$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28ce3fe1-8f0d-36ad-91a1-188a0656d0a0.roa File: 28ce3fe1-8f0d-36ad-91a1-188a0656d0a0.roa (raw, json) Hash identifier: Rg0tpm5MWYo54n5kRKTytcvD5XMKwkxBfjIGH3nDS9k= Subject key identifier: 94:72:84:75:A8:85:C4:39:2B:3E:D9:F5:B2:83:98:F9:BF:C0:12:FF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E885A4F3A500A3D6B0D1966A0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28ce3fe1-8f0d-36ad-91a1-188a0656d0a0.roa Signing time: Fri 17 Jul 2026 21:00:12 +0000 ROA not before: Fri 17 Jul 2026 21:00:12 +0000 ROA not after: Thu 15 Oct 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.33.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:88:5a:4f:3a:50:0a:3d:6b:0d:19:66:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 17 21:00:12 2026 GMT Not After : Oct 15 21:00:12 2026 GMT Subject: CN=d880d5fb-6f6f-4659-a272-0e69d2797659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d4:ac:26:f6:36:78:2f:45:de:80:7a:1f:cf: c7:f2:0e:05:6a:ba:4e:c1:6a:59:7a:d8:49:6a:8f: ec:ae:02:31:d9:dd:f8:e5:6c:7d:96:37:00:14:51: 79:de:87:45:82:08:ac:04:c1:13:30:89:f4:e5:87: 9d:3e:21:ef:ba:e5:a8:ea:c8:28:03:ba:8c:1f:08: 12:a1:e2:9a:0d:9e:ad:7a:45:96:6c:34:23:f4:61: 37:0f:da:75:21:9e:c9:1b:88:52:2e:e3:e9:2e:20: c9:c7:fd:8b:0d:fc:0a:1a:f8:fb:ca:be:3c:ee:f7: 3f:c4:56:41:70:20:d0:fd:95:65:2c:ca:cc:52:1f: 31:3e:4e:b9:c2:b1:3c:bc:bc:a3:c3:99:03:0d:6a: c7:21:94:b5:28:39:91:b6:67:2f:5f:5e:0b:1d:2b: 2e:ee:dd:5e:c2:04:fd:e4:dc:ce:d7:bc:0e:39:79: c3:02:5c:ba:48:18:db:d4:76:2e:6d:d5:48:20:ac: fb:2e:92:7e:38:af:7b:33:d7:1c:d9:66:8e:57:94: 57:17:83:da:d5:a4:24:ed:5c:bb:77:b6:6e:d0:df: 21:a4:db:5a:0f:10:d1:29:ad:64:e1:6a:b0:8b:71: 0d:a9:01:32:aa:68:f7:6b:ec:34:d7:df:70:43:5a: 6d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:72:84:75:A8:85:C4:39:2B:3E:D9:F5:B2:83:98:F9:BF:C0:12:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28ce3fe1-8f0d-36ad-91a1-188a0656d0a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:3d:93:ab:0b:93:4d:1c:a7:1d:8e:73:bf:d2:77:ca:01:15: 1b:57:07:95:53:36:37:f2:98:e3:bf:1a:77:d0:25:bc:a5:e7: f7:0a:5a:0a:db:d4:76:5c:72:a4:6f:f9:8f:36:9c:6f:f2:24: 74:5f:13:1b:b3:35:3c:63:da:cd:b5:dd:68:ac:b2:d6:31:a6: 62:8d:a7:67:bf:55:d1:b3:dc:a9:60:d0:75:af:90:d9:b5:42: f9:91:56:ca:21:7c:1e:6e:b3:e3:d9:d4:2d:e4:bf:a8:fb:23: 66:f5:bd:2c:d7:f9:76:04:2a:ee:d4:67:60:3f:af:66:e6:65: 64:ea:52:f7:f9:dd:33:b7:fa:bc:90:7b:69:29:b4:90:1a:2c: 06:ef:9d:c8:25:bc:00:aa:7e:a3:ae:4a:6d:70:be:23:24:ff: 91:86:e1:ee:1c:9e:d0:8f:7f:6b:3f:41:e5:91:8e:32:d5:a8: be:d4:f7:47:5a:5c:a9:83:ab:3c:f0:15:26:3e:86:b4:92:e9: e2:82:39:4c:41:a7:65:54:4c:e4:02:c2:c7:30:b7:ad:be:12: 95:54:56:3c:6e:a7:e2:b4:5c:7e:36:a1:49:d4:77:c9:22:6a: c4:ba:63:7a:90:a6:38:b1:50:5a:39:50:99:9e:d5:7d:f4:da: 5c:5d:28:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWk86UAo9aw0ZZqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk ZDg4MGQ1ZmItNmY2Zi00NjU5LWEyNzItMGU2OWQyNzk3NjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNSsJvY2eC9F3oB6H8/H8g4FarpOwWpZethJ ao/srgIx2d345Wx9ljcAFFF53odFggisBMETMIn05YedPiHvuuWo6sgoA7qMHwgS oeKaDZ6tekWWbDQj9GE3D9p1IZ7JG4hSLuPpLiDJx/2LDfwKGvj7yr487vc/xFZB cCDQ/ZVlLMrMUh8xPk65wrE8vLyjw5kDDWrHIZS1KDmRtmcvX14LHSsu7t1ewgT9 5NzO17wOOXnDAly6SBjb1HYubdVIIKz7LpJ+OK97M9cc2WaOV5RXF4Pa1aQk7Vy7 d7Zu0N8hpNtaDxDRKa1k4Wqwi3ENqQEyqmj3a+w0199wQ1ptbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRyhHWohcQ5Kz7Z9bKDmPm/wBL/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjhjZTNmZTEtOGYwZC0z NmFkLTkxYTEtMTg4YTA2NTZkMGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADw9k6sLk00cpx2Oc7/Sd8oBFRtXB5VTNjfymOO/GnfQJbyl5/cKWgrb 1HZccqRv+Y82nG/yJHRfExuzNTxj2s213WisstYxpmKNp2e/VdGz3Klg0HWvkNm1 QvmRVsohfB5us+PZ1C3kv6j7I2b1vSzX+XYEKu7UZ2A/r2bmZWTqUvf53TO3+ryQ e2kptJAaLAbvncglvACqfqOuSm1wviMk/5GG4e4cntCPf2s/QeWRjjLVqL7U90da XKmDqzzwFSY+hrSS6eKCOUxBp2VUTOQCwscwt62+EpVUVjxup+K0XH42oUnUd8ki asS6Y3qQpjixUFo5UJme1X302lxdKK4= -----END CERTIFICATE-----Generated at Tue Jul 21 21:07:19 2026 by rpki-client