$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/80e82465-c9d4-3c99-a3bc-a70a5dfd93f8.roa File: 80e82465-c9d4-3c99-a3bc-a70a5dfd93f8.roa (raw, json) Hash identifier: a7lY0DAC3zPEe4CxOPN63gRF39catRzME2FBg/Wff44= Subject key identifier: 2A:FE:6E:56:F4:D5:B3:28:8C:FB:13:7F:EC:2A:28:29:28:04:BB:6F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AA42B9080ED88767A33E78E00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/80e82465-c9d4-3c99-a3bc-a70a5dfd93f8.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.33.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:90:80:ed:88:76:7a:33:e7:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=5369876c-81e0-4b30-aa17-801652ecc066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:47:35:49:f3:dd:25:09:ba:32:48:29:68:af: 1e:de:6b:cf:54:62:cd:46:f1:b6:c3:95:2d:25:0d: 46:a0:9a:68:e7:9c:2b:ca:38:3f:59:52:47:dd:04: ff:0f:2c:84:4c:b9:22:f1:2d:af:c6:af:1a:d1:86: a4:00:14:36:75:48:03:c6:43:e0:6d:57:8c:3b:d9: 5f:ef:69:fc:51:32:d8:fe:93:0a:d3:fe:ad:3c:30: af:4e:7a:17:70:16:bd:e4:f7:d0:43:ed:16:d4:86: 86:ab:a8:ac:4f:c5:fa:2f:8f:b4:48:e2:06:a4:70: 74:1f:65:98:61:1f:34:7d:d1:7c:35:4e:14:14:1a: fa:07:9e:85:07:13:b2:f6:83:16:f0:12:b2:30:24: 77:6e:ac:fd:13:43:24:1a:a0:2d:c2:6c:59:2e:71: c8:bf:ee:05:5e:81:17:84:85:e8:0a:7a:7c:25:48: 5d:1f:1f:0f:a7:41:5c:f3:76:11:4c:83:62:78:6c: 7a:73:bd:42:36:25:73:3c:78:cc:3f:2e:ba:e0:83: 03:dd:3e:ef:69:f7:7f:2f:b1:05:2d:1c:8e:eb:d6: 34:54:99:da:8d:e3:33:41:01:23:18:23:c7:e0:5a: d2:ac:a1:97:59:0d:0e:61:7d:47:3e:8b:4b:8b:13: f7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FE:6E:56:F4:D5:B3:28:8C:FB:13:7F:EC:2A:28:29:28:04:BB:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/80e82465-c9d4-3c99-a3bc-a70a5dfd93f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:25:ab:8b:56:2d:89:69:cd:16:dc:93:4c:6a:cb:77:28:8a: 4e:76:10:f1:2f:06:c7:56:b0:27:b8:f5:12:24:83:e7:ed:e1: 9a:03:4b:9d:75:fb:16:72:9b:e9:02:2b:26:fb:cc:8a:79:bc: 49:cc:11:6b:22:3b:75:e1:f6:1b:ce:b9:3c:74:f5:e5:6d:6a: b8:35:39:fa:60:1e:cb:27:60:50:23:76:36:5f:c8:09:e9:45: fb:79:4f:4f:f0:64:3c:a9:0f:0d:72:cd:10:fb:07:b9:a3:16: 5d:53:f5:c5:23:79:df:85:07:11:2f:94:71:2d:6c:f5:e2:63: aa:00:03:46:62:01:89:76:91:b4:e6:05:a9:72:e1:43:b9:aa: 02:14:ab:b6:10:1b:09:ed:06:c6:1c:03:b3:0f:29:48:2d:54: 05:5f:f3:21:bd:bb:c6:f6:5c:09:1a:73:fd:7b:4e:be:1e:7e: ff:73:cb:d1:e7:78:47:cb:6f:6b:7d:05:3c:22:3f:bc:25:02: 47:80:f7:d4:eb:68:4b:b5:f5:80:fd:9a:d9:c1:22:22:22:a9: 5e:45:1e:bb:6d:90:74:ee:00:dc:53:b5:88:51:92:b5:42:d7: 78:81:1e:e8:49:a2:6c:38:a9:ec:a2:eb:01:8d:91:2b:0a:52: 3a:69:83:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK5CA7Yh2ejPnjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk NTM2OTg3NmMtODFlMC00YjMwLWFhMTctODAxNjUyZWNjMDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30c1SfPdJQm6MkgpaK8e3mvPVGLNRvG2w5Ut JQ1GoJpo55wryjg/WVJH3QT/DyyETLki8S2vxq8a0YakABQ2dUgDxkPgbVeMO9lf 72n8UTLY/pMK0/6tPDCvTnoXcBa95PfQQ+0W1IaGq6isT8X6L4+0SOIGpHB0H2WY YR80fdF8NU4UFBr6B56FBxOy9oMW8BKyMCR3bqz9E0MkGqAtwmxZLnHIv+4FXoEX hIXoCnp8JUhdHx8Pp0Fc83YRTINieGx6c71CNiVzPHjMPy664IMD3T7vafd/L7EF LRyO69Y0VJnajeMzQQEjGCPH4FrSrKGXWQ0OYX1HPotLixP3GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCr+blb01bMojPsTf+wqKCkoBLtvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODBlODI0NjUtYzlkNC0z Yzk5LWEzYmMtYTcwYTVkZmQ5M2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGslq4tWLYlpzRbck0xqy3coik52EPEvBsdWsCe49RIkg+ft4ZoDS511 +xZym+kCKyb7zIp5vEnMEWsiO3Xh9hvOuTx09eVtarg1OfpgHssnYFAjdjZfyAnp Rft5T0/wZDypDw1yzRD7B7mjFl1T9cUjed+FBxEvlHEtbPXiY6oAA0ZiAYl2kbTm Baly4UO5qgIUq7YQGwntBsYcA7MPKUgtVAVf8yG9u8b2XAkac/17Tr4efv9zy9Hn eEfLb2t9BTwiP7wlAkeA99TraEu19YD9mtnBIiIiqV5FHrttkHTuANxTtYhRkrVC 13iBHuhJomw4qeyi6wGNkSsKUjppg9k= -----END CERTIFICATE-----Generated at Mon Aug 4 18:27:10 2025 by rpki-client