$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c998ab9-7b2e-30d5-97fd-aa4335abb614.roa File: 5c998ab9-7b2e-30d5-97fd-aa4335abb614.roa (raw, json) Hash identifier: mqXi5AptilpJV544iU3SU2SKbOl0wVWBL5Tgs6PuZW4= Subject key identifier: 66:20:37:92:01:F0:D1:AB:AC:99:86:86:BF:A4:29:58:3E:4B:A8:98 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E8DEFAE6490AD170F49F78900 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c998ab9-7b2e-30d5-97fd-aa4335abb614.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.33.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:ae:64:90:ad:17:0f:49:f7:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=064cf7e0-6f9c-46fc-b030-ef99cd5956ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:18:ad:58:f8:7a:fb:7d:ba:4a:43:bd:91:df: c6:ee:38:83:b8:b5:d3:10:09:57:68:0e:81:8e:a4: 66:9a:b1:97:37:c8:7c:13:2d:49:e3:ff:55:80:8a: 6e:ee:a3:93:b3:0a:83:8f:c0:4e:16:f9:52:7e:ba: f6:13:87:97:a4:16:0c:a5:83:fb:62:03:5f:6d:76: ff:46:82:af:d6:7a:e5:87:cb:09:13:56:fa:86:4c: 04:80:9a:52:43:75:38:51:0b:72:7a:e0:17:b3:de: c2:aa:9e:08:27:69:ee:be:ec:c8:ec:b6:16:af:99: 0c:f4:47:8e:57:22:e0:cd:ab:d0:b1:2b:97:2b:76: 1c:8e:28:c6:53:1e:a9:ee:20:58:f5:ad:e5:5d:a3: 5b:12:50:c9:f2:8e:75:11:47:91:6d:f3:06:98:be: ff:fb:5c:5b:b0:1b:8d:1a:02:70:85:92:da:a7:3c: 5d:75:37:f0:09:7e:d3:c7:e1:7f:6e:46:82:cb:3e: a0:18:4c:2c:78:e0:32:25:bf:bc:a8:84:12:c7:bb: eb:f7:b1:b1:6b:85:3e:22:6a:75:c0:51:ce:cb:fc: 54:41:52:4b:45:bf:7b:92:9a:e8:a8:d2:e7:c3:dd: 09:ae:45:f1:b2:a7:c1:42:a2:9e:c0:6b:f3:61:4a: 0c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:20:37:92:01:F0:D1:AB:AC:99:86:86:BF:A4:29:58:3E:4B:A8:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c998ab9-7b2e-30d5-97fd-aa4335abb614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:dc:24:b3:4a:83:59:43:ec:f7:f6:8c:4f:5c:88:e4:2b:35: d1:8f:40:b6:48:36:f8:8a:a5:8d:71:e7:93:ab:42:97:5a:ac: ff:83:16:f5:69:7b:50:96:57:a7:71:77:33:b0:df:3b:9d:6d: 34:8b:85:a1:ce:73:14:03:48:34:7f:d9:b5:9b:cb:4f:f8:4c: 60:d5:27:72:ac:f2:da:04:6e:ca:04:35:81:47:20:45:3c:b7: 98:1e:91:df:8b:01:5f:62:7f:a2:da:4b:a9:13:fe:0a:71:e6: cc:80:79:ae:8a:f1:93:ea:20:06:ca:9f:83:7d:e9:98:7d:dd: 7b:b1:42:cd:40:92:f0:88:4b:23:59:17:1e:99:e0:98:d0:24: 8b:2f:f4:a3:5b:a5:b4:0c:e1:ef:42:64:90:82:01:f8:58:f4: d1:51:da:ff:82:07:64:f4:db:24:39:16:34:11:15:b8:1c:8a: d1:a1:5f:20:15:29:70:d0:6b:ed:0b:26:ab:c6:e7:4c:ce:db: f3:a2:b1:f2:da:14:95:d1:a3:1a:e8:15:26:aa:cd:a8:8d:89: 83:6e:75:2a:a2:3d:40:13:fa:f0:53:c3:1a:41:8d:87:1f:1b: 8d:23:b3:2f:1a:d2:6a:b3:ac:7c:0c:37:e4:38:63:de:25:c1: 62:3b:e9:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N765kkK0XD0n3iQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk MDY0Y2Y3ZTAtNmY5Yy00NmZjLWIwMzAtZWY5OWNkNTk1NmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBitWPh6+326SkO9kd/G7jiDuLXTEAlXaA6B jqRmmrGXN8h8Ey1J4/9VgIpu7qOTswqDj8BOFvlSfrr2E4eXpBYMpYP7YgNfbXb/ RoKv1nrlh8sJE1b6hkwEgJpSQ3U4UQtyeuAXs97Cqp4IJ2nuvuzI7LYWr5kM9EeO VyLgzavQsSuXK3YcjijGUx6p7iBY9a3lXaNbElDJ8o51EUeRbfMGmL7/+1xbsBuN GgJwhZLapzxddTfwCX7Tx+F/bkaCyz6gGEwseOAyJb+8qIQSx7vr97Gxa4U+Imp1 wFHOy/xUQVJLRb97kproqNLnw90JrkXxsqfBQqKewGvzYUoMvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYgN5IB8NGrrJmGhr+kKVg+S6iYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWM5OThhYjktN2IyZS0z MGQ1LTk3ZmQtYWE0MzM1YWJiNjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPcJLNKg1lD7Pf2jE9ciOQrNdGPQLZINviKpY1x55OrQpdarP+DFvVp e1CWV6dxdzOw3zudbTSLhaHOcxQDSDR/2bWby0/4TGDVJ3Ks8toEbsoENYFHIEU8 t5gekd+LAV9if6LaS6kT/gpx5syAea6K8ZPqIAbKn4N96Zh93XuxQs1AkvCISyNZ Fx6Z4JjQJIsv9KNbpbQM4e9CZJCCAfhY9NFR2v+CB2T02yQ5FjQRFbgcitGhXyAV KXDQa+0LJqvG50zO2/OisfLaFJXRoxroFSaqzaiNiYNudSqiPUAT+vBTwxpBjYcf G40jsy8a0mqzrHwMN+Q4Y94lwWI76Zg= -----END CERTIFICATE-----Generated at Tue Jul 21 21:07:20 2026 by rpki-client