$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/455ce729-9314-3871-9126-fed08a134b24.roa File: 455ce729-9314-3871-9126-fed08a134b24.roa (raw, json) Hash identifier: M49Lus+DZhUFeB2u2I4lCT18J0j9ve/Dm2Eum+BYxH4= Subject key identifier: E5:EF:B6:C9:4B:3E:16:00:9B:E4:50:6B:D0:54:08:68:E3:5B:DE:AE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B48E1C80A93AEB6325E160500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/455ce729-9314-3871-9126-fed08a134b24.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.33.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:c8:0a:93:ae:b6:32:5e:16:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=59d7d7b0-fe69-403d-8e61-2f1b783825bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a2:c2:81:9a:1b:28:29:75:31:8e:ad:33:2a: 6c:ed:37:e7:dc:f3:e8:cc:5f:20:e1:ca:58:90:ae: 9e:5b:b8:96:fd:35:f3:30:75:d9:87:ee:c9:fa:94: 9a:3d:a2:c0:06:6a:42:5c:c7:5e:8e:c3:b9:4d:e5: f1:10:9b:95:3f:ee:fd:87:1c:e5:da:11:95:b4:31: 37:28:a5:59:d8:99:a8:97:11:0c:1c:f6:38:8b:49: 77:db:4a:b2:68:28:0c:5f:fe:a5:38:4c:9f:6b:06: 6e:c8:e1:6e:37:cd:ff:5b:32:ad:6d:ae:45:f2:2d: 8d:fe:2e:d8:46:ff:0b:84:7d:bd:5b:06:ec:99:4b: c1:c3:68:55:72:6f:b8:dd:fd:8f:01:46:b9:b6:78: fd:87:e5:10:c8:4b:0a:50:ce:6d:64:ab:8d:2a:e0: 4a:22:92:f2:d9:c2:80:e6:f8:ad:30:a1:de:11:af: a0:20:ff:34:4d:53:d2:8c:8c:0d:ca:e3:14:81:d9: 2c:a8:2a:a0:06:55:29:ea:63:cf:f2:69:32:0d:ad: 71:7c:25:db:21:fd:4a:8a:3e:03:e0:54:5b:94:fa: 50:69:03:0c:81:5a:44:c0:9c:3c:2c:50:39:e8:38: 90:9a:39:df:77:0f:cb:3a:f3:16:f0:f4:e1:49:d4: 51:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:EF:B6:C9:4B:3E:16:00:9B:E4:50:6B:D0:54:08:68:E3:5B:DE:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/455ce729-9314-3871-9126-fed08a134b24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:1b:7c:f4:c8:ee:99:74:86:9d:c9:2c:a3:67:0f:e8:98:18: 1a:fb:81:1b:65:20:76:c7:f7:ca:a5:c2:e0:c6:e5:68:0b:c6: 0d:13:32:52:ce:46:e4:c3:7c:68:00:46:43:cc:14:92:85:15: e8:b7:1d:9a:8b:82:12:d0:be:e4:aa:4f:32:51:54:f9:89:f6: 37:f8:de:57:5c:cf:ee:4b:d3:b2:f0:33:e8:a9:03:5f:47:a8: a0:cb:ec:97:87:7d:1f:40:b8:d3:32:fd:d1:8f:0d:05:68:64: 1a:4a:e0:24:f6:51:e0:d9:09:ce:6b:2c:10:0e:b5:a2:a5:02: 1b:40:9e:c9:6a:ff:bd:9d:26:7f:3d:12:08:87:2a:b6:51:46: af:9d:d9:75:38:a8:fe:87:cc:d8:9e:42:f5:ba:74:40:27:d6: ee:b0:33:53:c0:50:ff:13:f2:af:29:26:9c:16:8b:ca:ed:48: ef:fc:ea:36:cc:1e:2a:1e:03:82:d0:d8:a3:9e:31:55:7d:11: 34:4e:a7:a7:16:6c:d9:d4:e5:78:1b:b7:d0:07:ed:0e:3e:a3: e0:6d:be:ce:e4:81:6d:eb:7d:24:67:8d:9d:e2:d4:c5:1c:de: f1:d0:89:01:15:68:7f:59:b2:da:cf:f8:00:70:eb:b2:69:df: 5b:de:3c:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4cgKk662Ml4WBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NTlkN2Q3YjAtZmU2OS00MDNkLThlNjEtMmYxYjc4MzgyNWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6LCgZobKCl1MY6tMyps7Tfn3PPozF8g4cpY kK6eW7iW/TXzMHXZh+7J+pSaPaLABmpCXMdejsO5TeXxEJuVP+79hxzl2hGVtDE3 KKVZ2JmolxEMHPY4i0l320qyaCgMX/6lOEyfawZuyOFuN83/WzKtba5F8i2N/i7Y Rv8LhH29WwbsmUvBw2hVcm+43f2PAUa5tnj9h+UQyEsKUM5tZKuNKuBKIpLy2cKA 5vitMKHeEa+gIP80TVPSjIwNyuMUgdksqCqgBlUp6mPP8mkyDa1xfCXbIf1Kij4D 4FRblPpQaQMMgVpEwJw8LFA56DiQmjnfdw/LOvMW8PThSdRR7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXvtslLPhYAm+RQa9BUCGjjW96uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDU1Y2U3MjktOTMxNC0z ODcxLTkxMjYtZmVkMDhhMTM0YjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0bfPTI7pl0hp3JLKNnD+iYGBr7gRtlIHbH98qlwuDG5WgLxg0TMlLO RuTDfGgARkPMFJKFFei3HZqLghLQvuSqTzJRVPmJ9jf43ldcz+5L07LwM+ipA19H qKDL7JeHfR9AuNMy/dGPDQVoZBpK4CT2UeDZCc5rLBAOtaKlAhtAnslq/72dJn89 EgiHKrZRRq+d2XU4qP6HzNieQvW6dEAn1u6wM1PAUP8T8q8pJpwWi8rtSO/86jbM HioeA4LQ2KOeMVV9ETROp6cWbNnU5Xgbt9AH7Q4+o+Btvs7kgW3rfSRnjZ3i1MUc 3vHQiQEVaH9ZstrP+ABw67Jp31vePEo= -----END CERTIFICATE-----Generated at Mon Oct 20 08:21:30 2025 by rpki-client