$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c7375d5-e6fa-37b0-aa8e-ab53e4385ead.roa File: 7c7375d5-e6fa-37b0-aa8e-ab53e4385ead.roa (raw, json) Hash identifier: 0zPYlZ1srYraxpt/R2QusdENuhyrAblOSw+5v2y2hqg= Subject key identifier: 61:33:1A:93:7A:3C:09:95:39:F0:81:5A:56:86:07:22:DF:16:30:53 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AA42B90B2C84C13FDB2058700 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c7375d5-e6fa-37b0-aa8e-ab53e4385ead.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.33.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:90:b2:c8:4c:13:fd:b2:05:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=f4907bcf-1e3b-40d5-8397-439c76868bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:59:ba:a0:46:c1:a0:eb:40:0d:61:36:04:1a: 52:2d:f7:45:6d:5e:b2:a6:30:30:33:71:a8:02:be: 47:86:38:6b:35:aa:c0:ab:2a:14:38:76:96:ea:bf: b2:e7:69:be:fb:82:74:fe:be:a2:84:a9:29:d8:8e: 25:98:d8:35:09:6e:93:e0:f0:42:38:f0:e7:b5:64: 5c:00:af:00:8f:3d:8c:d7:ca:ad:7f:a0:b8:ba:b3: 17:78:7b:c3:34:50:52:a3:4b:18:93:e4:05:35:a6: 52:62:01:16:37:20:05:d0:15:dc:cb:af:84:36:1f: 58:ae:d3:62:d2:ac:ab:aa:b6:8c:e9:f4:63:0c:da: 42:cc:0c:6b:d4:6b:50:e1:39:59:c9:63:a2:d2:10: fe:ac:70:7f:53:e5:ef:4c:e8:a4:ab:80:2a:57:17: ba:e8:e6:5c:46:e8:d9:23:dd:ef:c9:8a:9c:43:d3: 8a:ff:70:76:ca:ea:aa:c0:8c:a6:20:a0:f5:f3:29: ee:b8:80:c9:37:6b:ba:d9:78:51:fd:70:64:0a:4b: db:71:f1:5b:99:49:32:1a:d3:66:93:32:b2:7b:65: af:d6:43:b0:fb:d1:34:2e:0a:56:79:2e:a7:6e:1d: d2:2a:62:9d:3a:cc:9f:c6:9d:0f:a1:da:12:14:ad: f0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:33:1A:93:7A:3C:09:95:39:F0:81:5A:56:86:07:22:DF:16:30:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c7375d5-e6fa-37b0-aa8e-ab53e4385ead.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:58:70:af:65:8e:aa:58:83:9b:65:da:0e:3b:93:4f:b7:19: 5d:eb:c0:84:65:d2:b8:8f:51:b1:f4:90:41:5c:84:58:61:19: fa:f5:c6:ee:fb:1c:5a:b0:1f:3b:00:32:9c:64:86:55:ea:1d: a5:f7:d2:d6:00:02:76:b3:64:7e:17:2a:69:ea:4c:a0:32:03: f5:ad:b8:d7:f9:54:69:4c:77:52:16:f2:b4:6f:f7:62:d3:28: d0:dd:3f:e6:31:01:e7:11:45:b5:1b:92:b6:c7:31:8f:58:d4: d4:23:99:eb:c0:d9:ea:0e:5c:cf:e8:7a:cc:bf:57:cf:35:48: 60:5e:d6:a1:2c:bc:8a:13:8a:07:66:8d:b5:53:37:82:36:64: 61:a1:b5:64:9a:f9:07:81:60:78:c0:1a:8a:d0:75:64:ae:3a: 79:9d:65:3c:49:20:03:c7:c2:7d:b3:6e:04:74:ab:f8:52:93: 1f:65:0a:1a:22:ef:c5:60:49:d0:be:fb:3e:5a:0b:0a:2a:3b: d5:35:c1:f8:5a:f1:69:2f:0d:10:df:fb:2a:3b:89:c4:0c:19: d2:a1:41:ab:7c:d2:72:e4:4e:06:cb:69:c9:45:34:21:a2:d0: 32:76:1a:42:67:51:3f:cf:32:6a:33:05:93:36:ab:00:c6:f7: 19:0e:9c:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK5CyyEwT/bIFhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZjQ5MDdiY2YtMWUzYi00MGQ1LTgzOTctNDM5Yzc2ODY4YmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVm6oEbBoOtADWE2BBpSLfdFbV6ypjAwM3Go Ar5HhjhrNarAqyoUOHaW6r+y52m++4J0/r6ihKkp2I4lmNg1CW6T4PBCOPDntWRc AK8Ajz2M18qtf6C4urMXeHvDNFBSo0sYk+QFNaZSYgEWNyAF0BXcy6+ENh9YrtNi 0qyrqraM6fRjDNpCzAxr1GtQ4TlZyWOi0hD+rHB/U+XvTOikq4AqVxe66OZcRujZ I93vyYqcQ9OK/3B2yuqqwIymIKD18ynuuIDJN2u62XhR/XBkCkvbcfFbmUkyGtNm kzKye2Wv1kOw+9E0LgpWeS6nbh3SKmKdOsyfxp0PodoSFK3wSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEzGpN6PAmVOfCBWlaGByLfFjBTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2M3Mzc1ZDUtZTZmYS0z N2IwLWFhOGUtYWI1M2U0Mzg1ZWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtYcK9ljqpYg5tl2g47k0+3GV3rwIRl0riPUbH0kEFchFhhGfr1xu77 HFqwHzsAMpxkhlXqHaX30tYAAnazZH4XKmnqTKAyA/WtuNf5VGlMd1IW8rRv92LT KNDdP+YxAecRRbUbkrbHMY9Y1NQjmevA2eoOXM/oesy/V881SGBe1qEsvIoTigdm jbVTN4I2ZGGhtWSa+QeBYHjAGorQdWSuOnmdZTxJIAPHwn2zbgR0q/hSkx9lChoi 78VgSdC++z5aCwoqO9U1wfha8WkvDRDf+yo7icQMGdKhQat80nLkTgbLaclFNCGi 0DJ2GkJnUT/PMmozBZM2qwDG9xkOnMU= -----END CERTIFICATE-----Generated at Mon Aug 4 18:55:14 2025 by rpki-client