$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c19a38f-182b-3873-a381-6fafa80313dc.roa File: 6c19a38f-182b-3873-a381-6fafa80313dc.roa (raw, json) Hash identifier: napJ3/dSYQcForiCyHIyM9RYOC4ajTqXTngYW3IxMaQ= Subject key identifier: 1B:BA:40:9C:0D:6F:D7:8B:88:0A:B9:9A:9F:F4:07:8B:1F:36:F3:5D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E885A4F708555F71DD44EF4F0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c19a38f-182b-3873-a381-6fafa80313dc.roa Signing time: Fri 17 Jul 2026 21:00:12 +0000 ROA not before: Fri 17 Jul 2026 21:00:12 +0000 ROA not after: Thu 15 Oct 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.33.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:88:5a:4f:70:85:55:f7:1d:d4:4e:f4:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 17 21:00:12 2026 GMT Not After : Oct 15 21:00:12 2026 GMT Subject: CN=ecdc10b9-69d8-40d7-84bf-e3160200fa1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7f:4a:32:5a:64:67:a9:7f:7f:ea:f5:a5:0b: 23:89:3d:f0:02:c1:03:4b:b0:8b:e5:41:11:7d:32: 82:55:a3:1f:f2:68:3d:77:06:07:33:11:36:34:49: 89:c9:91:b1:b8:05:63:77:19:a5:67:21:44:c1:64: 7f:c9:91:7a:b6:30:66:cc:e4:4f:1c:a7:61:af:3f: f6:9d:6a:a2:fb:ef:73:11:5c:3d:95:c0:be:fc:5e: 7a:92:b5:ad:79:37:1e:2d:25:b7:33:b2:e2:70:b9: 25:72:2a:dd:8e:0c:84:bb:48:cb:b2:3e:37:1f:33: 54:37:f3:94:a8:15:73:e9:01:c7:0b:00:21:00:a6: cd:83:d3:a2:c4:21:f9:53:50:f3:02:1e:cc:da:68: fc:05:df:0c:ab:49:be:b3:b4:fe:11:a8:a5:c8:e2: 35:71:a4:24:60:24:dd:8d:b3:54:48:30:6d:b6:f2: 30:86:d7:5e:9d:03:f1:a1:12:5d:e8:c4:2f:78:49: 16:90:fb:32:2e:53:6a:0e:55:c1:0c:8c:ac:24:7e: d8:5a:db:f0:04:07:ce:a8:07:e9:f3:56:a9:8f:3d: 33:85:a7:6c:58:b2:52:ac:28:08:5a:cc:16:68:d8: 70:77:8f:8b:98:be:3a:1c:3c:4e:54:f7:1e:7d:85: b8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:BA:40:9C:0D:6F:D7:8B:88:0A:B9:9A:9F:F4:07:8B:1F:36:F3:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c19a38f-182b-3873-a381-6fafa80313dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:43:91:39:a3:b7:40:93:8c:54:cb:c2:be:1f:f5:3b:ec:9f: 17:a3:d1:6d:d7:9f:92:fe:6f:50:14:d2:c9:99:bb:ea:ff:58: cb:29:73:3c:8a:e9:c0:27:a4:c3:0d:91:f6:65:bb:e0:64:d3: 6f:6f:c9:4e:80:dd:aa:0c:bc:ae:56:da:1b:fe:f9:c6:50:10: c9:cf:7a:e8:24:e8:8c:a2:ea:27:c6:b0:52:16:5e:b0:23:43: a3:30:73:52:bd:ea:e0:40:d9:3e:94:9a:40:8f:62:e8:03:14: 4e:7d:f4:e5:cc:74:c1:7d:bc:59:9f:d8:50:9b:62:e3:56:68: e9:a1:5c:56:0a:81:69:7d:91:c0:f2:e9:89:eb:5d:99:a5:83: fa:b0:c9:36:ce:a1:5b:4c:1d:34:7a:95:f3:8e:95:41:80:75: ce:d3:0c:6f:a3:b8:c1:fc:26:21:69:a8:68:dc:b4:fa:7a:55: 2b:d3:da:e9:54:5f:17:06:77:2a:9d:af:7a:48:39:ee:d7:4d: bb:10:58:9c:1c:1b:f7:7a:bb:98:72:4a:6c:34:f3:0e:e8:f5: 17:41:3f:e6:48:94:e4:b2:68:98:2f:0c:15:7d:b3:6c:92:b7: 1c:4b:01:c5:d2:bb:04:4a:61:a6:97:9e:5f:8d:a6:fa:59:f5: a7:4e:88:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWk9whVX3HdRO9PAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk ZWNkYzEwYjktNjlkOC00MGQ3LTg0YmYtZTMxNjAyMDBmYTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx39KMlpkZ6l/f+r1pQsjiT3wAsEDS7CL5UER fTKCVaMf8mg9dwYHMxE2NEmJyZGxuAVjdxmlZyFEwWR/yZF6tjBmzORPHKdhrz/2 nWqi++9zEVw9lcC+/F56krWteTceLSW3M7LicLklcirdjgyEu0jLsj43HzNUN/OU qBVz6QHHCwAhAKbNg9OixCH5U1DzAh7M2mj8Bd8Mq0m+s7T+EailyOI1caQkYCTd jbNUSDBttvIwhtdenQPxoRJd6MQveEkWkPsyLlNqDlXBDIysJH7YWtvwBAfOqAfp 81apjz0zhadsWLJSrCgIWswWaNhwd4+LmL46HDxOVPcefYW43wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBu6QJwNb9eLiAq5mp/0B4sfNvNdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmMxOWEzOGYtMTgyYi0z ODczLWEzODEtNmZhZmE4MDMxM2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9DkTmjt0CTjFTLwr4f9Tvsnxej0W3Xn5L+b1AU0smZu+r/WMspczyK 6cAnpMMNkfZlu+Bk029vyU6A3aoMvK5W2hv++cZQEMnPeugk6Iyi6ifGsFIWXrAj Q6Mwc1K96uBA2T6UmkCPYugDFE599OXMdMF9vFmf2FCbYuNWaOmhXFYKgWl9kcDy 6YnrXZmlg/qwyTbOoVtMHTR6lfOOlUGAdc7TDG+juMH8JiFpqGjctPp6VSvT2ulU XxcGdyqdr3pIOe7XTbsQWJwcG/d6u5hySmw08w7o9RdBP+ZIlOSyaJgvDBV9s2yS txxLAcXSuwRKYaaXnl+NpvpZ9adOiLM= -----END CERTIFICATE-----Generated at Tue Jul 21 21:06:43 2026 by rpki-client