$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/433f4626-f5a4-3f5b-8402-ad0e6744411a.roa File: 433f4626-f5a4-3f5b-8402-ad0e6744411a.roa (raw, json) Hash identifier: lo7OLvtZoJi/0oRcwQkVFQuC+J+JawZWmvNJRL1+cYA= Subject key identifier: C0:96:93:D8:97:58:64:6B:89:2E:2D:07:C4:31:5B:F1:78:67:FB:D9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E86F505EC49F93BE2B31947C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/433f4626-f5a4-3f5b-8402-ad0e6744411a.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 8069 IP address blocks: 20.33.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f5:05:ec:49:f9:3b:e2:b3:19:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=6db24048-bb53-484f-8ce9-87d67c9a425b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c1:5b:9c:e7:2d:9e:1b:c7:ed:dd:32:0a:ce: 83:34:70:1a:b1:74:e2:28:df:5d:49:2a:71:8c:ac: 4b:c4:dd:5b:25:d3:b4:46:0d:02:b1:f7:36:90:b1: f5:98:b2:d5:71:25:87:78:1a:1f:8e:9d:17:50:68: 55:59:5b:72:8b:73:57:13:bf:85:cd:3b:be:e7:7e: 09:92:23:3b:0b:8d:b6:f1:2f:c1:53:2c:a7:ff:14: 91:84:87:e7:19:d3:74:d9:ed:da:19:02:70:63:aa: ed:15:b0:58:61:ce:16:d7:4d:34:02:8b:9a:0e:b5: 9d:45:f0:89:9b:32:d8:65:c5:39:db:52:62:1e:a0: 53:77:88:bd:9a:d6:63:10:71:b6:ae:d9:06:d9:e8: 78:5e:65:21:8a:af:af:55:70:eb:22:c2:94:c3:b6: 0a:6a:1e:5d:c4:98:98:ad:2b:58:ed:32:28:85:54: b0:f7:2f:3f:11:38:7b:e7:f9:e4:fd:9c:af:23:e5: e3:ba:e3:9b:1c:f3:c0:53:f5:1c:e0:00:df:37:92: 04:2a:8a:16:8a:d1:0c:91:9c:a4:82:dc:e9:65:9e: 1d:76:cf:66:5a:d8:05:e8:02:aa:4b:91:f8:92:0a: 0d:3f:ae:35:19:b6:09:ef:9e:5e:32:d4:bf:60:2e: c2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:96:93:D8:97:58:64:6B:89:2E:2D:07:C4:31:5B:F1:78:67:FB:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/433f4626-f5a4-3f5b-8402-ad0e6744411a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:78:38:42:f5:38:fa:9d:d5:6f:14:1c:ab:69:b0:f9:b0:26: c7:50:09:9c:34:3b:33:9e:b3:d5:81:c6:e6:ca:3c:77:5f:05: da:b2:d5:86:fc:df:63:03:27:62:36:d4:b9:d8:e1:79:27:b9: a4:32:06:eb:b8:12:c5:7f:0c:0c:db:bc:65:be:c3:38:30:b9: 73:2c:6d:a5:35:f3:8f:91:d4:b8:b9:31:af:de:c9:a5:d2:90: 67:01:fc:ad:ac:ec:7c:38:c5:6b:59:98:a3:42:a1:bb:b9:ad: 4c:03:cc:0b:94:7e:c9:e5:c3:36:62:b3:2f:32:7b:ae:e9:00: b7:24:d3:43:ba:4d:ab:e0:45:11:e9:12:d7:0a:e7:28:86:f3: 86:00:b3:85:64:e8:2d:b8:a4:5c:8b:75:55:90:f3:03:02:5f: be:3c:33:5a:11:9d:a6:94:1f:77:a8:4a:02:92:18:fa:49:04: d4:42:f1:16:68:99:ab:aa:a9:23:30:60:85:bc:94:92:65:b4: a2:5a:51:6a:ab:16:ca:79:97:20:db:6b:22:8d:92:a0:c0:23: 83:90:59:17:c2:9e:7a:36:8c:8c:54:1c:f2:7e:c4:3d:56:30: e0:03:b5:7d:2b:5d:69:c3:5b:5e:de:94:a5:18:d3:61:f9:91: 96:8b:4a:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9QXsSfk74rMZR8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk NmRiMjQwNDgtYmI1My00ODRmLThjZTktODdkNjdjOWE0MjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMFbnOctnhvH7d0yCs6DNHAasXTiKN9dSSpx jKxLxN1bJdO0Rg0Csfc2kLH1mLLVcSWHeBofjp0XUGhVWVtyi3NXE7+FzTu+534J kiM7C4228S/BUyyn/xSRhIfnGdN02e3aGQJwY6rtFbBYYc4W1000AouaDrWdRfCJ mzLYZcU521JiHqBTd4i9mtZjEHG2rtkG2eh4XmUhiq+vVXDrIsKUw7YKah5dxJiY rStY7TIohVSw9y8/ETh75/nk/ZyvI+XjuuObHPPAU/Uc4ADfN5IEKooWitEMkZyk gtzpZZ4dds9mWtgF6AKqS5H4kgoNP641GbYJ755eMtS/YC7C4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCWk9iXWGRriS4tB8QxW/F4Z/vZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDMzZjQ2MjYtZjVhNC0z ZjViLTg0MDItYWQwZTY3NDQ0MTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGx4OEL1OPqd1W8UHKtpsPmwJsdQCZw0OzOes9WBxubKPHdfBdqy1Yb8 32MDJ2I21LnY4XknuaQyBuu4EsV/DAzbvGW+wzgwuXMsbaU184+R1Li5Ma/eyaXS kGcB/K2s7Hw4xWtZmKNCobu5rUwDzAuUfsnlwzZisy8ye67pALck00O6TavgRRHp EtcK5yiG84YAs4Vk6C24pFyLdVWQ8wMCX748M1oRnaaUH3eoSgKSGPpJBNRC8RZo mauqqSMwYIW8lJJltKJaUWqrFsp5lyDbayKNkqDAI4OQWRfCnno2jIxUHPJ+xD1W MOADtX0rXWnDW17elKUY02H5kZaLShg= -----END CERTIFICATE-----Generated at Tue Jul 21 21:09:25 2026 by rpki-client