$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ede11131-09a5-3938-9e03-0196812fb57b.roa File: ede11131-09a5-3938-9e03-0196812fb57b.roa (raw, json) Hash identifier: Wwa/6UxH+zQKcWP/iS3jp62uJVHS1X5eQ59O9iBXLGY= Subject key identifier: 4A:A8:43:E8:6C:8C:12:9C:3B:1B:A8:DE:EA:8D:10:3B:0F:23:6B:54 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B3C51B067FCC969CDCF8BA280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ede11131-09a5-3938-9e03-0196812fb57b.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:b0:67:fc:c9:69:cd:cf:8b:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=017b7c32-3deb-49eb-89a9-1bd4f9f18b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:be:68:a4:7d:72:07:b9:1a:40:d5:64:b6:31: 65:f1:cd:3c:2f:bb:62:bf:d6:14:8d:a5:f6:88:d8: b7:f0:89:bf:99:ff:f8:96:b2:96:cd:58:aa:4d:20: fd:47:eb:94:38:90:a6:74:02:ef:7a:d3:d3:2c:b2: 3f:89:3e:96:78:ee:86:80:75:1c:46:f8:b1:dc:20: 99:6a:6c:9a:23:40:37:62:de:4e:2d:28:b8:4e:67: 80:62:c1:12:c4:bc:39:48:21:19:ad:28:5b:8d:2a: 69:e7:b7:08:ed:4a:79:18:36:d4:d1:b3:34:14:e3: ed:aa:c1:b0:cf:ad:7a:47:c1:ae:05:1f:4f:e8:ef: ce:4b:51:67:6d:39:fc:11:7f:36:4a:57:58:29:0e: 38:e6:5a:56:85:93:b4:2a:58:43:10:c8:94:1f:ef: eb:3e:98:3f:d9:bb:ae:1f:ec:e2:3b:00:fd:eb:24: bf:52:5c:50:86:11:f2:d7:ad:18:46:ae:1c:83:c9: 46:0f:0c:a0:58:e6:a3:27:c0:55:f6:73:da:3d:ec: 6c:80:2d:ac:de:4d:e5:4d:ff:90:cd:53:e6:82:bd: 06:b5:24:12:b7:3e:53:a8:e9:7a:6b:2e:c5:82:1e: 56:4d:26:21:29:a5:d4:a3:8c:37:3a:ae:4a:25:19: c1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A8:43:E8:6C:8C:12:9C:3B:1B:A8:DE:EA:8D:10:3B:0F:23:6B:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ede11131-09a5-3938-9e03-0196812fb57b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:8e:11:ba:8d:7a:e2:2e:cd:13:de:41:ea:fc:ea:73:73:d8: 8a:1c:df:5b:a1:50:5f:00:5a:7a:0a:00:bf:6f:e4:00:ef:7d: 4f:c4:a2:0c:d4:88:13:ef:51:d4:fd:67:f6:49:93:dd:39:bd: 8d:1b:fe:6b:fd:97:fb:6e:af:20:92:f5:59:05:7b:aa:52:eb: 3f:19:1d:18:67:92:63:9d:81:58:78:4f:fe:37:98:7b:cd:84: 7b:cf:38:fb:b7:0c:f1:bf:34:6e:11:ac:18:6c:26:d9:b0:82: 3c:a4:12:01:f9:87:08:5e:b6:95:b2:e7:a1:0f:72:7f:87:80: 52:5d:12:94:07:ad:08:3e:bc:4b:97:12:92:2e:b8:de:32:11: 7c:6c:4e:37:8a:77:30:0e:30:15:8b:cd:18:8b:43:e8:4b:a5: f8:69:90:9b:8f:9b:92:c0:90:75:0d:bc:8b:73:b5:8b:c6:26: 5c:d7:ad:c9:d0:96:61:15:c0:fc:c5:a9:23:65:b1:f4:00:da: 19:b6:c9:18:4c:1d:66:fa:0d:6f:be:5f:57:b0:2d:19:e4:a3: bf:8a:ae:33:78:98:bb:90:64:9d:83:db:69:a1:98:22:a2:38: a2:b3:ae:fc:46:a7:95:c0:6e:e4:ab:d0:90:10:6d:ee:01:94: a7:d6:2d:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8UbBn/Mlpzc+LooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk MDE3YjdjMzItM2RlYi00OWViLTg5YTktMWJkNGY5ZjE4YjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb5opH1yB7kaQNVktjFl8c08L7tiv9YUjaX2 iNi38Im/mf/4lrKWzViqTSD9R+uUOJCmdALvetPTLLI/iT6WeO6GgHUcRvix3CCZ amyaI0A3Yt5OLSi4TmeAYsESxLw5SCEZrShbjSpp57cI7Up5GDbU0bM0FOPtqsGw z616R8GuBR9P6O/OS1FnbTn8EX82SldYKQ445lpWhZO0KlhDEMiUH+/rPpg/2buu H+ziOwD96yS/UlxQhhHy160YRq4cg8lGDwygWOajJ8BV9nPaPexsgC2s3k3lTf+Q zVPmgr0GtSQStz5TqOl6ay7Fgh5WTSYhKaXUo4w3Oq5KJRnBfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqoQ+hsjBKcOxuo3uqNEDsPI2tUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWRlMTExMzEtMDlhNS0z OTM4LTllMDMtMDE5NjgxMmZiNTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOOEbqNeuIuzRPeQer86nNz2Ioc31uhUF8AWnoKAL9v5ADvfU/EogzU iBPvUdT9Z/ZJk905vY0b/mv9l/turyCS9VkFe6pS6z8ZHRhnkmOdgVh4T/43mHvN hHvPOPu3DPG/NG4RrBhsJtmwgjykEgH5hwhetpWy56EPcn+HgFJdEpQHrQg+vEuX EpIuuN4yEXxsTjeKdzAOMBWLzRiLQ+hLpfhpkJuPm5LAkHUNvItztYvGJlzXrcnQ lmEVwPzFqSNlsfQA2hm2yRhMHWb6DW++X1ewLRnko7+KrjN4mLuQZJ2D22mhmCKi OKKzrvxGp5XAbuSr0JAQbe4BlKfWLUE= -----END CERTIFICATE-----Generated at Tue Oct 21 02:00:35 2025 by rpki-client