$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/59fb37fe-5e43-39f4-a63b-2cb11dfc57a5.roa File: 59fb37fe-5e43-39f4-a63b-2cb11dfc57a5.roa (raw, json) Hash identifier: SGf/sy9X81jNCzgdBBkSMUdo+FQ4njhloC9k6IewkSk= Subject key identifier: 82:09:B1:26:4D:ED:5E:C2:69:50:B8:FB:A6:12:96:B7:1E:B6:30:3A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A90A0C6E50E919CA5686E8A40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/59fb37fe-5e43-39f4-a63b-2cb11dfc57a5.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.33.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:c6:e5:0e:91:9c:a5:68:6e:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=7f56221a-e1da-4c28-814d-daa5d8ac73dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:16:04:fb:8e:ff:34:b3:2e:21:fb:96:23:01: 73:3d:3c:9b:30:41:4c:9a:9e:84:1a:91:60:bb:d3: 54:bf:fe:e1:db:8c:54:79:dd:f7:16:98:b7:a7:5d: 21:28:7c:9c:74:f1:aa:8a:45:2d:31:c6:83:70:be: d9:d0:fe:1a:d4:f2:62:fc:4c:99:f2:69:b6:5b:7a: 21:ac:52:35:e6:58:2d:94:23:ed:84:71:ba:99:03: d6:29:1d:8d:20:28:24:24:d2:ab:b8:fd:a5:86:30: fc:93:e1:5b:5b:7f:2e:69:7d:8a:f8:e1:de:08:14: e0:06:80:3d:87:10:aa:a3:74:c9:48:be:13:24:f7: 10:32:bd:dd:9a:3e:8e:c3:79:34:f4:1f:73:f4:0a: c5:54:60:0e:96:4e:54:99:d0:7a:64:73:d0:eb:98: 01:c1:18:2e:64:6c:9b:dd:6a:11:f9:7d:2a:d8:47: 17:e5:00:c3:fe:a8:10:fd:48:1b:78:69:50:08:ef: 1a:c5:b9:1b:81:2a:12:20:22:98:d0:24:e3:d2:20: f2:00:6e:73:17:0e:f2:13:ce:d8:b9:79:4a:d1:58: ee:ba:55:66:31:cf:57:80:05:32:83:db:24:28:6e: 1c:f2:05:41:6d:be:83:d8:da:05:b3:56:d1:61:17: 25:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:09:B1:26:4D:ED:5E:C2:69:50:B8:FB:A6:12:96:B7:1E:B6:30:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/59fb37fe-5e43-39f4-a63b-2cb11dfc57a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:fe:bc:18:6b:19:a7:88:12:b8:eb:0f:6b:11:68:49:15:20: 94:bc:dd:61:a3:54:d3:57:99:0a:88:82:fc:1c:43:66:f0:16: 68:3a:41:98:5c:0d:ec:fe:d2:94:86:b5:e0:9d:5f:f0:b2:7a: 1c:2f:70:85:b6:44:77:23:bb:0f:a5:f3:ae:3f:b7:be:8a:a8: 54:1e:5e:b4:c8:ab:4b:ac:08:bd:90:99:7e:1e:30:6e:00:ec: 0c:c6:d1:1f:c0:a1:15:f1:47:4d:bd:c9:b0:88:6e:b7:ed:08: 77:06:2e:73:e3:ce:46:47:3e:3a:80:c2:af:8b:1a:5f:4e:62: 9f:94:7f:16:28:01:c1:fd:c7:bf:26:65:ce:7c:21:b7:3f:92: c8:e2:ff:b8:f5:e8:a6:8e:1f:dc:de:23:ba:df:11:3b:f5:e4: 8f:39:a0:7a:63:a8:ce:8e:11:43:ac:ec:d3:e2:42:fd:12:2d: 82:81:35:9e:20:70:8d:cf:fa:3d:d5:76:a3:12:5e:dd:6f:d5: f8:8b:cc:0d:81:97:9a:f8:7f:b8:ae:48:42:e7:c5:28:dc:6b: 16:8d:6e:fc:3c:91:e1:a7:5f:df:65:d0:9a:0f:50:28:3f:85: f6:a0:df:02:ce:79:c5:42:02:07:ea:a0:3c:15:1e:65:b1:b7: cd:ed:4b:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoMblDpGcpWhuikAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk N2Y1NjIyMWEtZTFkYS00YzI4LTgxNGQtZGFhNWQ4YWM3M2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBYE+47/NLMuIfuWIwFzPTybMEFMmp6EGpFg u9NUv/7h24xUed33Fpi3p10hKHycdPGqikUtMcaDcL7Z0P4a1PJi/EyZ8mm2W3oh rFI15lgtlCPthHG6mQPWKR2NICgkJNKruP2lhjD8k+FbW38uaX2K+OHeCBTgBoA9 hxCqo3TJSL4TJPcQMr3dmj6Ow3k09B9z9ArFVGAOlk5UmdB6ZHPQ65gBwRguZGyb 3WoR+X0q2EcX5QDD/qgQ/UgbeGlQCO8axbkbgSoSICKY0CTj0iDyAG5zFw7yE87Y uXlK0VjuulVmMc9XgAUyg9skKG4c8gVBbb6D2NoFs1bRYRcljQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIJsSZN7V7CaVC4+6YSlrcetjA6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTlmYjM3ZmUtNWU0My0z OWY0LWE2M2ItMmNiMTFkZmM1N2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFL+vBhrGaeIErjrD2sRaEkVIJS83WGjVNNXmQqIgvwcQ2bwFmg6QZhc Dez+0pSGteCdX/CyehwvcIW2RHcjuw+l864/t76KqFQeXrTIq0usCL2QmX4eMG4A 7AzG0R/AoRXxR029ybCIbrftCHcGLnPjzkZHPjqAwq+LGl9OYp+UfxYoAcH9x78m Zc58Ibc/ksji/7j16KaOH9zeI7rfETv15I85oHpjqM6OEUOs7NPiQv0SLYKBNZ4g cI3P+j3VdqMSXt1v1fiLzA2Bl5r4f7iuSELnxSjcaxaNbvw8keGnX99l0JoPUCg/ hfag3wLOecVCAgfqoDwVHmWxt83tSww= -----END CERTIFICATE-----Generated at Tue Aug 5 21:36:32 2025 by rpki-client