f:7e:41:ca:16:02:21:3a:00:86:ab: 60:a2:f5:29:d3:6f:b9:10:f5:bb:6d:8b:c8:b5:b6:fc:cd:f3: e0:04:9a:e0:a9:4e:c2:96:c2:ec:80:42:03:c8:75:6e:92:d8: 9a:8a:c7:5a:ba:80:1c:61:24:a0:5a:cf:57:23:11:76:f2:2e: 1e:04:92:cc:b1:ea:ed:0b:4f:35:42:60:83:e8:50:3c:4d:d3: 82:5b:91:1a:b2:ca:ff:cf:82:6c:42:86:3d:88:98:c4:f2:0c: 77:a8:f0:b4:0e:69:8a:39:d5:6c:21:d0:9f:38:f3:f9:75:b3: 18:13:db:74:af:9e:29:66:ee:f9:48:63:90:20:e3:11:cc:66: 5a:2b:3c:16:62:d0:b2:2c:02:d2:5c:4e:19:fa:bd:e5:ab:eb: 91:ab:b7:fc:d9:78:ef:c3:1d:da:45:50:5d:95:76:7a:1e:b6: d6:f1:b9:e5:b3:41:e3:dd:46:92:21:32:c1:16:09:e6:d9:31: 6c:65:fb:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfB1h5saOhCDxqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZWExNWI1YzUtNmZlZC00NTY2LTk4OWQtZjAxZDdhNTk5NWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5ZaCegZeCNWA1B39M1UbdViV4LpP0CDdSij JfwhLXakOXxEvf/fIIjQrxXkdpKPnrCRiGoR1O45d2b4x3CjnUny28xwovW2L05v OrU3DLZUSehK/JQJaqGqNGAa3wBOsq5kgYwNxdrKQmBrh+ACN+y+CzTkwn2F6AmC CfxUYYGQiF591pwpDan/IJQgSXrF53LriN1X54OB8vqh02ovcmSdw63CKVuArVjc F9cI7ITX4cz7bgvD0DRrInITAmnZ37DlJ+A301665wZW78RIhtwQYIHeYHvwEva6 tq4xgFsrKEH3j45GhLFpfw1v3id3AxFhHnublZccuV310TSbPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVD1djrd3OuOprzFNVSBUTJvJXmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDJhODMzNTAtNjcwZC0z Y2I2LWFmZTItZWZmNjQyZjRmMjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAssl8u7MHoC1/v6qpgv7V2eLxiqbTFLzdqsApwAzO64m7sLjtXK2HkL oOxjvILW+sr8xXnD9oSHKnnJ8vc/fkHKFgIhOgCGq2Ci9SnTb7kQ9btti8i1tvzN 8+AEmuCpTsKWwuyAQgPIdW6S2JqKx1q6gBxhJKBaz1cjEXbyLh4Eksyx6u0LTzVC YIPoUDxN04JbkRqyyv/PgmxChj2ImMTyDHeo8LQOaYo51Wwh0J848/l1sxgT23Sv nilm7vlIY5Ag4xHMZlorPBZi0LIsAtJcThn6veWr65Grt/zZeO/DHdpFUF2Vdnoe ttbxueWzQePdRpIhMsEWCebZMWxl+wI= -----END CERTIFICATE-----Generated at Mon Oct 20 07:20:12 2025 by rpki-client