$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5d47e3e0-2d00-3923-b4da-a192da7e5a3d.roa File: 5d47e3e0-2d00-3923-b4da-a192da7e5a3d.roa (raw, json) Hash identifier: vUJQEmF61O8a/D5Tog2AcFTqruTX+2fgOKCYo4odM5Y= Subject key identifier: 3E:D5:07:E3:D9:23:D9:5C:E0:9E:17:2E:B3:25:33:47:63:F7:DA:3F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E4129E17544A59CBFB272FE80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5d47e3e0-2d00-3923-b4da-a192da7e5a3d.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 8069 IP address blocks: 20.33.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:e1:75:44:a5:9c:bf:b2:72:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=1e324ca3-0d24-4cac-a884-9025a0897672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:35:a7:c6:e3:0d:89:ed:41:36:0d:94:1c:74: a6:2b:a0:dc:bc:ae:ea:d5:da:01:2d:c1:97:3e:93: 68:6c:2e:89:1e:85:00:ad:ff:4f:9f:d4:89:88:e1: cf:47:c1:f8:27:4e:13:e7:69:c7:2e:8d:6f:2e:84: b4:1e:c0:fd:37:d1:27:24:82:5f:1c:1c:24:9e:dc: 8d:ca:f1:42:c1:01:55:b1:30:49:9e:d1:92:ff:db: 28:48:0a:39:c7:f0:b4:60:36:46:a3:d4:72:7c:ac: 4c:d8:3b:d1:1c:b3:65:40:e9:34:5a:0e:1b:7f:12: b4:4d:1d:6e:a8:41:66:a8:4b:dc:02:15:64:19:87: 50:a4:94:28:b6:cd:0f:fa:1b:74:c6:f6:b7:91:9e: c0:73:99:98:56:fe:93:4d:2e:ce:c6:c8:89:5c:c1: e6:a3:28:8e:be:33:27:6e:bb:10:f9:d4:bb:6e:13: 4a:c8:ef:8e:99:32:b0:9d:89:dd:ed:00:b3:76:f0: ca:71:89:a9:8a:cd:f4:b9:14:ac:a4:6b:fe:86:6f: d9:19:df:17:06:6e:3f:b2:2b:1d:f6:73:13:8b:bd: 5e:79:4c:e8:07:05:1f:33:13:f6:e8:9e:d2:6b:47: 70:92:d3:e8:ec:39:22:aa:44:83:15:4e:0b:20:ee: 9c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D5:07:E3:D9:23:D9:5C:E0:9E:17:2E:B3:25:33:47:63:F7:DA:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5d47e3e0-2d00-3923-b4da-a192da7e5a3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:8f:05:48:e3:b9:f4:60:57:40:cf:e5:01:69:29:30:85:24: d8:f9:fc:5c:27:72:b5:f2:54:0a:73:1c:24:ff:0f:98:08:8c: 0b:98:f6:17:f2:56:14:a5:33:f2:eb:32:e1:40:eb:fb:50:d3: 7f:e8:5f:d4:ad:98:62:86:d4:2d:95:81:a5:44:9f:16:7d:43: 0a:cf:59:2f:a2:59:f6:76:c6:f8:4b:be:6c:7e:c9:85:cc:43: 21:ad:76:4d:10:a1:2b:d2:a5:6f:6c:9a:69:14:9b:9d:b6:a4: f1:15:c5:ff:3b:29:bd:96:02:b7:12:f8:59:40:21:29:d6:ee: b3:a8:c5:83:f4:93:70:4c:e3:c3:eb:54:4f:70:45:d6:b9:55: 71:da:53:35:c6:2d:ba:5a:85:88:e8:1f:f7:7c:27:60:28:73: cc:b6:f7:27:8e:33:72:ee:1d:e7:67:58:f5:a4:4d:83:45:78: df:5e:16:0b:e9:52:ec:94:b6:4c:51:4f:12:2a:a7:35:15:d8: 2b:b3:fd:a5:5b:6f:dd:df:d0:3e:10:23:ca:04:b9:ab:49:0e: bd:39:5a:ff:a8:50:ed:c1:33:1b:e4:25:89:7d:a1:d1:64:d4: 44:e9:e4:df:63:37:b7:07:02:cb:14:81:ea:6b:51:a3:fc:bd: 88:90:3b:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKeF1RKWcv7Jy/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk MWUzMjRjYTMtMGQyNC00Y2FjLWE4ODQtOTAyNWEwODk3NjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzWnxuMNie1BNg2UHHSmK6DcvK7q1doBLcGX PpNobC6JHoUArf9Pn9SJiOHPR8H4J04T52nHLo1vLoS0HsD9N9EnJIJfHBwkntyN yvFCwQFVsTBJntGS/9soSAo5x/C0YDZGo9RyfKxM2DvRHLNlQOk0Wg4bfxK0TR1u qEFmqEvcAhVkGYdQpJQots0P+ht0xva3kZ7Ac5mYVv6TTS7OxsiJXMHmoyiOvjMn brsQ+dS7bhNKyO+OmTKwnYnd7QCzdvDKcYmpis30uRSspGv+hm/ZGd8XBm4/sisd 9nMTi71eeUzoBwUfMxP26J7Sa0dwktPo7DkiqkSDFU4LIO6cYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7VB+PZI9lc4J4XLrMlM0dj99o/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWQ0N2UzZTAtMmQwMC0z OTIzLWI0ZGEtYTE5MmRhN2U1YTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICPBUjjufRgV0DP5QFpKTCFJNj5/FwncrXyVApzHCT/D5gIjAuY9hfy VhSlM/LrMuFA6/tQ03/oX9StmGKG1C2VgaVEnxZ9QwrPWS+iWfZ2xvhLvmx+yYXM QyGtdk0QoSvSpW9smmkUm522pPEVxf87Kb2WArcS+FlAISnW7rOoxYP0k3BM48Pr VE9wRda5VXHaUzXGLbpahYjoH/d8J2Aoc8y29yeOM3LuHednWPWkTYNFeN9eFgvp UuyUtkxRTxIqpzUV2Cuz/aVbb93f0D4QI8oEuatJDr05Wv+oUO3BMxvkJYl9odFk 1ETp5N9jN7cHAssUgeprUaP8vYiQO34= -----END CERTIFICATE-----Generated at Tue Jul 21 21:05:53 2026 by rpki-client