$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/294e9347-de22-31e7-bfc5-75bd383b4a41.roa File: 294e9347-de22-31e7-bfc5-75bd383b4a41.roa (raw, json) Hash identifier: /9yGs7RY95i4RblpOgyDU9WTX4G4l/SG4hZLMmgu1qA= Subject key identifier: 18:59:F0:55:5C:C7:04:17:62:44:30:B2:0C:EA:94:7F:2D:38:16:B8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E7BCA316E2EC86165799DB5A0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/294e9347-de22-31e7-bfc5-75bd383b4a41.roa Signing time: Mon 13 Jul 2026 09:00:12 +0000 ROA not before: Mon 13 Jul 2026 09:00:12 +0000 ROA not after: Sun 11 Oct 2026 09:00:12 +0000 asID: 8069 IP address blocks: 20.33.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7b:ca:31:6e:2e:c8:61:65:79:9d:b5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 13 09:00:12 2026 GMT Not After : Oct 11 09:00:12 2026 GMT Subject: CN=b599ad47-e5ef-45a9-9b86-bee87d394288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:29:5b:cf:81:8b:ff:fb:25:da:a8:ac:06:f6: 38:d2:38:d2:15:58:20:42:4a:78:9c:be:6a:31:ff: c5:8e:e9:35:ab:d1:31:b3:7e:ec:e4:2b:23:0e:4a: 90:16:87:c0:46:42:62:25:0f:a0:79:c6:7f:17:c5: a2:8c:5d:f7:c7:2f:ad:f0:8f:c7:60:6c:b8:e5:d7: 68:90:18:6b:ca:53:7d:8f:0f:90:f4:66:19:fb:b0: 59:f5:0a:f0:1c:9a:c4:d2:60:fd:ca:ae:9f:55:9e: 35:e4:09:2a:79:ea:5e:10:0d:0e:93:f0:d7:40:d1: cd:3a:97:81:84:69:8a:1e:a7:eb:a8:97:b1:48:0f: 4b:13:54:45:55:23:48:d6:4b:50:8e:04:24:fa:00: ee:78:be:c8:e7:6b:ce:2c:e6:41:08:49:c9:61:7a: ba:ff:cd:ff:7a:3a:85:51:76:e2:2a:71:0a:fa:b3: e9:43:8b:39:d9:11:18:c2:69:1b:fd:39:cf:3c:51: e6:37:0a:24:57:fd:98:c3:06:db:86:e9:3f:08:c6: d0:b2:24:94:f4:38:e8:b2:15:03:a1:e2:d8:94:1f: b6:fa:27:5b:57:04:6d:8d:59:31:35:ac:19:b0:fc: 64:80:80:02:f8:93:f0:74:78:ab:03:4b:42:12:11: 6d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:59:F0:55:5C:C7:04:17:62:44:30:B2:0C:EA:94:7F:2D:38:16:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/294e9347-de22-31e7-bfc5-75bd383b4a41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:cd:64:38:41:2c:2b:d1:a4:4b:ed:c5:79:b1:a2:70:ae:dc: 86:93:27:83:ab:ac:30:c5:68:8d:38:cc:1e:7c:b0:c2:5f:e9: 58:08:36:36:92:6a:ea:9f:f6:a9:36:ad:b3:93:37:14:4e:8c: 69:3d:9d:48:9b:e8:c6:17:e2:0e:91:60:97:1e:d4:ae:58:a8: e7:b7:33:d4:b7:fa:31:f5:52:34:71:f8:24:4a:98:20:80:b0: 07:23:c5:32:47:d8:99:a8:ad:fc:38:af:ad:d0:a5:4f:c2:77: ab:69:9e:98:e7:55:01:73:f9:1a:51:05:ef:49:e8:ca:d9:a7: eb:65:f9:03:7a:45:fe:59:d0:26:62:d4:8c:20:ea:43:8c:bd: f7:34:cc:04:ca:bf:ba:d2:fa:0e:47:b8:a4:85:b2:c5:9c:12: e4:bd:80:b3:3b:82:af:59:40:49:5c:96:d6:02:3f:80:0e:b2: 7a:de:6d:95:a9:f7:5d:26:f4:46:e1:47:46:f0:2e:a6:f8:c3: d1:27:00:f4:f0:cf:01:78:5d:b1:5e:a1:90:53:3b:0b:73:8b: d6:45:a7:5b:b0:b4:0d:35:5d:e2:32:5f:75:83:aa:a3:a6:33: 24:03:f9:29:a6:af:c1:bd:89:14:2e:4d:3d:1a:bf:e7:e1:f6: 0e:c4:40:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE57yjFuLshhZXmdtaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxMzA5MDAxMloXDTI2MTAxMTA5MDAxMlowLzEtMCsGA1UEAxMk YjU5OWFkNDctZTVlZi00NWE5LTliODYtYmVlODdkMzk0Mjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApilbz4GL//sl2qisBvY40jjSFVggQkp4nL5q Mf/Fjuk1q9Exs37s5CsjDkqQFofARkJiJQ+gecZ/F8WijF33xy+t8I/HYGy45ddo kBhrylN9jw+Q9GYZ+7BZ9QrwHJrE0mD9yq6fVZ415AkqeepeEA0Ok/DXQNHNOpeB hGmKHqfrqJexSA9LE1RFVSNI1ktQjgQk+gDueL7I52vOLOZBCEnJYXq6/83/ejqF UXbiKnEK+rPpQ4s52REYwmkb/TnPPFHmNwokV/2Ywwbbhuk/CMbQsiSU9DjoshUD oeLYlB+2+idbVwRtjVkxNawZsPxkgIAC+JPwdHirA0tCEhFtAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhZ8FVcxwQXYkQwsgzqlH8tOBa4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjk0ZTkzNDctZGUyMi0z MWU3LWJmYzUtNzViZDM4M2I0YTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLNZDhBLCvRpEvtxXmxonCu3IaTJ4OrrDDFaI04zB58sMJf6VgINjaS auqf9qk2rbOTNxROjGk9nUib6MYX4g6RYJce1K5YqOe3M9S3+jH1UjRx+CRKmCCA sAcjxTJH2Jmorfw4r63QpU/Cd6tpnpjnVQFz+RpRBe9J6MrZp+tl+QN6Rf5Z0CZi 1Iwg6kOMvfc0zATKv7rS+g5HuKSFssWcEuS9gLM7gq9ZQElcltYCP4AOsnrebZWp 910m9EbhR0bwLqb4w9EnAPTwzwF4XbFeoZBTOwtzi9ZFp1uwtA01XeIyX3WDqqOm MyQD+Smmr8G9iRQuTT0av+fh9g7EQC4= -----END CERTIFICATE-----Generated at Tue Jul 21 21:06:08 2026 by rpki-client