$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/343b56e4-2785-3758-8b98-7b8ee4b8652f.roa File: 343b56e4-2785-3758-8b98-7b8ee4b8652f.roa (raw, json) Hash identifier: OEH9cvjs5j0XFPDzg7GOp/xnZ4vcrrlRjyN1WNa+viM= Subject key identifier: 5B:C8:B6:A3:84:6B:9D:EB:75:FD:8F:07:AE:9D:7B:7D:71:DC:C0:FB Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E86F504BF6805532485846D20 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/343b56e4-2785-3758-8b98-7b8ee4b8652f.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 8069 IP address blocks: 20.33.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f5:04:bf:68:05:53:24:85:84:6d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=51382b30-6c17-4a03-a80b-f5e2dfa872ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:99:0c:02:ce:df:95:f6:f6:78:fa:0b:79:05: 86:8f:76:e9:3b:d1:b8:7c:63:ca:f9:48:a7:78:a4: 81:eb:cf:f8:da:4e:4f:7b:f3:cd:d0:6d:2f:32:ad: f8:f8:ff:cc:c3:d6:d4:13:c3:ff:88:fd:11:c8:e4: ec:bb:12:4f:2e:39:a0:eb:7d:32:07:1d:19:79:83: 6d:5c:9f:3b:c1:8b:b6:18:bc:85:ca:30:f7:90:3b: 84:14:a6:1e:ea:29:7f:0d:13:e7:14:be:34:a3:f2: 56:bd:83:38:ce:c0:3e:14:3c:b2:ca:cb:2f:76:c6: 9f:24:14:96:45:96:34:a3:7d:aa:03:d5:c5:a4:49: 99:d7:59:a0:5b:0c:dc:45:7b:8e:4e:7c:8c:5b:60: e1:ea:55:f4:4f:1e:9b:74:eb:21:4c:ca:f1:43:57: 92:65:3e:16:7b:97:93:0a:13:0d:25:58:c8:34:37: d8:de:ef:37:af:c7:e0:bf:0c:0b:b1:82:43:a2:fe: 29:00:ee:f3:b7:a9:9a:60:4f:70:a5:c8:98:91:5d: d9:03:f1:e3:a3:8b:cd:40:f2:ad:4c:a7:fa:99:f0: 77:95:4a:46:91:5d:47:60:22:16:04:de:7b:19:10: 68:e0:4d:cf:f2:d1:d5:19:dd:f3:17:53:29:a7:21: 4a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C8:B6:A3:84:6B:9D:EB:75:FD:8F:07:AE:9D:7B:7D:71:DC:C0:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/343b56e4-2785-3758-8b98-7b8ee4b8652f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ab:2b:a8:c9:d5:33:a2:06:55:ba:ea:eb:b5:85:11:10:a8: 1c:b1:f4:14:33:82:59:3d:65:70:75:41:51:f3:32:28:fe:5c: 85:13:2b:87:b6:82:d7:18:19:44:cd:af:62:b9:a5:33:40:13: ae:74:83:5b:9b:e9:93:6d:3f:4d:46:07:c5:2f:26:d1:be:e0: f4:55:08:af:6a:87:78:69:15:9b:08:d0:19:7f:a2:aa:5f:94: f2:a1:6d:4a:e1:a3:5f:ab:e4:20:05:1d:ba:e1:01:9f:a4:4e: b3:aa:41:2d:7d:d4:c9:5b:85:34:56:a4:65:de:0f:90:63:ad: 73:c3:40:af:e5:f2:19:74:37:bf:7e:8e:0f:63:5c:56:0f:30: 7d:ea:2e:ee:82:13:2e:2b:1c:fe:cc:cf:01:d1:6b:fa:b9:f5: 1b:ef:70:fc:00:41:3a:bb:ea:bb:cc:7a:0d:71:b2:b2:7d:db: 7c:13:fb:19:f4:22:27:2e:9d:d0:57:7e:03:fb:da:ab:76:52: d2:ff:cb:fd:22:93:0c:96:08:09:a0:6e:fc:8e:65:3a:7a:a0: 10:e6:be:5e:14:30:09:59:2e:9a:4f:be:3c:bb:f2:a2:0e:c6: 58:a1:93:6d:bc:dd:81:a2:9c:ea:bb:f2:e0:f4:2a:96:19:9d: b6:d6:1b:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9QS/aAVTJIWEbSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk NTEzODJiMzAtNmMxNy00YTAzLWE4MGItZjVlMmRmYTg3MmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5kMAs7flfb2ePoLeQWGj3bpO9G4fGPK+Uin eKSB68/42k5Pe/PN0G0vMq34+P/Mw9bUE8P/iP0RyOTsuxJPLjmg630yBx0ZeYNt XJ87wYu2GLyFyjD3kDuEFKYe6il/DRPnFL40o/JWvYM4zsA+FDyyyssvdsafJBSW RZY0o32qA9XFpEmZ11mgWwzcRXuOTnyMW2Dh6lX0Tx6bdOshTMrxQ1eSZT4We5eT ChMNJVjINDfY3u83r8fgvwwLsYJDov4pAO7zt6maYE9wpciYkV3ZA/Hjo4vNQPKt TKf6mfB3lUpGkV1HYCIWBN57GRBo4E3P8tHVGd3zF1MppyFKzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvItqOEa53rdf2PB66de31x3MD7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzQzYjU2ZTQtMjc4NS0z NzU4LThiOTgtN2I4ZWU0Yjg2NTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqrK6jJ1TOiBlW66uu1hREQqByx9BQzglk9ZXB1QVHzMij+XIUTK4e2 gtcYGUTNr2K5pTNAE650g1ub6ZNtP01GB8UvJtG+4PRVCK9qh3hpFZsI0Bl/oqpf lPKhbUrho1+r5CAFHbrhAZ+kTrOqQS191MlbhTRWpGXeD5BjrXPDQK/l8hl0N79+ jg9jXFYPMH3qLu6CEy4rHP7MzwHRa/q59RvvcPwAQTq76rvMeg1xsrJ923wT+xn0 IicundBXfgP72qt2UtL/y/0ikwyWCAmgbvyOZTp6oBDmvl4UMAlZLppPvjy78qIO xlihk2283YGinOq78uD0KpYZnbbWG6w= -----END CERTIFICATE-----Generated at Tue Jul 21 21:08:00 2026 by rpki-client