$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1fbba74b-58c0-3e62-9456-346889ccb84d.roa File: 1fbba74b-58c0-3e62-9456-346889ccb84d.roa (raw, json) Hash identifier: x8SNmB1naTgmkS8E+QGjWbczH9aGVvmnJugu3ljRxe8= Subject key identifier: BD:1F:6A:B2:12:F9:C8:A1:96:F2:0C:6D:B5:0B:FF:E5:F0:F3:09:04 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E8DEFAE8FF077577196534A80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1fbba74b-58c0-3e62-9456-346889ccb84d.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.33.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:ae:8f:f0:77:57:71:96:53:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=354964c5-a80f-4e77-b511-43daf1bd33cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f6:65:ae:3c:02:f4:3c:16:8d:57:4a:5c:44: 44:d4:b4:3f:fd:84:61:0a:7b:4b:a3:ca:66:97:18: 32:d1:3d:0c:2f:34:18:1f:ae:63:65:c5:f7:d7:dc: 38:24:87:c5:24:57:72:1c:26:24:4b:4c:ce:53:94: 5a:af:09:32:39:20:f5:f9:cb:ab:45:04:8c:ef:fe: b3:6a:77:2d:59:31:72:89:a9:37:ee:6a:0b:c7:ec: cf:43:58:60:0e:9e:5e:c2:5b:f4:eb:31:af:84:56: 6d:52:83:0e:69:73:1a:15:81:a2:11:dc:8b:3a:61: b0:62:62:0a:2e:b9:03:f1:c2:e3:4b:ac:bc:af:b6: a0:fd:f7:35:c9:ea:48:72:0e:bc:27:ab:a3:18:fb: dc:68:38:3d:48:c1:99:76:05:04:62:da:94:38:92: d1:39:39:e1:fb:3e:79:4c:27:83:f6:4b:10:16:d0: 62:d9:b3:bc:19:da:f0:47:26:fe:10:25:30:b8:23: 77:1e:45:3e:1f:1d:df:50:c1:bd:22:b7:be:32:9a: 9f:99:e3:a6:fc:52:90:8a:65:e7:4e:0f:d2:ca:69: 46:7f:6a:2f:47:32:fb:c4:84:47:95:c4:95:18:ea: a7:33:03:c7:88:3d:26:e1:ed:88:72:60:d9:e0:ba: 38:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1F:6A:B2:12:F9:C8:A1:96:F2:0C:6D:B5:0B:FF:E5:F0:F3:09:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1fbba74b-58c0-3e62-9456-346889ccb84d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:ad:7d:c4:0f:e2:2d:00:6a:9a:de:be:c6:6b:87:e1:30:53: 68:79:55:32:e1:7f:6f:46:ed:e5:99:2e:52:54:08:e0:a5:82: 8e:53:dc:21:4c:b3:59:ed:e3:6f:16:fd:8d:e3:71:93:20:c3: 64:80:17:3b:87:1b:17:0c:5b:d0:0b:62:ae:52:1e:16:fc:69: e4:22:3c:51:97:2b:31:22:24:40:3d:39:01:84:e8:40:6b:ec: 3d:ba:ec:24:1d:6b:17:56:8d:dd:32:67:b8:fe:d1:f0:cd:2b: 29:02:1e:9d:e3:e7:a4:59:b7:bc:de:b0:e7:d9:a5:dd:ad:ab: 9e:04:63:34:15:c7:2b:3c:03:b4:17:ba:2e:c9:75:f3:0a:d5: 7d:08:2c:bf:d2:fa:91:76:18:fe:8f:77:36:38:05:7c:b2:62: b4:8b:1f:99:6b:7f:24:db:eb:0e:d5:4f:6a:75:90:c6:c8:4e: 40:42:3a:d3:c7:cb:9e:8b:42:6b:29:d9:a3:6e:bf:de:29:b2: d5:c1:c9:f8:4d:13:c6:a4:a6:88:be:4d:4d:99:f2:4e:aa:ab: ab:25:53:3c:32:dd:1e:04:07:59:f0:41:d2:e8:bb:b3:0b:f7: 79:a7:33:7e:78:95:09:61:ab:ab:7e:7b:9b:70:59:77:7e:c7: 2d:87:27:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N766P8HdXcZZTSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk MzU0OTY0YzUtYTgwZi00ZTc3LWI1MTEtNDNkYWYxYmQzM2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufZlrjwC9DwWjVdKXERE1LQ//YRhCntLo8pm lxgy0T0MLzQYH65jZcX319w4JIfFJFdyHCYkS0zOU5RarwkyOSD1+curRQSM7/6z anctWTFyiak37moLx+zPQ1hgDp5ewlv06zGvhFZtUoMOaXMaFYGiEdyLOmGwYmIK LrkD8cLjS6y8r7ag/fc1yepIcg68J6ujGPvcaDg9SMGZdgUEYtqUOJLROTnh+z55 TCeD9ksQFtBi2bO8GdrwRyb+ECUwuCN3HkU+Hx3fUMG9Ire+MpqfmeOm/FKQimXn Tg/SymlGf2ovRzL7xIRHlcSVGOqnMwPHiD0m4e2IcmDZ4Lo4lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0farIS+cihlvIMbbUL/+Xw8wkEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMWZiYmE3NGItNThjMC0z ZTYyLTk0NTYtMzQ2ODg5Y2NiODRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmtfcQP4i0AaprevsZrh+EwU2h5VTLhf29G7eWZLlJUCOClgo5T3CFM s1nt428W/Y3jcZMgw2SAFzuHGxcMW9ALYq5SHhb8aeQiPFGXKzEiJEA9OQGE6EBr 7D267CQdaxdWjd0yZ7j+0fDNKykCHp3j56RZt7zesOfZpd2tq54EYzQVxys8A7QX ui7JdfMK1X0ILL/S+pF2GP6PdzY4BXyyYrSLH5lrfyTb6w7VT2p1kMbITkBCOtPH y56LQmsp2aNuv94pstXByfhNE8akpoi+TU2Z8k6qq6slUzwy3R4EB1nwQdLou7ML 93mnM354lQlhq6t+e5twWXd+xy2HJ+M= -----END CERTIFICATE-----Generated at Tue Jul 21 21:07:59 2026 by rpki-client