$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/59fb37fe-5e43-39f4-a63b-2cb11dfc57a5.roa File: 59fb37fe-5e43-39f4-a63b-2cb11dfc57a5.roa (raw, json) Hash identifier: 31e/r0ARQwQFD19z1O0U/6hDYX6QKNdYgFJjVyCW//8= Subject key identifier: 88:B7:E1:6F:71:25:BD:C7:A9:55:95:B7:2E:5A:5A:68:94:10:4C:11 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E104EF41E02365E5F3481AE60 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/59fb37fe-5e43-39f4-a63b-2cb11dfc57a5.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.33.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:f4:1e:02:36:5e:5f:34:81:ae:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=71add81d-28e0-4450-b22c-23e2c2718efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:52:b3:63:76:12:f0:69:62:b0:f0:eb:02:40: 09:c6:94:2a:ea:8a:2d:7b:02:70:2a:f7:ce:57:e8: b4:47:f4:23:ff:76:ba:a0:94:c0:d6:7a:42:f5:35: 37:52:37:9a:1f:2a:5a:69:7d:51:68:38:cf:1a:4b: 35:fa:a1:5c:5d:01:96:d4:00:43:33:5f:04:a4:7e: 39:68:42:09:a8:5a:5b:93:cc:21:01:5a:13:69:d6: a3:58:61:31:73:47:15:94:62:8b:0b:44:99:0f:dd: d4:02:18:e8:f2:06:52:6b:01:32:d3:3d:2c:bc:3c: 7f:38:c0:f3:a2:bd:b8:f5:02:a8:cc:b2:ef:32:11: 09:00:d2:e1:b7:11:d7:77:cd:85:84:23:df:01:bd: d5:f5:5a:0f:df:f1:8e:9e:d4:a8:23:e4:b2:fc:46: e1:1b:57:70:41:06:fa:5b:8b:17:e6:af:dd:29:c0: a6:a1:4a:39:8a:6c:26:06:9c:d8:f9:ec:9f:af:4c: b4:45:97:c9:46:70:70:11:aa:76:5b:aa:fb:f8:f7: ed:4a:a2:a8:8a:a0:b2:ce:61:fa:b4:27:cc:f7:7c: 2f:56:a1:b9:76:5b:59:30:06:16:4d:f1:53:21:91: 6a:c0:7a:44:9c:64:5d:b7:8e:e0:86:15:b1:d8:ef: a5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B7:E1:6F:71:25:BD:C7:A9:55:95:B7:2E:5A:5A:68:94:10:4C:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/59fb37fe-5e43-39f4-a63b-2cb11dfc57a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:84:48:c4:27:51:e1:f5:1b:4c:cb:3d:f5:97:b3:cd:f9:3d: c4:48:87:6a:28:ef:70:f2:95:1b:f5:d0:56:ed:b9:b4:9f:9a: 18:eb:ca:08:3a:23:7e:98:2e:2e:2b:e0:8c:36:f3:f2:c9:1f: 9c:a9:e5:e4:6d:04:42:40:83:90:c8:38:d9:4d:5e:28:5e:24: f5:54:9e:30:1b:d1:6e:92:8f:28:70:f0:bc:59:8d:76:36:54: da:5c:40:9e:2c:2d:3d:03:cc:30:fc:18:81:e8:16:69:3a:da: 60:48:43:bf:cc:cf:d8:bf:65:ad:86:b6:a3:a3:b4:a6:fe:fb: 5a:72:6f:e9:9f:9e:a4:67:6f:fc:8e:26:78:35:50:bf:2a:38: f6:18:57:07:f8:bd:c8:ee:b9:de:17:bd:ab:38:7b:77:29:9b: 33:ab:c4:39:57:ca:ca:03:05:fe:bf:02:60:5b:74:fc:ea:ff: 92:8c:e2:d0:b9:d8:cf:d6:78:83:bb:7d:dd:f6:75:60:d9:30: 24:e1:c6:e9:89:9c:26:2a:ee:8c:fc:fb:67:7c:32:44:3a:ee: f6:c1:a9:7d:2a:cd:e8:b5:5b:c4:d6:ad:b6:a0:fa:9b:6e:f5: 61:28:13:c3:b1:05:ad:7d:94:1d:45:09:ca:58:8d:dc:6e:55: 4f:bb:03:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTvQeAjZeXzSBrmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk NzFhZGQ4MWQtMjhlMC00NDUwLWIyMmMtMjNlMmMyNzE4ZWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlKzY3YS8GlisPDrAkAJxpQq6ootewJwKvfO V+i0R/Qj/3a6oJTA1npC9TU3UjeaHypaaX1RaDjPGks1+qFcXQGW1ABDM18EpH45 aEIJqFpbk8whAVoTadajWGExc0cVlGKLC0SZD93UAhjo8gZSawEy0z0svDx/OMDz or249QKozLLvMhEJANLhtxHXd82FhCPfAb3V9VoP3/GOntSoI+Sy/EbhG1dwQQb6 W4sX5q/dKcCmoUo5imwmBpzY+eyfr0y0RZfJRnBwEap2W6r7+PftSqKoiqCyzmH6 tCfM93wvVqG5dltZMAYWTfFTIZFqwHpEnGRdt47ghhWx2O+lQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIi34W9xJb3HqVWVty5aWmiUEEwRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTlmYjM3ZmUtNWU0My0z OWY0LWE2M2ItMmNiMTFkZmM1N2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+ESMQnUeH1G0zLPfWXs835PcRIh2oo73DylRv10FbtubSfmhjrygg6 I36YLi4r4Iw28/LJH5yp5eRtBEJAg5DIONlNXiheJPVUnjAb0W6Sjyhw8LxZjXY2 VNpcQJ4sLT0DzDD8GIHoFmk62mBIQ7/Mz9i/Za2GtqOjtKb++1pyb+mfnqRnb/yO Jng1UL8qOPYYVwf4vcjuud4Xvas4e3cpmzOrxDlXysoDBf6/AmBbdPzq/5KM4tC5 2M/WeIO7fd32dWDZMCThxumJnCYq7oz8+2d8MkQ67vbBqX0qzei1W8TWrbag+ptu 9WEoE8OxBa19lB1FCcpYjdxuVU+7A68= -----END CERTIFICATE-----Generated at Sat Jun 6 14:46:19 2026 by rpki-client