$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5611583f-0381-377c-8dab-8bb3ddb62332.roa File: 5611583f-0381-377c-8dab-8bb3ddb62332.roa (raw, json) Hash identifier: 8AZGQYXfTBTcpThuNUo151i81v9Afjcr1KjLMJkUXyE= Subject key identifier: A9:A0:1A:76:37:06:86:AC:EC:E4:6B:33:AA:E9:DB:C2:E4:27:80:07 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E7634E370FA17C83C53BDA100 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5611583f-0381-377c-8dab-8bb3ddb62332.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 8069 IP address blocks: 20.33.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:e3:70:fa:17:c8:3c:53:bd:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=7fda4ea4-96d8-4c2b-b673-16194e541502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9b:e7:f7:04:46:ca:6f:1d:61:6f:68:6a:fa: 90:f2:27:84:09:91:74:87:40:9d:71:cf:20:d4:52: 7c:a9:42:ea:86:3c:55:e7:29:09:2a:3d:63:e8:cb: 49:f3:44:2f:9a:4f:ef:dc:e6:bb:78:cc:a4:49:32: 75:a7:b9:65:06:42:86:eb:25:6b:f1:b1:c3:5a:42: f0:00:9c:df:c5:8d:94:9d:99:44:2d:42:81:2e:60: 0b:e2:34:d5:8e:d4:ce:07:4f:8f:00:d5:52:27:de: d1:3e:d8:64:53:1d:24:05:b7:3f:20:3d:2b:a7:fc: 41:c5:71:c1:47:76:97:3b:85:a5:b6:f4:16:7f:1e: 51:f5:ac:cf:47:16:eb:e1:18:c5:eb:3f:5f:90:d8: 74:15:e4:b8:a4:f8:bb:8c:25:f0:9a:c2:63:41:3e: 20:f3:a8:2b:a5:03:7a:b5:7e:c2:b8:26:74:85:fc: ab:c1:76:95:7a:a5:8f:81:0b:ff:6f:e2:55:a4:7b: 5b:7b:16:e2:74:50:a7:72:e7:1d:39:a6:15:5b:b7: 65:c3:89:e6:59:25:69:92:b7:ae:31:db:01:a5:69: 8b:22:b2:8f:8e:16:14:62:b1:60:c7:bc:18:80:ff: 01:33:21:10:6a:05:18:24:76:ed:bb:5b:9d:6a:7a: c7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A0:1A:76:37:06:86:AC:EC:E4:6B:33:AA:E9:DB:C2:E4:27:80:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5611583f-0381-377c-8dab-8bb3ddb62332.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:59:9e:b1:e3:3d:e7:6e:2c:3c:ee:38:18:a3:bc:29:c2:f8: 30:b8:b0:6f:0b:fc:ea:8b:b8:fb:24:d3:2b:55:79:f5:2b:7f: 55:b2:3c:c2:a1:bc:2d:09:bc:d5:f5:27:e3:a4:f1:a6:b1:eb: 08:e3:1d:7e:d2:33:60:5e:74:a3:33:23:4e:ac:df:4d:8c:8a: 71:56:25:35:89:7f:9d:15:35:30:99:28:d6:04:70:73:ff:aa: 9a:60:42:55:5c:ba:88:2b:c2:bf:86:9c:ed:d2:3a:61:ac:57: 50:2f:96:e5:fb:77:85:22:8b:7e:0a:e2:be:b8:76:0d:38:37: 41:f4:90:63:71:bf:24:91:25:22:e8:20:32:b6:66:32:b2:c3: 9f:9c:19:e0:68:fc:84:cf:e0:9e:eb:a6:a4:8c:f3:5a:be:24: b7:82:c8:bc:34:e2:eb:23:35:7b:49:0f:81:b6:9a:ce:69:b8: 33:40:17:2f:8d:45:1f:18:fa:f2:9d:db:08:a6:3f:e5:54:a2: 47:d9:ce:79:47:aa:43:14:48:8d:89:2c:e5:ba:bc:9a:46:13: ad:a7:be:10:fe:32:f7:61:10:7b:dc:62:06:d9:f6:b6:6f:d2: 90:2a:23:1c:9d:c1:19:d6:98:97:6d:e6:ef:10:83:93:87:71: da:ee:06:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NONw+hfIPFO9oQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk N2ZkYTRlYTQtOTZkOC00YzJiLWI2NzMtMTYxOTRlNTQxNTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspvn9wRGym8dYW9oavqQ8ieECZF0h0Cdcc8g 1FJ8qULqhjxV5ykJKj1j6MtJ80Qvmk/v3Oa7eMykSTJ1p7llBkKG6yVr8bHDWkLw AJzfxY2UnZlELUKBLmAL4jTVjtTOB0+PANVSJ97RPthkUx0kBbc/ID0rp/xBxXHB R3aXO4WltvQWfx5R9azPRxbr4RjF6z9fkNh0FeS4pPi7jCXwmsJjQT4g86grpQN6 tX7CuCZ0hfyrwXaVeqWPgQv/b+JVpHtbexbidFCncucdOaYVW7dlw4nmWSVpkreu MdsBpWmLIrKPjhYUYrFgx7wYgP8BMyEQagUYJHbtu1udanrHUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmgGnY3Boas7ORrM6rp28LkJ4AHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTYxMTU4M2YtMDM4MS0z NzdjLThkYWItOGJiM2RkYjYyMzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5ZnrHjPeduLDzuOBijvCnC+DC4sG8L/OqLuPsk0ytVefUrf1WyPMKh vC0JvNX1J+Ok8aax6wjjHX7SM2BedKMzI06s302MinFWJTWJf50VNTCZKNYEcHP/ qppgQlVcuogrwr+GnO3SOmGsV1AvluX7d4Uii34K4r64dg04N0H0kGNxvySRJSLo IDK2ZjKyw5+cGeBo/ITP4J7rpqSM81q+JLeCyLw04usjNXtJD4G2ms5puDNAFy+N RR8Y+vKd2wimP+VUokfZznlHqkMUSI2JLOW6vJpGE62nvhD+MvdhEHvcYgbZ9rZv 0pAqIxydwRnWmJdt5u8Qg5OHcdruBlA= -----END CERTIFICATE-----Generated at Tue Jul 21 21:07:47 2026 by rpki-client