$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3126669a-6a7e-3701-8d12-0552f96ee7a7.roa File: 3126669a-6a7e-3701-8d12-0552f96ee7a7.roa (raw, json) Hash identifier: PnwH/ci+fPjQGtEL409pY40X3FB+5jLkN3lzxjuLPZU= Subject key identifier: F4:44:0A:2B:67:76:75:98:74:24:92:72:7B:13:ED:55:B6:BD:D0:95 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E779A295CB7794149905583C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3126669a-6a7e-3701-8d12-0552f96ee7a7.roa Signing time: Sat 11 Jul 2026 21:00:11 +0000 ROA not before: Sat 11 Jul 2026 21:00:11 +0000 ROA not after: Fri 09 Oct 2026 21:00:11 +0000 asID: 8069 IP address blocks: 20.33.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:77:9a:29:5c:b7:79:41:49:90:55:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 11 21:00:11 2026 GMT Not After : Oct 9 21:00:11 2026 GMT Subject: CN=e26ad4c6-7738-49d9-bbe8-d566cf8856bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:27:bc:83:c5:a8:5a:bd:45:d2:ec:da:70:0d: f9:e4:fd:3a:87:c8:36:67:26:9f:84:57:15:46:fa: d6:b9:19:89:f7:36:58:1a:dd:9c:e0:0e:02:c3:5f: 94:af:eb:78:11:03:57:20:5b:61:ac:bc:ee:b5:d1: 5d:d2:42:69:a3:59:43:64:60:df:c5:28:36:5f:0a: 69:ca:3c:42:05:99:79:6f:97:da:e3:ba:10:88:bb: 1e:91:e2:d5:cb:9c:33:32:f4:e6:1d:80:92:56:bd: 30:e4:2c:17:e1:67:10:a5:f9:5c:89:a0:be:d2:1b: a5:c1:26:44:98:0d:91:09:16:c0:6b:8b:01:40:3a: f6:e2:63:3b:80:26:45:31:6e:aa:c1:9b:07:91:3b: 43:ba:10:51:b9:66:4f:96:c0:34:3f:95:78:c7:8c: e8:22:fe:65:a6:23:45:b4:9f:e5:c9:10:9a:13:a2: 3e:11:0b:a1:aa:1e:bd:85:2a:08:35:6d:18:ea:63: 87:71:39:14:5c:22:02:f1:55:84:5e:77:e1:12:1d: a8:9e:14:7d:b8:63:7f:38:14:35:5d:69:ac:a2:fd: 75:bd:e8:36:8c:4e:58:70:8d:21:25:01:71:84:81: 78:a2:6d:c0:84:02:e8:ec:81:58:92:80:dd:3a:47: 99:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:44:0A:2B:67:76:75:98:74:24:92:72:7B:13:ED:55:B6:BD:D0:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3126669a-6a7e-3701-8d12-0552f96ee7a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:65:d2:25:73:61:df:75:1d:38:8d:1f:58:65:3c:f9:78:56: d5:c0:86:db:2f:81:14:06:72:5d:5c:3d:27:18:96:4b:cf:05: a8:65:fb:8b:4f:b1:2e:3d:63:e2:55:d0:e9:4d:f1:66:f8:b2: c4:fe:b8:14:6a:ed:8a:0c:3e:8e:e7:0d:1a:d0:f1:09:f4:55: 45:55:1a:6d:37:03:68:d0:a7:4c:9f:bd:1a:73:fd:24:2c:69: d9:62:d8:bd:60:48:47:90:1a:7b:df:08:79:e3:63:7b:b1:b0: ae:d3:f7:c8:a0:16:ea:b8:61:2f:3b:d1:b7:a3:34:9c:3c:f2: 34:d7:dc:b1:f8:46:df:de:bb:d8:1a:6b:43:1e:ea:2f:56:fc: dd:e3:a2:81:9b:88:d0:b5:21:55:56:21:ac:29:65:68:c8:92: 14:f9:d1:44:f8:17:e8:b0:d7:b0:c6:9a:a9:8a:57:2d:dc:ea: 1f:fb:37:f6:d2:ef:fb:ba:f1:8a:0a:bf:cd:cf:4c:3d:77:95: 8b:59:c8:e2:07:bc:76:4b:45:7f:48:bc:ed:c7:91:6b:37:c5: 45:24:78:69:d3:2e:c8:f9:98:47:07:59:b3:20:77:1f:24:e1: a2:dc:e4:5e:1e:8f:22:41:dc:c5:dc:92:6e:c8:4f:5d:3d:30: 28:68:13:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE53milct3lBSZBVg8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk ZTI2YWQ0YzYtNzczOC00OWQ5LWJiZTgtZDU2NmNmODg1NmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSe8g8WoWr1F0uzacA355P06h8g2ZyafhFcV RvrWuRmJ9zZYGt2c4A4Cw1+Ur+t4EQNXIFthrLzutdFd0kJpo1lDZGDfxSg2Xwpp yjxCBZl5b5fa47oQiLsekeLVy5wzMvTmHYCSVr0w5CwX4WcQpflciaC+0hulwSZE mA2RCRbAa4sBQDr24mM7gCZFMW6qwZsHkTtDuhBRuWZPlsA0P5V4x4zoIv5lpiNF tJ/lyRCaE6I+EQuhqh69hSoINW0Y6mOHcTkUXCIC8VWEXnfhEh2onhR9uGN/OBQ1 XWmsov11veg2jE5YcI0hJQFxhIF4om3AhALo7IFYkoDdOkeZfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRECitndnWYdCSScnsT7VW2vdCVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzEyNjY2OWEtNmE3ZS0z NzAxLThkMTItMDU1MmY5NmVlN2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCF8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFl0iVzYd91HTiNH1hlPPl4VtXAhtsvgRQGcl1cPScYlkvPBahl+4tP sS49Y+JV0OlN8Wb4ssT+uBRq7YoMPo7nDRrQ8Qn0VUVVGm03A2jQp0yfvRpz/SQs adli2L1gSEeQGnvfCHnjY3uxsK7T98igFuq4YS870bejNJw88jTX3LH4Rt/eu9ga a0Me6i9W/N3jooGbiNC1IVVWIawpZWjIkhT50UT4F+iw17DGmqmKVy3c6h/7N/bS 7/u68YoKv83PTD13lYtZyOIHvHZLRX9IvO3HkWs3xUUkeGnTLsj5mEcHWbMgdx8k 4aLc5F4ejyJB3MXckm7IT109MChoE2E= -----END CERTIFICATE-----Generated at Tue Jul 21 21:08:08 2026 by rpki-client