$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/193b4617-c040-35e0-ad01-80a5e562b1ae.roa File: 193b4617-c040-35e0-ad01-80a5e562b1ae.roa (raw, json) Hash identifier: uihQ4D3lsDewqWbCtcZWChuP/Umjr7R2B/KEEzMCRKY= Subject key identifier: 35:6D:76:86:75:0E:E2:59:71:EC:7F:7F:31:6D:82:EE:11:F5:81:5D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E7BCA31AC045162FA6E403F00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/193b4617-c040-35e0-ad01-80a5e562b1ae.roa Signing time: Mon 13 Jul 2026 09:00:12 +0000 ROA not before: Mon 13 Jul 2026 09:00:12 +0000 ROA not after: Sun 11 Oct 2026 09:00:12 +0000 asID: 8069 IP address blocks: 20.33.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7b:ca:31:ac:04:51:62:fa:6e:40:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 13 09:00:12 2026 GMT Not After : Oct 11 09:00:12 2026 GMT Subject: CN=fc6d71f5-baf5-4453-87dd-f5ad9676504f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:74:20:bb:3a:24:c7:a0:40:7a:3c:0d:b4:02: 8e:aa:a5:a8:60:4e:c2:f3:ab:21:1f:3d:66:13:d0: a2:dc:95:54:35:7e:c1:e7:47:c3:08:0c:03:04:89: 4f:81:35:5b:d4:a6:d4:dc:a1:20:0d:79:17:8a:43: c4:87:92:b3:08:bf:15:a9:9d:66:31:4d:6e:93:c4: 6a:39:2c:1c:53:a3:9e:12:61:3b:88:98:31:65:d1: b2:04:0d:1f:23:b9:66:b9:ab:6f:55:5c:a8:f4:03: fe:a8:82:43:ec:20:5d:1d:22:86:cb:4a:ae:97:f8: db:c3:87:73:b1:7c:de:9c:20:71:8e:48:0a:b5:51: 39:82:6f:d4:af:89:76:1d:a3:48:d4:b2:1b:e9:44: e6:01:44:df:1b:0b:38:27:6f:37:e7:a2:d2:bb:87: 41:6c:d7:03:6e:4b:25:06:58:45:17:89:e7:6e:77: 02:ef:74:ab:a1:ef:f0:6e:d1:aa:1c:71:f0:36:98: df:08:12:31:fa:5a:b3:08:7b:6e:e1:f2:49:4a:f2: 88:e0:45:0f:20:9d:a4:0f:29:09:05:8b:1d:64:91: bc:e3:d2:09:cc:5e:b5:74:cd:63:06:d2:ca:1d:7d: 2c:b3:a7:c4:fb:00:38:44:2c:5d:95:8f:64:49:64: 41:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6D:76:86:75:0E:E2:59:71:EC:7F:7F:31:6D:82:EE:11:F5:81:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/193b4617-c040-35e0-ad01-80a5e562b1ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:31:1d:62:4d:6d:64:18:dc:b9:f3:e1:4a:9a:da:14:40:de: 0c:3e:90:8e:ba:b3:ac:27:33:49:17:e0:25:7e:6d:99:57:b2: 22:8b:4d:34:21:eb:5d:88:4b:e2:14:01:c2:9a:3c:a7:4e:9a: ab:ae:08:d0:23:f1:39:a6:71:6c:82:77:03:d4:11:66:43:3b: ed:ac:b2:9f:1c:03:72:12:6d:6e:c7:1f:d5:0e:0e:7e:21:00: 0a:a1:1d:5c:57:98:72:91:a5:79:0c:73:d3:ab:91:0f:16:65: cd:65:c0:ee:ad:fc:88:74:19:74:97:b3:0c:a6:7d:2c:d7:df: 00:a1:0c:9d:a0:c0:8e:4e:33:55:88:f7:a6:de:41:26:8f:b5: 27:9c:4b:a6:9f:20:5d:40:61:80:f7:b1:27:b4:f1:bb:ce:f0: a8:fa:1d:7f:ed:58:02:c6:28:36:cc:64:1f:15:7f:e0:71:58: 17:3b:ac:73:11:28:8b:c8:fc:19:e9:84:a5:aa:bd:b6:78:dd: ea:06:58:b2:47:a4:2e:7d:f3:26:47:7e:e2:35:e5:aa:41:77: 62:a7:d4:05:ed:b1:bc:68:d7:4e:ec:39:e7:bb:d2:96:27:d2: b3:96:a4:b9:52:f2:9a:7d:09:aa:b5:ff:ec:11:3c:b2:2f:5d: 3d:87:19:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE57yjGsBFFi+m5APwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxMzA5MDAxMloXDTI2MTAxMTA5MDAxMlowLzEtMCsGA1UEAxMk ZmM2ZDcxZjUtYmFmNS00NDUzLTg3ZGQtZjVhZDk2NzY1MDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXQguzokx6BAejwNtAKOqqWoYE7C86shHz1m E9Ci3JVUNX7B50fDCAwDBIlPgTVb1KbU3KEgDXkXikPEh5KzCL8VqZ1mMU1uk8Rq OSwcU6OeEmE7iJgxZdGyBA0fI7lmuatvVVyo9AP+qIJD7CBdHSKGy0qul/jbw4dz sXzenCBxjkgKtVE5gm/Ur4l2HaNI1LIb6UTmAUTfGws4J28356LSu4dBbNcDbksl BlhFF4nnbncC73Sroe/wbtGqHHHwNpjfCBIx+lqzCHtu4fJJSvKI4EUPIJ2kDykJ BYsdZJG849IJzF61dM1jBtLKHX0ss6fE+wA4RCxdlY9kSWRBgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVtdoZ1DuJZcex/fzFtgu4R9YFdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTkzYjQ2MTctYzA0MC0z NWUwLWFkMDEtODBhNWU1NjJiMWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKoxHWJNbWQY3Lnz4Uqa2hRA3gw+kI66s6wnM0kX4CV+bZlXsiKLTTQh 612IS+IUAcKaPKdOmquuCNAj8TmmcWyCdwPUEWZDO+2ssp8cA3ISbW7HH9UODn4h AAqhHVxXmHKRpXkMc9OrkQ8WZc1lwO6t/Ih0GXSXswymfSzX3wChDJ2gwI5OM1WI 96beQSaPtSecS6afIF1AYYD3sSe08bvO8Kj6HX/tWALGKDbMZB8Vf+BxWBc7rHMR KIvI/BnphKWqvbZ43eoGWLJHpC598yZHfuI15apBd2Kn1AXtsbxo107sOee70pYn 0rOWpLlS8pp9Caq1/+wRPLIvXT2HGdU= -----END CERTIFICATE-----Generated at Tue Jul 21 21:08:06 2026 by rpki-client