$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2752a970-d5ff-337c-a051-6b254bb9c802.roa File: 2752a970-d5ff-337c-a051-6b254bb9c802.roa (raw, json) Hash identifier: 3opeedltIjREMoaLpqyM07uaO+7AlY74ln6wxLi1aBI= Subject key identifier: CE:83:04:45:4B:DC:52:27:F4:E8:0F:AD:A5:01:AC:8D:7D:82:32:6C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B92DD43F6FDB2A1B5ADB31594 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2752a970-d5ff-337c-a051-6b254bb9c802.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.33.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:43:f6:fd:b2:a1:b5:ad:b3:15:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=22e4cd2b-f7c8-4f24-accb-7cf3c5c79966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cc:d8:99:0b:8f:0a:dc:5d:63:ae:dd:65:af: 31:97:21:71:87:07:df:e0:41:4c:70:d9:2c:08:0a: 84:e5:91:3f:84:ed:62:fd:e7:4c:a2:c8:6b:be:10: b8:5d:30:22:f2:d6:8e:a2:8d:f8:ee:1b:e2:bb:2f: 69:74:8a:7a:08:02:dd:17:02:60:10:e1:cd:cf:1a: fe:2f:f3:e9:2d:5c:e4:b1:22:3e:b8:58:b6:70:4f: df:4d:fb:a8:c5:98:a0:7b:c7:97:a6:4d:59:f0:56: ef:ab:aa:78:84:c0:cb:5b:31:2a:a1:e9:10:51:54: 3c:f4:9a:f1:ec:8b:e5:50:60:1d:29:85:e4:4d:da: a2:94:39:26:71:ff:59:5e:bb:21:03:01:b8:5b:92: c2:c8:48:24:43:db:12:c6:4e:68:a7:2b:a7:3a:c9: c0:0d:5a:f5:5b:63:2f:1f:b5:2d:b7:7b:09:58:03: f8:c1:a9:26:29:a4:ce:72:cd:b3:21:62:22:be:ed: 1e:d3:c0:31:68:c2:e9:b1:2a:33:58:e2:9d:5d:25: 7d:08:8c:61:d0:2f:01:6b:b1:07:cb:4b:00:1e:47: 2d:0e:32:bf:fc:81:8b:98:20:30:04:3a:4d:5d:2d: c5:7d:94:5c:24:77:cc:00:83:f0:58:16:2e:68:c9: 5a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:83:04:45:4B:DC:52:27:F4:E8:0F:AD:A5:01:AC:8D:7D:82:32:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2752a970-d5ff-337c-a051-6b254bb9c802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:ad:92:2d:63:c9:ea:75:bb:9a:92:99:8b:09:8f:e1:fe:f3: a2:ab:44:e1:18:70:dd:27:72:6a:4b:1d:62:6e:d4:c0:12:a9: e2:86:65:e5:80:fc:22:9f:43:52:2a:40:0d:68:65:a7:e3:47: bf:5e:db:aa:33:d3:e1:17:ff:68:44:b9:a7:a6:c5:4b:b3:bf: 1c:c5:40:01:94:f2:76:c9:8d:79:b4:34:59:21:19:db:38:77: 1b:a8:9a:bc:5f:60:4e:85:77:18:7c:49:3d:12:61:64:f5:bc: d0:8f:62:62:46:0c:aa:4f:0e:7f:0e:4b:76:7c:72:58:7e:53: f7:e5:51:0c:a1:5b:41:b3:6a:bf:f2:b5:3a:fa:8e:14:f1:3a: 67:f1:46:81:c2:93:df:fd:36:db:c3:f2:7d:87:8c:24:57:79: ca:5f:f8:cd:fa:a2:52:63:34:1f:65:22:7f:a0:1b:09:bb:be: 83:08:ec:9a:b1:29:07:55:79:83:13:97:cb:ff:45:ec:fe:1b: 28:c9:bc:67:98:e2:d1:92:aa:71:66:37:91:6d:9e:59:81:ca: 1b:9d:e9:03:c1:e3:08:6f:17:f6:3d:06:10:62:01:94:95:b1: 86:d7:6b:4d:8c:85:26:4e:3d:01:2d:28:f2:b2:7b:a9:65:6a: f6:cf:20:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3UP2/bKhta2zFZQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk MjJlNGNkMmItZjdjOC00ZjI0LWFjY2ItN2NmM2M1Yzc5OTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MzYmQuPCtxdY67dZa8xlyFxhwff4EFMcNks CAqE5ZE/hO1i/edMoshrvhC4XTAi8taOoo347hviuy9pdIp6CALdFwJgEOHNzxr+ L/PpLVzksSI+uFi2cE/fTfuoxZige8eXpk1Z8Fbvq6p4hMDLWzEqoekQUVQ89Jrx 7IvlUGAdKYXkTdqilDkmcf9ZXrshAwG4W5LCyEgkQ9sSxk5opyunOsnADVr1W2Mv H7Utt3sJWAP4wakmKaTOcs2zIWIivu0e08AxaMLpsSozWOKdXSV9CIxh0C8Ba7EH y0sAHkctDjK//IGLmCAwBDpNXS3FfZRcJHfMAIPwWBYuaMlaDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6DBEVL3FIn9OgPraUBrI19gjJsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjc1MmE5NzAtZDVmZi0z MzdjLWEwNTEtNmIyNTRiYjljODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJetki1jyep1u5qSmYsJj+H+86KrROEYcN0ncmpLHWJu1MASqeKGZeWA /CKfQ1IqQA1oZafjR79e26oz0+EX/2hEuaemxUuzvxzFQAGU8nbJjXm0NFkhGds4 dxuomrxfYE6Fdxh8ST0SYWT1vNCPYmJGDKpPDn8OS3Z8clh+U/flUQyhW0Gzar/y tTr6jhTxOmfxRoHCk9/9NtvD8n2HjCRXecpf+M36olJjNB9lIn+gGwm7voMI7Jqx KQdVeYMTl8v/Rez+GyjJvGeY4tGSqnFmN5FtnlmByhud6QPB4whvF/Y9BhBiAZSV sYbXa02MhSZOPQEtKPKye6llavbPIP0= -----END CERTIFICATE-----Generated at Mon Oct 20 04:35:20 2025 by rpki-client