$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5db8591b-fd36-362f-9169-5dd9756c4d72.roa File: 5db8591b-fd36-362f-9169-5dd9756c4d72.roa (raw, json) Hash identifier: eK0Fx97STJ/sHub/4yxFjsYej7mCUgfCgb6rjdvQy8o= Subject key identifier: AB:FE:25:04:03:7B:AF:F2:F9:DE:66:3B:6A:48:01:79:36:8C:AA:E1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B0746C8DA3BD807684267AF80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5db8591b-fd36-362f-9169-5dd9756c4d72.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.33.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:c8:da:3b:d8:07:68:42:67:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=257e8e50-bd66-4d32-867e-610d016a71f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c1:ac:58:ee:05:9c:53:6b:da:22:ee:16:6a: 5e:09:10:d6:fc:e3:e4:39:e1:00:7e:aa:b8:f4:7b: 54:99:b5:b4:c9:28:56:ae:af:26:27:6e:6e:c3:81: 74:16:d5:70:8d:39:ec:a1:89:af:e3:f8:4c:4b:a6: 80:7c:8f:3f:bb:f1:a2:ec:38:86:b5:ff:a3:ce:25: 38:8d:45:4e:7c:f5:fe:3a:5a:db:35:71:bc:b1:3b: 34:45:3f:9d:31:74:f3:44:dd:b3:9b:91:ee:44:8a: 4a:65:72:4d:6d:61:2d:ad:d9:5a:eb:93:f7:18:5e: af:66:b4:5f:09:2a:1c:ed:ba:dd:2c:df:00:99:15: 2b:86:99:b9:e8:b7:0e:77:21:5d:ad:3e:66:12:36: 30:83:8e:79:51:0f:e2:00:8e:78:35:51:6c:14:4e: 29:10:ca:23:ec:cc:d1:3e:f1:4e:fd:3b:d1:f8:fc: 71:a8:82:f1:41:ba:47:7d:9d:4b:64:1b:93:65:ae: 8a:96:da:d9:1d:b8:16:7c:7f:fd:d3:10:61:be:3d: c2:f3:a9:70:b0:36:ef:f5:55:ef:cd:ac:3e:62:28: 35:cc:99:d3:c3:5b:ce:bb:05:97:c6:1f:1f:30:2e: b8:84:1c:e5:94:e7:6e:3a:df:23:3c:25:88:3b:38: af:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FE:25:04:03:7B:AF:F2:F9:DE:66:3B:6A:48:01:79:36:8C:AA:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5db8591b-fd36-362f-9169-5dd9756c4d72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:77:e8:9e:2f:6d:1a:9a:e9:07:e7:00:fa:c2:14:11:69:96: f9:d9:c2:1e:f1:27:21:24:18:8f:40:99:9b:02:f7:29:e3:b5: 98:a6:63:11:50:bf:d2:1f:1d:e5:8d:6c:00:f0:24:b0:34:16: 0b:20:52:26:4a:54:6c:7b:ee:18:62:d0:23:38:df:3f:fd:17: be:91:25:9f:0f:fb:dc:41:c9:3c:2b:bf:59:91:c5:6e:ff:cf: f4:70:10:ae:0e:dc:1e:dd:c4:36:5b:cd:be:ad:6e:bd:8c:1c: 53:2f:f7:66:d9:40:f0:f1:75:a5:83:c9:e3:5e:11:23:0c:56: 94:96:ef:6c:86:66:f2:cf:f0:da:1f:3e:76:29:2f:91:64:4d: 5b:e7:b4:33:af:bb:b6:54:f0:84:51:97:8b:d8:33:3a:e6:e0: b6:3f:7e:22:ae:4a:fc:91:20:64:5e:6b:19:5d:95:47:84:a2: 2d:c0:84:b7:c9:fe:81:5a:3e:31:71:c5:9d:0c:1f:13:f7:87: df:0b:19:33:a3:93:0d:56:29:4a:df:a1:ea:83:c9:5b:e9:4d: 84:44:bc:93:c8:dc:81:01:71:06:d8:1c:ff:2e:3d:4d:dd:45: 24:45:38:3f:4a:87:5c:26:2d:53:eb:67:ef:ac:39:61:70:80: fd:5b:3d:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRsjaO9gHaEJnr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk MjU3ZThlNTAtYmQ2Ni00ZDMyLTg2N2UtNjEwZDAxNmE3MWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8GsWO4FnFNr2iLuFmpeCRDW/OPkOeEAfqq4 9HtUmbW0yShWrq8mJ25uw4F0FtVwjTnsoYmv4/hMS6aAfI8/u/Gi7DiGtf+jziU4 jUVOfPX+OlrbNXG8sTs0RT+dMXTzRN2zm5HuRIpKZXJNbWEtrdla65P3GF6vZrRf CSoc7brdLN8AmRUrhpm56LcOdyFdrT5mEjYwg455UQ/iAI54NVFsFE4pEMoj7MzR PvFO/TvR+PxxqILxQbpHfZ1LZBuTZa6KltrZHbgWfH/90xBhvj3C86lwsDbv9VXv zaw+Yig1zJnTw1vOuwWXxh8fMC64hBzllOduOt8jPCWIOzivdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKv+JQQDe6/y+d5mO2pIAXk2jKrhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWRiODU5MWItZmQzNi0z NjJmLTkxNjktNWRkOTc1NmM0ZDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKV36J4vbRqa6QfnAPrCFBFplvnZwh7xJyEkGI9AmZsC9ynjtZimYxFQ v9IfHeWNbADwJLA0FgsgUiZKVGx77hhi0CM43z/9F76RJZ8P+9xByTwrv1mRxW7/ z/RwEK4O3B7dxDZbzb6tbr2MHFMv92bZQPDxdaWDyeNeESMMVpSW72yGZvLP8Nof PnYpL5FkTVvntDOvu7ZU8IRRl4vYMzrm4LY/fiKuSvyRIGReaxldlUeEoi3AhLfJ /oFaPjFxxZ0MHxP3h98LGTOjkw1WKUrfoeqDyVvpTYREvJPI3IEBcQbYHP8uPU3d RSRFOD9Kh1wmLVPrZ++sOWFwgP1bPds= -----END CERTIFICATE-----Generated at Mon Oct 20 04:32:42 2025 by rpki-client