$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4a91552d-6deb-3e19-805b-ab52062a7fcd.roa File: 4a91552d-6deb-3e19-805b-ab52062a7fcd.roa (raw, json) Hash identifier: 0Xsvv2qaGhx6rXRoX1lg+CYvqLDxJ3pBy1Y2DlMbEYw= Subject key identifier: 14:AC:65:0E:DF:2C:DB:C5:26:F5:FC:06:FA:E6:33:23:35:6A:DE:CB Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E86F5055DB225E28437356A60 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4a91552d-6deb-3e19-805b-ab52062a7fcd.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 8069 IP address blocks: 20.33.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f5:05:5d:b2:25:e2:84:37:35:6a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=17ebe254-43b0-4d8a-bfd7-c66c783e01a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d2:fa:d4:1c:fb:44:7b:de:1c:48:4a:c9:0f: cc:0f:e5:d5:38:84:d1:a5:1f:53:88:6b:ec:47:0e: 90:a0:4b:8a:f2:77:a9:d8:3a:c2:d7:7a:08:df:b4: da:45:e7:9d:52:92:4c:d5:91:4b:5b:fa:35:a8:97: 19:6c:83:d6:f7:08:31:93:43:b6:07:0f:a5:99:ae: a3:29:87:d7:39:33:12:df:cf:47:85:47:d2:94:60: 4a:5c:cf:10:ca:a7:e8:8e:c2:10:46:60:8b:30:15: 66:58:06:6f:63:b7:ed:f2:79:4e:78:0a:0e:c5:b6: e7:09:2a:a8:5e:5b:ba:62:bf:23:06:09:c6:dd:ff: 59:69:a4:09:d3:d8:9a:9f:f9:08:03:d1:84:ac:c9: 68:40:98:37:dd:e1:81:01:1d:8d:d3:29:04:57:09: 26:c0:27:3a:ae:3e:08:89:6b:04:e0:27:a9:af:74: 31:4c:94:e4:0c:e6:0c:a5:db:61:81:2d:2d:27:49: 4a:57:4b:92:47:92:db:73:0f:ae:d8:ad:ef:d7:fe: e2:07:0c:78:25:d4:47:18:b5:e8:30:0d:15:30:be: 26:2e:9c:1c:7f:86:26:08:ef:09:1a:4b:1a:99:40: 1e:01:5d:f5:71:12:f1:6b:b5:2b:07:e4:2c:65:94: a4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AC:65:0E:DF:2C:DB:C5:26:F5:FC:06:FA:E6:33:23:35:6A:DE:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4a91552d-6deb-3e19-805b-ab52062a7fcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:75:2d:60:63:09:93:3d:a8:2e:22:27:54:96:7f:67:9f:19: f7:f9:38:dd:d9:1b:e3:da:79:cd:ca:3a:c7:dd:46:97:68:c7: 6f:8b:2c:c3:da:e4:3e:85:eb:f6:53:43:01:91:13:14:5c:e8: fe:ba:8c:6e:bd:76:9b:d5:4d:c4:31:da:75:09:ec:42:b0:88: b3:d1:73:cb:5b:b2:de:f8:64:9c:b1:a7:31:c3:43:8d:54:ba: d4:00:7d:4b:ce:19:22:8d:6b:85:c1:40:50:ae:6f:91:da:5e: 3a:cd:9f:05:e9:02:f2:f8:a5:0c:80:7f:46:c0:3e:17:3f:b1: bc:8f:36:85:8a:cc:5a:d5:de:74:5c:6b:5e:5f:f0:7d:16:fb: cb:66:ce:ff:b1:2b:18:8d:cb:3d:1c:73:32:ef:52:53:1c:56: 4e:f0:54:af:dc:2d:09:24:5f:01:05:6b:3a:7d:3b:7d:d8:b2: 86:91:97:6a:34:d1:21:0d:c3:60:d5:80:84:7a:4f:85:fa:fc: 20:6c:e3:0b:6b:86:77:84:6b:f5:ae:22:f4:18:49:49:79:ec: 7b:d7:5e:31:84:4f:4a:72:da:c0:56:90:6d:a8:db:4b:35:d3: 63:ac:ce:b3:01:f2:cc:0f:f6:86:14:6b:ff:04:f6:a0:47:93: 04:99:b6:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9QVdsiXihDc1amAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk MTdlYmUyNTQtNDNiMC00ZDhhLWJmZDctYzY2Yzc4M2UwMWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtL61Bz7RHveHEhKyQ/MD+XVOITRpR9TiGvs Rw6QoEuK8nep2DrC13oI37TaReedUpJM1ZFLW/o1qJcZbIPW9wgxk0O2Bw+lma6j KYfXOTMS389HhUfSlGBKXM8QyqfojsIQRmCLMBVmWAZvY7ft8nlOeAoOxbbnCSqo Xlu6Yr8jBgnG3f9ZaaQJ09ian/kIA9GErMloQJg33eGBAR2N0ykEVwkmwCc6rj4I iWsE4Cepr3QxTJTkDOYMpdthgS0tJ0lKV0uSR5Lbcw+u2K3v1/7iBwx4JdRHGLXo MA0VML4mLpwcf4YmCO8JGksamUAeAV31cRLxa7UrB+QsZZSkiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSsZQ7fLNvFJvX8BvrmMyM1at7LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGE5MTU1MmQtNmRlYi0z ZTE5LTgwNWItYWI1MjA2MmE3ZmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZ1LWBjCZM9qC4iJ1SWf2efGff5ON3ZG+Paec3KOsfdRpdox2+LLMPa 5D6F6/ZTQwGRExRc6P66jG69dpvVTcQx2nUJ7EKwiLPRc8tbst74ZJyxpzHDQ41U utQAfUvOGSKNa4XBQFCub5HaXjrNnwXpAvL4pQyAf0bAPhc/sbyPNoWKzFrV3nRc a15f8H0W+8tmzv+xKxiNyz0cczLvUlMcVk7wVK/cLQkkXwEFazp9O33YsoaRl2o0 0SENw2DVgIR6T4X6/CBs4wtrhneEa/WuIvQYSUl57HvXXjGET0py2sBWkG2o20s1 02OszrMB8swP9oYUa/8E9qBHkwSZtjk= -----END CERTIFICATE-----Generated at Tue Jul 21 21:08:19 2026 by rpki-client