$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14a380d8-92fd-3622-b799-436fce5ea07c.roa File: 14a380d8-92fd-3622-b799-436fce5ea07c.roa (raw, json) Hash identifier: QUcF5tpCel3mNvkQKVl7YhBX7u+kdNjNxcn5TQmkhWg= Subject key identifier: BF:3D:A3:7F:DB:E3:EA:5A:2C:1B:45:E1:F6:BE:CD:60:27:25:24:31 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E86F504B37B0C8C1E7A532400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14a380d8-92fd-3622-b799-436fce5ea07c.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 8069 IP address blocks: 20.33.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f5:04:b3:7b:0c:8c:1e:7a:53:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=9a793216-f125-4ef6-94f8-e388e6e57c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c0:ae:0c:f6:4b:09:2c:cf:17:08:93:3b:b8: e8:4f:9c:d5:06:41:36:9c:53:c2:b7:ee:51:14:48: c5:31:9f:16:c9:2c:de:71:55:4f:7e:ab:c0:65:7c: 95:70:d6:cc:8c:dd:44:90:75:1b:31:a8:86:7b:fc: 22:bf:ec:a0:88:d4:b3:e3:1f:96:96:37:35:0f:55: 2d:19:ee:6f:8e:ba:b4:b0:42:d7:5c:88:14:d6:2b: 94:5b:a4:b8:89:d1:81:81:8b:f5:21:1c:b5:9a:2d: 3c:03:53:d9:98:27:57:b7:4c:80:2a:74:65:1b:2b: 5f:60:20:a6:87:79:57:bf:57:29:82:d1:89:5a:a7: 59:45:04:08:46:5d:fd:fe:1d:e9:42:17:65:cb:b7: 07:c1:f3:29:c0:96:d0:8a:60:d4:fb:b8:26:7e:82: a5:ca:c3:4c:23:32:e0:ca:22:c2:08:62:92:53:79: 9e:41:3f:25:f9:f5:4e:43:f1:ae:a9:f0:49:26:43: 8b:54:f8:ce:da:0d:df:61:d7:ab:fa:ec:ba:80:58: 79:7c:18:8a:d4:e6:69:b1:3a:fe:d7:9b:91:0f:53: 2f:58:cd:ea:3f:ae:cf:d0:f2:34:f4:da:a9:5d:53: ff:b6:51:3a:99:5a:d2:d3:db:04:20:ee:bf:60:e8: 85:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:3D:A3:7F:DB:E3:EA:5A:2C:1B:45:E1:F6:BE:CD:60:27:25:24:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14a380d8-92fd-3622-b799-436fce5ea07c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:17:61:0b:ed:05:10:e0:48:d1:44:72:98:f6:22:6a:31:29: 35:ae:60:4b:34:37:45:c8:9b:e8:fb:1d:e6:67:52:9d:4d:d0: a4:7a:42:5c:82:c3:18:d8:27:fa:3b:5d:22:86:8d:fb:ac:1d: d8:88:d9:c9:1a:d8:b9:f0:b5:78:65:04:82:5c:e0:70:46:d6: 90:fc:19:e8:38:36:d5:f2:0e:cc:3c:f7:3d:2a:fd:5a:84:b9: 86:6f:10:07:77:dc:7d:e6:5a:73:a0:7d:40:4a:95:ef:ae:21: e7:5e:69:cb:e6:ed:c8:69:2b:e6:a9:a4:78:cb:b8:81:c8:4c: 58:04:da:b6:98:0e:2d:2a:ef:85:8a:ba:c5:8b:b3:e1:3e:c5: 67:80:b0:23:b0:ac:08:ff:07:89:f0:18:c7:c4:91:ca:88:63: 79:1f:33:a7:9d:0b:6d:6d:22:b7:14:53:f5:a5:1f:61:3b:ce: ea:a6:09:b4:55:d6:ce:6d:e9:2b:8c:18:0a:19:47:c2:8e:f9: ee:cb:d1:85:a5:3a:6d:55:a1:35:1d:28:33:fc:88:9f:4e:3e: 10:1a:e6:89:1e:8d:db:38:e4:e7:d6:05:96:a6:e4:f8:42:e2: f7:6a:a8:97:34:61:b0:89:f1:be:c2:68:49:89:23:05:fd:fb: ac:12:2f:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9QSzewyMHnpTJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk OWE3OTMyMTYtZjEyNS00ZWY2LTk0ZjgtZTM4OGU2ZTU3YzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8CuDPZLCSzPFwiTO7joT5zVBkE2nFPCt+5R FEjFMZ8WySzecVVPfqvAZXyVcNbMjN1EkHUbMaiGe/wiv+ygiNSz4x+Wljc1D1Ut Ge5vjrq0sELXXIgU1iuUW6S4idGBgYv1IRy1mi08A1PZmCdXt0yAKnRlGytfYCCm h3lXv1cpgtGJWqdZRQQIRl39/h3pQhdly7cHwfMpwJbQimDU+7gmfoKlysNMIzLg yiLCCGKSU3meQT8l+fVOQ/GuqfBJJkOLVPjO2g3fYder+uy6gFh5fBiK1OZpsTr+ 15uRD1MvWM3qP67P0PI09NqpXVP/tlE6mVrS09sEIO6/YOiFZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL89o3/b4+paLBtF4fa+zWAnJSQxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTRhMzgwZDgtOTJmZC0z NjIyLWI3OTktNDM2ZmNlNWVhMDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMXYQvtBRDgSNFEcpj2ImoxKTWuYEs0N0XIm+j7HeZnUp1N0KR6QlyC wxjYJ/o7XSKGjfusHdiI2cka2LnwtXhlBIJc4HBG1pD8Geg4NtXyDsw89z0q/VqE uYZvEAd33H3mWnOgfUBKle+uIedeacvm7chpK+appHjLuIHITFgE2raYDi0q74WK usWLs+E+xWeAsCOwrAj/B4nwGMfEkcqIY3kfM6edC21tIrcUU/WlH2E7zuqmCbRV 1s5t6SuMGAoZR8KO+e7L0YWlOm1VoTUdKDP8iJ9OPhAa5okejds45OfWBZam5PhC 4vdqqJc0YbCJ8b7CaEmJIwX9+6wSLxc= -----END CERTIFICATE-----Generated at Tue Jul 21 21:08:06 2026 by rpki-client