$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28828403-ac9c-38f9-8aa3-540107e65b98.roa File: 28828403-ac9c-38f9-8aa3-540107e65b98.roa (raw, json) Hash identifier: e4QAF9M7ep/yBkcJg1dzcu4t9g4Z+XbyLzoR64d6xeU= Subject key identifier: 45:43:60:D9:F4:B4:A0:22:08:23:A1:2B:66:88:F8:D9:54:CB:51:0C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E779A2950D2FDBFDA0C7FA200 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28828403-ac9c-38f9-8aa3-540107e65b98.roa Signing time: Sat 11 Jul 2026 21:00:11 +0000 ROA not before: Sat 11 Jul 2026 21:00:11 +0000 ROA not after: Fri 09 Oct 2026 21:00:11 +0000 asID: 8069 IP address blocks: 20.153.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:77:9a:29:50:d2:fd:bf:da:0c:7f:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 11 21:00:11 2026 GMT Not After : Oct 9 21:00:11 2026 GMT Subject: CN=04dc13e0-92ca-4aaf-a0c9-be5ef6c968b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fe:20:00:ff:9e:f0:20:f0:48:6b:b0:3e:08: 35:2a:76:b6:8a:22:ba:9b:fe:38:26:42:b9:7b:56: 0b:c0:df:73:84:6e:a4:44:24:93:b9:c9:f7:12:41: ee:d0:99:ae:9c:af:4b:68:c5:be:b7:d6:02:33:a3: 8d:50:a2:0a:2d:0b:33:ba:f3:d2:40:02:5a:31:a8: 9b:cd:8f:62:b4:41:a5:6a:c3:88:ef:d2:ec:2f:3d: 9a:35:1d:c4:f9:db:43:c9:e5:13:74:e0:cd:87:5e: f3:7a:4d:41:36:45:1b:5a:3f:a0:b2:67:cd:20:bf: ff:3e:1a:b1:65:12:1f:21:b7:32:a7:e7:0e:f9:e8: 84:cb:d0:25:08:ab:03:a0:4b:ce:59:c5:d9:e3:4c: 42:6d:ec:a3:f1:42:a3:93:57:71:90:f4:27:a7:c3: 27:dc:22:a5:42:1e:b2:da:79:9a:55:e8:8d:46:45: 67:20:e6:5a:f0:08:d4:18:53:a4:da:0c:eb:70:94: a1:c9:0c:a7:a5:bf:41:66:9b:a4:f1:d3:82:40:39: 1a:d7:33:6e:6f:62:e7:77:06:eb:20:53:6b:d2:52: 4c:fd:66:91:ae:c6:bf:c5:d2:bb:a5:2f:6c:2b:08: ea:50:21:ac:90:7f:f7:be:d3:98:af:a5:d5:bd:7c: f5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:43:60:D9:F4:B4:A0:22:08:23:A1:2B:66:88:F8:D9:54:CB:51:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28828403-ac9c-38f9-8aa3-540107e65b98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:a4:c3:c8:f4:a0:db:ea:46:e3:f3:8c:8d:98:81:65:16:f6: a8:23:30:f4:2f:c2:2d:5f:e7:bc:ef:79:7a:09:35:34:56:c3: 45:15:f6:b2:4d:4d:de:7c:1f:bd:a0:6f:57:f9:95:27:36:f5: 89:90:29:e8:59:3a:e2:c4:eb:c7:17:97:13:7b:c3:bb:32:00: b0:e1:50:67:c2:a3:bf:4d:eb:47:37:27:8a:4d:af:4c:01:e1: 3e:7d:09:19:5a:32:67:95:a5:de:3d:e0:e9:09:19:0b:ea:eb: 24:80:c5:40:f1:2c:6f:e9:3b:d8:aa:d1:e1:88:c4:1c:57:d4: d5:20:2a:38:95:c3:94:05:ab:d9:ef:95:29:97:fa:6b:f4:a5: 08:4e:9a:11:8b:6b:6e:3f:bb:6b:51:58:64:dc:ab:2e:b8:fa: 48:cf:15:bb:dc:69:ec:c6:f9:27:07:09:3c:d9:e1:be:28:92: 4f:22:ac:9e:0b:41:7c:08:64:b6:16:f9:bc:bf:fe:2c:f9:4e: ca:77:d1:a1:47:88:3e:51:22:f1:4f:34:34:bc:20:59:55:3e: 40:13:ca:d2:45:1c:d1:14:a1:16:ee:3f:20:07:26:75:be:05: 1f:d6:3e:90:b7:ac:c6:59:21:41:80:3a:5a:e7:fa:20:61:09: bf:61:61:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE53milQ0v2/2gx/ogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk MDRkYzEzZTAtOTJjYS00YWFmLWEwYzktYmU1ZWY2Yzk2OGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/4gAP+e8CDwSGuwPgg1Kna2iiK6m/44JkK5 e1YLwN9zhG6kRCSTucn3EkHu0JmunK9LaMW+t9YCM6ONUKIKLQszuvPSQAJaMaib zY9itEGlasOI79LsLz2aNR3E+dtDyeUTdODNh17zek1BNkUbWj+gsmfNIL//Phqx ZRIfIbcyp+cO+eiEy9AlCKsDoEvOWcXZ40xCbeyj8UKjk1dxkPQnp8Mn3CKlQh6y 2nmaVeiNRkVnIOZa8AjUGFOk2gzrcJShyQynpb9BZpuk8dOCQDka1zNub2Lndwbr IFNr0lJM/WaRrsa/xdK7pS9sKwjqUCGskH/3vtOYr6XVvXz1NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVDYNn0tKAiCCOhK2aI+NlUy1EMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjg4Mjg0MDMtYWM5Yy0z OGY5LThhYTMtNTQwMTA3ZTY1Yjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqkw8j0oNvqRuPzjI2YgWUW9qgjMPQvwi1f57zveXoJNTRWw0UV9rJN Td58H72gb1f5lSc29YmQKehZOuLE68cXlxN7w7syALDhUGfCo79N60c3J4pNr0wB 4T59CRlaMmeVpd494OkJGQvq6ySAxUDxLG/pO9iq0eGIxBxX1NUgKjiVw5QFq9nv lSmX+mv0pQhOmhGLa24/u2tRWGTcqy64+kjPFbvcaezG+ScHCTzZ4b4okk8irJ4L QXwIZLYW+by//iz5Tsp30aFHiD5RIvFPNDS8IFlVPkATytJFHNEUoRbuPyAHJnW+ BR/WPpC3rMZZIUGAOlrn+iBhCb9hYVg= -----END CERTIFICATE-----Generated at Tue Jul 21 21:09:16 2026 by rpki-client