$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2dcfd525-f3e6-335f-8507-9dbff9bd843e.roa File: 2dcfd525-f3e6-335f-8507-9dbff9bd843e.roa (raw, json) Hash identifier: P/GrZSulTjQNF3w/wdbRQLWLl1MylIhJdznBVeykLoI= Subject key identifier: 1F:C2:B7:3F:1D:5B:2E:64:0A:C0:30:10:DB:0E:47:23:D4:15:D3:CF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E885A4F038E3DA919A02245BC Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2dcfd525-f3e6-335f-8507-9dbff9bd843e.roa Signing time: Fri 17 Jul 2026 21:00:12 +0000 ROA not before: Fri 17 Jul 2026 21:00:12 +0000 ROA not after: Thu 15 Oct 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.33.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:88:5a:4f:03:8e:3d:a9:19:a0:22:45:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 17 21:00:12 2026 GMT Not After : Oct 15 21:00:12 2026 GMT Subject: CN=839b8d2d-9853-44a9-bd80-3b3320bb856e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a7:81:1c:38:0c:a4:bf:0d:da:88:e5:e7:c4: 4e:00:85:ef:07:3a:2b:99:e3:3a:45:0e:1b:64:78: b7:0d:b2:dc:f9:9b:19:02:09:b1:43:b7:e2:4c:6a: bd:de:60:52:ef:5a:02:e6:9d:f5:9d:9f:fc:d1:08: 97:3e:29:4a:c1:53:3f:03:ae:92:b3:9d:08:1a:8d: 9d:07:59:df:91:14:d5:47:fd:3e:0c:09:4a:9a:9e: 31:06:0b:e7:4e:fb:7e:31:72:05:0c:0c:77:b6:48: 92:a7:3b:7c:75:8c:e5:9d:53:c1:ae:f7:fd:d2:3e: 34:c3:ae:15:69:c8:01:2b:5a:ed:c2:30:69:fa:b3: e0:41:ac:6c:9d:fe:1e:b7:83:36:6c:3d:d3:cf:fa: 0f:c3:ba:69:48:bf:91:86:d8:21:a5:c6:14:e0:9c: c4:eb:24:d1:7f:d9:63:3a:28:cc:9c:b7:75:e1:52: 23:49:2d:fc:f4:4b:9a:2f:0c:2e:b3:e7:74:e0:41: 43:02:2c:30:58:94:28:eb:5e:0e:3e:ca:04:86:db: 7d:57:98:53:b6:9a:18:00:8b:89:e0:69:44:31:ad: 55:9d:9a:55:25:79:2e:6e:a3:df:f0:66:29:90:8e: 79:7e:af:97:74:92:21:dc:e6:e2:75:19:68:49:9e: fc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C2:B7:3F:1D:5B:2E:64:0A:C0:30:10:DB:0E:47:23:D4:15:D3:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2dcfd525-f3e6-335f-8507-9dbff9bd843e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:a0:31:c3:f8:05:05:fe:09:db:cd:bf:61:4a:ca:10:87:1b: f4:68:06:ef:b1:fe:bf:1e:74:42:c1:b3:cc:74:92:00:aa:5d: 22:01:40:3e:68:93:48:f2:e6:9c:f3:3a:15:81:75:5f:e9:e2: 6a:04:fa:9d:d3:ae:63:dd:6a:21:bb:e1:e5:d8:3e:12:d0:88: 09:ee:d6:90:40:ef:ed:4a:52:81:c2:73:e9:44:87:a0:d0:5c: e3:f0:d6:8d:23:02:71:71:d3:d1:64:d9:58:a3:34:74:90:e7: c9:83:82:00:6e:23:d9:15:36:07:45:83:53:30:27:99:94:9e: ee:6c:6e:57:12:9d:72:80:cb:47:29:3a:6b:63:38:82:de:fb: 87:b0:5b:13:df:bf:3f:7c:6b:2f:3f:bf:41:78:a6:cb:4c:d9: 04:e7:62:37:e4:69:71:bd:75:1a:ee:26:3c:bc:d8:4d:a2:7f: 2d:66:4c:a6:d1:06:0b:95:01:26:2b:4a:b7:09:42:c0:3a:6e: 20:2d:b9:12:b0:da:e5:4a:8b:e7:a7:99:79:5c:c4:d5:c4:0f: cb:bb:4d:8b:23:02:19:f2:54:57:e3:a4:e3:98:ab:89:8c:f8: ec:2f:6c:1c:39:78:42:c8:02:54:c7:ae:ad:78:f9:75:61:00: d6:51:ed:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWk8Djj2pGaAiRbwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk ODM5YjhkMmQtOTg1My00NGE5LWJkODAtM2IzMzIwYmI4NTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKeBHDgMpL8N2ojl58ROAIXvBzormeM6RQ4b ZHi3DbLc+ZsZAgmxQ7fiTGq93mBS71oC5p31nZ/80QiXPilKwVM/A66Ss50IGo2d B1nfkRTVR/0+DAlKmp4xBgvnTvt+MXIFDAx3tkiSpzt8dYzlnVPBrvf90j40w64V acgBK1rtwjBp+rPgQaxsnf4et4M2bD3Tz/oPw7ppSL+RhtghpcYU4JzE6yTRf9lj OijMnLd14VIjSS389EuaLwwus+d04EFDAiwwWJQo614OPsoEhtt9V5hTtpoYAIuJ 4GlEMa1VnZpVJXkubqPf8GYpkI55fq+XdJIh3ObidRloSZ781wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/Ctz8dWy5kCsAwENsORyPUFdPPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMmRjZmQ1MjUtZjNlNi0z MzVmLTg1MDctOWRiZmY5YmQ4NDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+gMcP4BQX+CdvNv2FKyhCHG/RoBu+x/r8edELBs8x0kgCqXSIBQD5o k0jy5pzzOhWBdV/p4moE+p3TrmPdaiG74eXYPhLQiAnu1pBA7+1KUoHCc+lEh6DQ XOPw1o0jAnFx09Fk2VijNHSQ58mDggBuI9kVNgdFg1MwJ5mUnu5sblcSnXKAy0cp OmtjOILe+4ewWxPfvz98ay8/v0F4pstM2QTnYjfkaXG9dRruJjy82E2ify1mTKbR BguVASYrSrcJQsA6biAtuRKw2uVKi+enmXlcxNXED8u7TYsjAhnyVFfjpOOYq4mM +OwvbBw5eELIAlTHrq14+XVhANZR7ZQ= -----END CERTIFICATE-----Generated at Tue Jul 21 21:07:17 2026 by rpki-client