$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/70cbfac7-7845-3c22-8003-b419f184ca4b.roa File: 70cbfac7-7845-3c22-8003-b419f184ca4b.roa (raw, json) Hash identifier: V8c3cl7pRT2ULWv0LseJ3JCCol24cGMpo4VKD2OMfSQ= Subject key identifier: AB:D9:5D:58:70:79:E6:B1:EC:27:AE:8D:7B:6C:AF:3D:1E:BE:C8:65 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E86F50544C60B20248E69F740 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/70cbfac7-7845-3c22-8003-b419f184ca4b.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 8069 IP address blocks: 20.33.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f5:05:44:c6:0b:20:24:8e:69:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=095b65a6-5459-408f-8e0c-d854eeeacae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c2:27:99:51:3d:78:47:57:e1:c8:a0:b3:41: 2a:b8:24:ef:17:37:a7:4d:f1:b2:66:cc:96:71:fb: 5f:46:48:d1:81:86:46:99:ad:f5:c7:39:52:b6:1f: f7:31:81:0e:ba:5c:94:2d:20:42:01:a4:84:ae:52: 27:53:fd:bb:f3:56:c4:46:6e:cf:4b:5e:e3:91:e4: 68:b3:4b:dd:26:14:84:07:fb:b0:01:95:b1:a5:51: 1b:e2:e2:c5:13:64:4c:23:f2:9b:28:e2:42:56:f1: 46:a8:8b:69:73:00:57:bb:7c:48:80:bc:45:6d:62: e6:87:19:94:83:15:c6:dd:aa:32:22:c8:ed:be:30: d6:4f:5f:91:37:03:35:b5:68:f0:b1:31:9b:1c:16: 0d:3d:f8:8e:4f:35:8f:27:80:dc:bf:8e:00:25:9c: b1:45:ac:e4:ba:90:bf:aa:5f:56:d3:9e:08:0e:bb: a0:a6:c4:3f:df:ce:28:48:bc:df:90:2d:7e:d8:5a: 4b:a7:0d:67:03:df:e3:2e:7a:f8:e6:13:6c:96:00: 29:9a:a3:3d:02:06:d2:ee:9e:39:1e:db:90:30:f9: ab:3c:de:54:d5:4d:da:d4:67:21:89:64:b3:5f:29: 07:83:e2:4a:6c:29:8b:70:31:97:f1:19:a2:75:36: f1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D9:5D:58:70:79:E6:B1:EC:27:AE:8D:7B:6C:AF:3D:1E:BE:C8:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/70cbfac7-7845-3c22-8003-b419f184ca4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:32:d8:26:05:76:79:d8:fc:c2:f8:9e:56:9d:d2:45:dd:e6: 78:7c:76:7b:88:01:7a:e4:e4:b5:08:c2:08:a1:50:a2:51:e8: 3b:26:c8:4e:ab:02:95:a9:ee:65:c1:1f:8f:c6:8c:7d:42:32: 7f:24:a9:77:48:04:f5:0d:fe:5f:60:19:ff:48:4c:68:8e:54: bb:23:a1:96:de:ff:6d:2b:5b:03:16:d4:d9:3f:12:93:4e:83: cb:88:51:26:32:a9:2b:73:cf:ec:2b:15:44:5a:70:98:fe:19: 0f:21:c4:ba:e2:26:e5:53:56:da:20:d2:da:94:46:9a:f5:e1: e7:c7:b3:b2:d2:6d:92:5f:f7:5b:7d:45:6f:c7:97:f6:51:db: 65:09:5d:d2:ed:17:0e:ef:13:0e:e5:e2:e8:f4:d6:24:7a:f5: 5f:db:28:a4:b7:5c:f4:86:18:e1:ec:07:12:13:b4:46:a8:40: 8e:24:6f:7e:1a:f3:2a:b9:71:5c:fc:94:91:ba:e2:56:d8:bc: 3e:75:5f:b4:0d:b1:07:94:4c:3f:68:7e:d8:b4:25:e3:9a:35: 2f:07:52:18:05:4f:6c:9a:c5:58:74:83:f7:65:08:3c:86:65: 49:96:f4:21:9c:9b:9c:0f:4c:e1:51:8e:d7:46:1e:b0:d5:c4: 05:1b:b1:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9QVExgsgJI5p90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk MDk1YjY1YTYtNTQ1OS00MDhmLThlMGMtZDg1NGVlZWFjYWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcInmVE9eEdX4cigs0EquCTvFzenTfGyZsyW cftfRkjRgYZGma31xzlSth/3MYEOulyULSBCAaSErlInU/2781bERm7PS17jkeRo s0vdJhSEB/uwAZWxpVEb4uLFE2RMI/KbKOJCVvFGqItpcwBXu3xIgLxFbWLmhxmU gxXG3aoyIsjtvjDWT1+RNwM1tWjwsTGbHBYNPfiOTzWPJ4Dcv44AJZyxRazkupC/ ql9W054IDrugpsQ/384oSLzfkC1+2FpLpw1nA9/jLnr45hNslgApmqM9AgbS7p45 HtuQMPmrPN5U1U3a1GchiWSzXykHg+JKbCmLcDGX8RmidTbxCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvZXVhweeax7CeujXtsrz0evshlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzBjYmZhYzctNzg0NS0z YzIyLTgwMDMtYjQxOWYxODRjYTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCExMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIy2CYFdnnY/ML4nlad0kXd5nh8dnuIAXrk5LUIwgihUKJR6DsmyE6r ApWp7mXBH4/GjH1CMn8kqXdIBPUN/l9gGf9ITGiOVLsjoZbe/20rWwMW1Nk/EpNO g8uIUSYyqStzz+wrFURacJj+GQ8hxLriJuVTVtog0tqURpr14efHs7LSbZJf91t9 RW/Hl/ZR22UJXdLtFw7vEw7l4uj01iR69V/bKKS3XPSGGOHsBxITtEaoQI4kb34a 8yq5cVz8lJG64lbYvD51X7QNsQeUTD9ofti0JeOaNS8HUhgFT2yaxVh0g/dlCDyG ZUmW9CGcm5wPTOFRjtdGHrDVxAUbsVA= -----END CERTIFICATE-----Generated at Tue Jul 21 21:08:09 2026 by rpki-client