$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/13685917-b747-38e7-b217-bfb35c42a823.roa File: 13685917-b747-38e7-b217-bfb35c42a823.roa (raw, json) Hash identifier: l6oQ7SSAL/22KNmHGUVceNu97faojyxSoc7aydYEvDs= Subject key identifier: CC:93:44:B4:D1:0C:1A:29:A3:C1:15:C7:35:67:93:A2:F8:DA:D0:49 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E4129E1528E1AC38AD92C1400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/13685917-b747-38e7-b217-bfb35c42a823.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 8069 IP address blocks: 20.33.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:e1:52:8e:1a:c3:8a:d9:2c:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=fa4ef893-2689-4e0c-840a-d18f75ddc1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e5:e8:eb:cf:7e:0b:78:36:a0:bd:0e:1a:3b: d4:26:f8:ac:4c:70:9f:41:54:92:ee:44:9b:6e:17: 20:62:24:50:c1:58:ce:28:a7:c5:3d:20:f9:8e:03: a7:24:3e:c4:8c:17:6c:87:26:9c:a2:99:52:e5:d6: bb:3f:02:a8:f1:5d:8a:98:14:d0:e0:f6:50:9c:2b: ac:5a:76:c9:b4:d4:9c:13:3f:14:03:4b:e2:64:74: 59:6b:63:e7:61:07:7a:b6:f5:06:eb:ce:e9:d9:60: 2e:f8:42:ff:29:d5:1d:57:49:cc:07:b4:4a:1d:d8: a6:03:9d:cb:e4:56:48:3d:49:6c:dd:5f:ee:45:cf: eb:db:34:7d:f5:3f:6a:d4:a5:06:16:74:64:47:67: d7:44:c4:28:df:f7:76:e8:bd:e9:f0:75:95:77:f6: d7:2f:f2:8f:90:db:49:02:ad:6a:2b:6b:e6:39:ea: a1:71:0e:69:90:21:47:aa:0f:1e:04:1a:45:e5:25: ac:82:7a:db:48:de:c3:64:bb:71:28:1e:e0:67:56: e7:a6:01:56:98:10:f3:2a:0e:b8:da:b6:14:c2:33: 2d:aa:ff:47:fc:a7:2e:3e:88:e1:9d:0e:b9:3d:10: 2a:0f:bc:07:c1:f4:ff:f1:e1:61:7c:a5:64:90:a0: 7e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:93:44:B4:D1:0C:1A:29:A3:C1:15:C7:35:67:93:A2:F8:DA:D0:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/13685917-b747-38e7-b217-bfb35c42a823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:85:69:5f:b4:ec:59:ea:1d:db:80:fe:ae:30:82:d7:dc:6e: 57:af:fc:bd:a5:56:8e:74:00:f8:9d:d4:80:17:43:5c:c6:a0: cf:71:99:38:55:2d:9e:88:7d:ff:27:51:09:7d:c3:16:a7:41: a9:b2:4b:ec:2b:6d:e8:22:b9:cb:b7:f8:b4:4b:f3:48:b0:c0: 76:b7:29:c1:e3:73:d5:4e:f4:9e:46:1a:3d:18:92:17:c7:88: ea:2b:3a:aa:57:90:27:47:12:3d:d1:b2:d2:2c:b8:bd:db:07: f1:e9:07:95:23:25:e0:59:bd:90:ff:38:c7:ab:d6:be:d3:46: 7c:2a:33:d5:1d:c6:b3:e7:42:30:54:76:82:c8:b7:3e:b7:f0: e2:6c:1a:ac:2e:bf:92:36:6d:0e:d6:2b:77:14:c8:48:e2:28: 4a:64:78:58:ee:b0:c5:70:c9:a7:39:24:7e:d3:a8:ac:f5:9d: 59:56:5d:ee:77:bf:78:33:b4:7b:d4:4e:2c:da:ca:4c:f8:81: 19:d7:f7:7a:05:4e:2d:c6:46:6d:34:2c:3d:18:6d:46:6a:db: b0:c5:1e:70:84:c0:5d:71:5d:13:fe:52:27:84:ba:19:f2:bf: 60:20:d9:1d:05:d0:20:84:f0:3a:55:72:fc:93:46:3e:b4:7c: b7:12:25:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKeFSjhrDitksFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk ZmE0ZWY4OTMtMjY4OS00ZTBjLTg0MGEtZDE4Zjc1ZGRjMWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeXo689+C3g2oL0OGjvUJvisTHCfQVSS7kSb bhcgYiRQwVjOKKfFPSD5jgOnJD7EjBdshyacoplS5da7PwKo8V2KmBTQ4PZQnCus WnbJtNScEz8UA0viZHRZa2PnYQd6tvUG687p2WAu+EL/KdUdV0nMB7RKHdimA53L 5FZIPUls3V/uRc/r2zR99T9q1KUGFnRkR2fXRMQo3/d26L3p8HWVd/bXL/KPkNtJ Aq1qK2vmOeqhcQ5pkCFHqg8eBBpF5SWsgnrbSN7DZLtxKB7gZ1bnpgFWmBDzKg64 2rYUwjMtqv9H/KcuPojhnQ65PRAqD7wHwfT/8eFhfKVkkKB+bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyTRLTRDBopo8EVxzVnk6L42tBJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTM2ODU5MTctYjc0Ny0z OGU3LWIyMTctYmZiMzVjNDJhODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyFaV+07FnqHduA/q4wgtfcblev/L2lVo50APid1IAXQ1zGoM9xmThV LZ6Iff8nUQl9wxanQamyS+wrbegiucu3+LRL80iwwHa3KcHjc9VO9J5GGj0YkhfH iOorOqpXkCdHEj3RstIsuL3bB/HpB5UjJeBZvZD/OMer1r7TRnwqM9UdxrPnQjBU doLItz638OJsGqwuv5I2bQ7WK3cUyEjiKEpkeFjusMVwyac5JH7TqKz1nVlWXe53 v3gztHvUTizaykz4gRnX93oFTi3GRm00LD0YbUZq27DFHnCEwF1xXRP+UieEuhny v2Ag2R0F0CCE8DpVcvyTRj60fLcSJRs= -----END CERTIFICATE-----Generated at Tue Jul 21 21:09:17 2026 by rpki-client