$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34bf3447-2505-34e1-be37-4e4a4628389b.roa File: 34bf3447-2505-34e1-be37-4e4a4628389b.roa (raw, json) Hash identifier: NlaOh0v85jcqIZFQDg4Xva1q6KMioTxYdaHclCWH+Qg= Subject key identifier: F2:24:76:36:C6:F9:44:5A:2D:2C:7E:ED:E9:40:03:57:25:FD:25:06 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E31CF4D614C997AA719631000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34bf3447-2505-34e1-be37-4e4a4628389b.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.33.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:4d:61:4c:99:7a:a7:19:63:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=6d740b4e-98c8-4285-965c-bb796fe12fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:03:3e:f9:7d:ef:49:b3:43:0c:89:61:62:0b: 9d:8e:37:68:a9:aa:99:90:19:e1:48:9b:de:3c:c2: 4f:50:a5:6e:cc:02:7f:de:60:a6:97:34:94:63:f7: 04:a0:dd:ed:5b:96:96:49:71:c2:3c:ab:86:83:4b: 22:b5:59:56:a4:69:2c:63:60:a8:41:be:9e:5b:ee: b6:40:1d:1c:20:d4:60:7e:2c:c6:ab:ad:ce:80:08: 62:ed:b6:80:da:87:86:cc:99:62:21:7f:9e:4a:4c: 40:b7:d7:11:57:70:1b:b9:0a:35:2b:7a:da:25:bf: f4:b2:98:dd:2e:c4:35:76:9f:82:d9:d5:d6:41:e1: 9e:0a:c8:d9:18:08:f6:6b:ae:93:81:15:13:1e:08: 0a:e3:d2:a1:1c:3a:29:ff:cc:03:8f:29:b7:f2:95: e8:52:f5:26:8b:a1:00:27:86:6a:d4:48:29:35:c6: 5e:14:41:a6:8d:fd:92:4d:73:7b:d6:cd:a9:af:cf: b4:c7:19:d8:7c:db:c5:ee:dd:8c:df:08:31:76:8c: 63:69:36:b9:01:2d:37:5f:23:d2:53:38:54:f8:5a: 5e:25:a4:de:0a:a9:8b:7c:f3:5a:de:68:25:5b:82: 56:59:3c:5a:8e:4c:22:04:1a:2a:83:0a:87:66:a2: 43:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:24:76:36:C6:F9:44:5A:2D:2C:7E:ED:E9:40:03:57:25:FD:25:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34bf3447-2505-34e1-be37-4e4a4628389b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:10:f5:f7:06:57:c9:0e:99:34:73:ad:42:cf:85:be:b0:40: 76:9b:24:bc:7a:4b:eb:d7:46:3a:cb:ee:5a:2b:8a:bf:ec:41: a3:6f:55:1d:63:cc:db:df:41:60:04:f6:1c:6d:af:63:c2:eb: 0c:91:67:15:62:0d:e4:ea:cd:95:4f:51:bc:5f:65:d3:a8:24: 6e:e1:04:56:e4:5e:76:77:9d:f5:6b:bc:55:da:e4:2c:90:b5: c9:cb:5c:07:23:08:2c:4c:32:c9:f0:37:a3:9c:d0:02:b1:f2: 40:13:72:2b:1a:50:c6:b9:ac:2c:34:cb:24:b6:1f:f3:5a:14: 72:ed:bc:a2:b9:26:61:ab:2c:e5:4e:22:3b:56:0a:6a:d5:07: a5:60:60:14:11:6e:70:72:c0:47:40:3e:87:57:72:7b:ee:74: 3e:ef:19:62:43:ac:f2:94:ad:af:75:11:19:d9:fe:3d:d8:3d: 81:71:9d:09:94:bc:79:f2:67:20:a1:25:3a:8c:60:2c:69:29: 5e:ed:a5:da:fe:f4:22:9c:37:8d:27:10:7c:bf:85:ac:52:d6: 2d:75:2d:d2:24:c2:53:51:c1:e1:8c:10:f6:ea:65:db:d0:9b: d3:9d:2b:a5:e2:05:52:11:d1:64:90:b3:ae:20:e0:17:7a:67: 0b:0e:36:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xz01hTJl6pxljEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk NmQ3NDBiNGUtOThjOC00Mjg1LTk2NWMtYmI3OTZmZTEyZmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAM++X3vSbNDDIlhYgudjjdoqaqZkBnhSJve PMJPUKVuzAJ/3mCmlzSUY/cEoN3tW5aWSXHCPKuGg0sitVlWpGksY2CoQb6eW+62 QB0cINRgfizGq63OgAhi7baA2oeGzJliIX+eSkxAt9cRV3AbuQo1K3raJb/0spjd LsQ1dp+C2dXWQeGeCsjZGAj2a66TgRUTHggK49KhHDop/8wDjym38pXoUvUmi6EA J4Zq1EgpNcZeFEGmjf2STXN71s2pr8+0xxnYfNvF7t2M3wgxdoxjaTa5AS03XyPS UzhU+FpeJaTeCqmLfPNa3mglW4JWWTxajkwiBBoqgwqHZqJDXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIkdjbG+URaLSx+7elAA1cl/SUGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzRiZjM0NDctMjUwNS0z NGUxLWJlMzctNGU0YTQ2MjgzODliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCHkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAQ9fcGV8kOmTRzrULPhb6wQHabJLx6S+vXRjrL7lorir/sQaNvVR1j zNvfQWAE9hxtr2PC6wyRZxViDeTqzZVPUbxfZdOoJG7hBFbkXnZ3nfVrvFXa5CyQ tcnLXAcjCCxMMsnwN6Oc0AKx8kATcisaUMa5rCw0yyS2H/NaFHLtvKK5JmGrLOVO IjtWCmrVB6VgYBQRbnBywEdAPodXcnvudD7vGWJDrPKUra91ERnZ/j3YPYFxnQmU vHnyZyChJTqMYCxpKV7tpdr+9CKcN40nEHy/haxS1i11LdIkwlNRweGMEPbqZdvQ m9OdK6XiBVIR0WSQs64g4Bd6ZwsONvk= -----END CERTIFICATE-----Generated at Tue Jul 21 21:07:40 2026 by rpki-client