$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4a91552d-6deb-3e19-805b-ab52062a7fcd.roa File: 4a91552d-6deb-3e19-805b-ab52062a7fcd.roa (raw, json) Hash identifier: yqkeifh3rfpTw47UMLoEdrGfqZ1uVOy/yKXbDgRpmgk= Subject key identifier: 99:89:D3:81:B8:89:2F:7A:D1:EB:75:7F:69:06:72:CD:69:AD:54:E1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B047C1D18AFA314927674E4E0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4a91552d-6deb-3e19-805b-ab52062a7fcd.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:1d:18:af:a3:14:92:76:74:e4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=b0f61ce4-c527-4766-8a9e-b90ce4d27dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ad:51:ce:ba:09:7f:0b:8c:64:c4:af:64:18: e7:9b:06:aa:eb:1c:56:e0:b9:10:02:83:51:80:e6: aa:3f:06:64:1a:00:12:0b:aa:0c:ca:22:80:a8:8c: 69:11:91:6c:b4:e2:de:24:53:48:25:b5:2f:27:6b: fa:d2:e5:f4:68:a5:08:cc:b9:45:86:8a:00:1f:b9: b9:dd:29:90:6c:62:69:37:0b:4e:3b:11:42:b8:d3: 3d:a1:70:75:7c:5f:c5:73:57:60:47:6f:a2:52:d9: c3:17:08:b4:9e:b0:2c:ab:59:2f:6b:81:61:68:dc: 51:9f:a6:0f:d7:f3:7c:f9:cd:18:11:ba:a6:dd:a6: a4:8b:71:7f:f1:f8:ba:d7:c8:27:80:be:60:c7:9d: fa:2a:26:c4:1d:56:09:63:9e:6a:0e:9b:de:e7:71: 68:15:be:0a:3e:f1:c8:50:5e:b4:b1:69:78:ab:42: 99:13:91:6c:e0:07:89:ba:75:54:5e:8a:ce:3c:20: 80:3f:93:e5:e6:16:ad:ee:43:40:7e:83:5d:fd:bf: 02:52:1f:90:df:70:38:23:cc:9c:06:f0:5b:2e:a6: e5:38:cb:1c:61:19:00:42:54:85:e9:a3:51:35:08: e9:4c:aa:f5:60:b9:ce:f5:19:07:c9:74:51:fb:21: 0e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:89:D3:81:B8:89:2F:7A:D1:EB:75:7F:69:06:72:CD:69:AD:54:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4a91552d-6deb-3e19-805b-ab52062a7fcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:b6:54:ce:1b:bf:fd:72:a6:f6:71:17:d5:e3:d4:1c:1e:e1: 64:f7:e7:c9:02:cd:ce:ee:3c:2f:2c:07:37:b4:c4:9a:ab:9f: bd:07:48:3f:20:06:cf:aa:57:ad:e8:1d:04:d3:e2:52:d7:94: a4:8f:83:e3:12:17:f0:75:74:ed:6a:f0:8a:f7:8d:47:0b:08: da:fb:c6:47:93:6d:7c:5e:24:6e:ae:11:ac:54:23:9d:eb:9b: 0a:66:fd:21:36:1f:9c:25:00:45:51:ff:95:2f:5c:07:b4:e5: 95:42:49:e2:15:a6:92:c2:43:aa:4c:c8:6e:b2:29:d0:a5:0c: 9c:a6:ea:21:43:1e:55:a8:74:62:28:ac:e8:78:73:c5:e2:19: 34:64:86:0c:b8:7f:9c:f3:e3:46:f2:ad:ff:27:a8:42:dd:d1: de:04:ad:e9:c3:78:70:95:14:ea:21:5a:e0:ee:67:2d:82:3a: d8:02:50:d2:c6:b1:ea:7a:cb:86:67:fd:26:b3:13:ee:e4:06: 02:e4:cf:26:9b:68:1e:2e:8d:36:cb:25:2a:1f:a9:8e:43:11: 07:88:4b:71:8e:31:4b:13:fc:bd:c1:71:c6:cf:af:47:ec:03: 81:59:ba:b8:06:40:6d:a7:2c:c2:ab:26:7d:6b:71:e4:7d:6e: 71:c6:34:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfB0Yr6MUknZ05OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk YjBmNjFjZTQtYzUyNy00NzY2LThhOWUtYjkwY2U0ZDI3ZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0K1RzroJfwuMZMSvZBjnmwaq6xxW4LkQAoNR gOaqPwZkGgASC6oMyiKAqIxpEZFstOLeJFNIJbUvJ2v60uX0aKUIzLlFhooAH7m5 3SmQbGJpNwtOOxFCuNM9oXB1fF/Fc1dgR2+iUtnDFwi0nrAsq1kva4FhaNxRn6YP 1/N8+c0YEbqm3aaki3F/8fi618gngL5gx536KibEHVYJY55qDpve53FoFb4KPvHI UF60sWl4q0KZE5Fs4AeJunVUXorOPCCAP5Pl5hat7kNAfoNd/b8CUh+Q33A4I8yc BvBbLqblOMscYRkAQlSF6aNRNQjpTKr1YLnO9RkHyXRR+yEO7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmJ04G4iS960et1f2kGcs1prVThMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGE5MTU1MmQtNmRlYi0z ZTE5LTgwNWItYWI1MjA2MmE3ZmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIu2VM4bv/1ypvZxF9Xj1Bwe4WT358kCzc7uPC8sBze0xJqrn70HSD8g Bs+qV63oHQTT4lLXlKSPg+MSF/B1dO1q8Ir3jUcLCNr7xkeTbXxeJG6uEaxUI53r mwpm/SE2H5wlAEVR/5UvXAe05ZVCSeIVppLCQ6pMyG6yKdClDJym6iFDHlWodGIo rOh4c8XiGTRkhgy4f5zz40byrf8nqELd0d4ErenDeHCVFOohWuDuZy2COtgCUNLG sep6y4Zn/SazE+7kBgLkzyabaB4ujTbLJSofqY5DEQeIS3GOMUsT/L3BccbPr0fs A4FZurgGQG2nLMKrJn1rceR9bnHGNEU= -----END CERTIFICATE-----Generated at Mon Oct 20 07:32:41 2025 by rpki-client