$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14bac7c1-ebe0-340e-83ed-d325f5e09ad1.roa File: 14bac7c1-ebe0-340e-83ed-d325f5e09ad1.roa (raw, json) Hash identifier: 8HPQqE69pM4Gr5FWNPlM4B5YOQlj+v+LthAwsaphr7M= Subject key identifier: E0:CC:81:34:DB:FD:0D:8C:E8:92:4D:73:F6:1D:10:81:C6:E2:56:27 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E86F506064F7767BFAF3BDF40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14bac7c1-ebe0-340e-83ed-d325f5e09ad1.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 8069 IP address blocks: 20.33.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f5:06:06:4f:77:67:bf:af:3b:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=88867b87-dfb6-42e7-b949-ceee6246fdfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:99:2e:ee:3a:be:d3:f4:48:73:96:6d:01:06: fe:54:4a:1f:f5:65:c3:68:de:82:a3:46:f7:1a:de: 05:8b:d1:61:0a:22:4a:15:8a:4f:6a:ab:79:af:eb: 27:e2:4e:0c:56:33:6f:23:78:fd:59:05:b4:6f:e7: 0a:01:ec:50:d5:59:12:b5:d7:ff:98:cd:3b:0c:c3: 60:63:bf:25:0b:3a:d1:e9:b6:57:e6:69:19:bb:a5: 8e:ff:ab:a0:fc:b2:b6:44:76:82:ef:36:42:3a:dd: 60:6a:3a:df:93:5c:7e:d3:ed:e7:c2:80:40:f0:a5: 75:71:ef:21:cb:9a:81:1b:39:e4:ff:ee:ec:a0:64: c3:e4:11:7e:23:5e:3d:91:b3:54:a6:53:00:0d:f7: c8:c1:04:f2:af:9b:9b:fc:8d:fc:c3:c2:dd:ed:e9: cc:89:bc:29:60:23:1f:4f:b1:9c:c9:cc:6d:b3:9e: b2:34:c7:06:92:9f:1d:4c:df:4f:e5:6e:33:cb:8b: af:63:99:1f:70:7d:c1:f7:a3:18:14:23:3e:e7:1f: 31:84:22:7c:6c:31:cf:01:18:28:60:41:d5:56:f1: 9c:8d:96:c3:db:c2:01:52:cc:e6:df:97:6b:92:34: 34:4a:37:30:68:d9:f9:23:34:a0:f0:d1:18:12:76: e5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:CC:81:34:DB:FD:0D:8C:E8:92:4D:73:F6:1D:10:81:C6:E2:56:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14bac7c1-ebe0-340e-83ed-d325f5e09ad1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:04:b7:a3:b5:ee:c7:40:8f:1b:a6:67:84:15:2b:83:c7:90: 84:dd:5e:70:27:12:96:04:61:d8:0b:f6:4b:df:82:b5:94:25: 0b:ad:e4:92:65:ce:a2:7a:58:54:8d:3f:b3:d6:1b:cd:d9:60: 8e:5c:ae:bf:bc:31:6c:8d:42:8a:9e:9a:98:e1:a2:a5:37:1f: 48:1a:fc:aa:ab:59:a0:e9:6a:06:b1:f5:ed:29:f5:95:80:a2: 8a:f9:fd:6f:6b:7f:36:d5:52:c1:1e:51:4e:6a:46:1c:12:7f: 8f:5e:0e:bc:12:f3:ef:c3:6c:99:18:37:d8:a6:b6:4f:ee:35: af:af:0d:2f:1e:d1:b0:c4:e4:8b:20:a5:5d:c5:74:ad:bb:5c: cd:32:49:ae:5e:a3:38:f5:93:db:c1:4b:88:2d:af:e0:46:99: 5a:cd:da:71:13:1f:50:e5:b7:20:81:8d:a9:33:f4:59:12:0c: 96:3e:24:8a:da:46:9e:f4:bd:c8:c8:08:94:1e:ac:4a:c1:9c: e1:12:42:bf:9d:42:13:8f:de:ce:3b:d1:0b:7e:20:9e:24:d3: 4e:56:5a:16:40:93:ce:d2:d0:58:96:c6:13:4e:56:47:de:fd: e4:51:f9:81:f9:9c:00:c7:39:63:ea:67:92:83:63:73:6f:5c: a0:a0:8e:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9QYGT3dnv68730AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk ODg4NjdiODctZGZiNi00MmU3LWI5NDktY2VlZTYyNDZmZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5ku7jq+0/RIc5ZtAQb+VEof9WXDaN6Co0b3 Gt4Fi9FhCiJKFYpPaqt5r+sn4k4MVjNvI3j9WQW0b+cKAexQ1VkStdf/mM07DMNg Y78lCzrR6bZX5mkZu6WO/6ug/LK2RHaC7zZCOt1gajrfk1x+0+3nwoBA8KV1ce8h y5qBGznk/+7soGTD5BF+I149kbNUplMADffIwQTyr5ub/I38w8Ld7enMibwpYCMf T7Gcycxts56yNMcGkp8dTN9P5W4zy4uvY5kfcH3B96MYFCM+5x8xhCJ8bDHPARgo YEHVVvGcjZbD28IBUszm35drkjQ0SjcwaNn5IzSg8NEYEnbltwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODMgTTb/Q2M6JJNc/YdEIHG4lYnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTRiYWM3YzEtZWJlMC0z NDBlLTgzZWQtZDMyNWY1ZTA5YWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUEt6O17sdAjxumZ4QVK4PHkITdXnAnEpYEYdgL9kvfgrWUJQut5JJl zqJ6WFSNP7PWG83ZYI5crr+8MWyNQoqempjhoqU3H0ga/KqrWaDpagax9e0p9ZWA oor5/W9rfzbVUsEeUU5qRhwSf49eDrwS8+/DbJkYN9imtk/uNa+vDS8e0bDE5Isg pV3FdK27XM0ySa5eozj1k9vBS4gtr+BGmVrN2nETH1DltyCBjakz9FkSDJY+JIra Rp70vcjICJQerErBnOESQr+dQhOP3s470Qt+IJ4k005WWhZAk87S0FiWxhNOVkfe /eRR+YH5nADHOWPqZ5KDY3NvXKCgjs8= -----END CERTIFICATE-----Generated at Tue Jul 21 21:06:07 2026 by rpki-client