$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/73bef919-66f8-303b-95b1-221664a1d714.roa File: 73bef919-66f8-303b-95b1-221664a1d714.roa (raw, json) Hash identifier: UgLkfQWK7uUc+4YsypA0SlLue432vXpHN/eGGCGYnVE= Subject key identifier: 8E:A5:C4:1F:91:16:40:E1:E9:2C:00:BB:4E:2C:44:17:8C:7F:86:84 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E779A298BE5680333C9A07D00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/73bef919-66f8-303b-95b1-221664a1d714.roa Signing time: Sat 11 Jul 2026 21:00:11 +0000 ROA not before: Sat 11 Jul 2026 21:00:11 +0000 ROA not after: Fri 09 Oct 2026 21:00:11 +0000 asID: 8069 IP address blocks: 20.33.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:77:9a:29:8b:e5:68:03:33:c9:a0:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 11 21:00:11 2026 GMT Not After : Oct 9 21:00:11 2026 GMT Subject: CN=ee8715ee-6ad4-43e1-a01a-b88b22792333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1d:7c:58:99:56:d9:c2:aa:5b:ca:f7:50:ad: 73:e0:24:12:48:28:40:0f:be:79:b4:7d:d5:57:d3: 2b:42:48:a9:4c:87:e9:50:8f:42:88:2e:ee:96:34: e1:77:21:49:eb:a0:4b:79:90:6f:96:cb:72:ab:0a: c0:5b:10:b2:f3:8b:a7:20:c9:73:bd:9d:4b:d6:d1: f3:96:93:8d:55:7b:6f:21:0a:1a:b1:d2:7a:95:a8: 36:cb:58:82:f0:fc:6f:6f:94:71:2f:6f:0c:a9:ab: 51:45:37:39:2e:9a:43:c4:fb:01:03:56:56:bc:b6: 2c:1a:78:c9:db:6a:16:e1:06:b1:2e:11:d4:ea:24: 11:89:ce:af:bb:80:bb:96:72:8a:93:6d:05:5e:a1: ee:63:e2:80:76:c9:f9:a6:fd:2c:48:31:13:c9:ca: 65:97:97:f7:1a:50:29:1f:81:b5:db:db:49:45:6f: 13:b8:3b:e2:0a:10:59:cb:28:98:df:6c:d3:fa:c9: 9b:0e:be:ad:99:1c:b1:ba:25:bf:96:95:53:1c:8a: 19:b3:6f:52:a5:13:6a:1e:d6:01:72:ff:ea:e6:df: a9:4e:7e:bd:91:7a:25:1b:56:e2:71:85:2a:05:ad: c8:5c:e3:ca:aa:85:92:66:d7:3e:bd:f9:9b:a6:84: 4e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A5:C4:1F:91:16:40:E1:E9:2C:00:BB:4E:2C:44:17:8C:7F:86:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/73bef919-66f8-303b-95b1-221664a1d714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:14:17:2f:dc:a4:af:8f:79:5f:40:60:39:b8:bc:a6:7a:f7: df:4b:0c:5e:28:00:b6:9f:2a:81:51:37:70:9a:aa:c2:46:16: 55:27:dd:6b:2d:a9:75:d1:8c:81:cb:c2:f3:df:d9:ac:71:45: 03:46:fb:eb:3c:11:d3:28:4f:26:08:e4:37:92:2f:a0:1f:bd: ef:4f:36:88:2d:ca:d6:0e:c2:e5:37:47:b7:36:8e:71:e2:4e: 7c:d1:8c:14:5f:8a:f2:3a:62:c5:05:6f:4b:18:29:8a:56:c7: 1f:3f:ea:07:18:3b:52:27:b0:a7:d2:75:ab:d8:30:b1:e3:73: 42:a2:c4:fe:10:ff:21:4a:27:fa:f7:73:3d:72:9d:d8:92:49: 22:af:61:37:4a:de:92:da:dd:aa:c9:3c:d3:61:a9:d4:8f:20: 47:98:85:03:63:e4:9b:4a:a6:00:dc:2d:0b:ac:74:cf:5b:ef: a1:b0:0c:d8:28:19:3d:bb:a3:8b:68:83:ae:ff:77:b2:ec:6b: d1:cb:16:e5:86:66:59:1f:d6:89:39:4d:a3:8e:52:9f:af:28: 02:fa:1d:9e:94:9f:06:29:56:4a:63:0e:69:8b:51:77:76:ff: 8d:ba:59:84:17:17:3c:51:bb:b7:fc:0f:43:f3:e1:c0:95:81: 1f:47:ae:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE53mimL5WgDM8mgfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk ZWU4NzE1ZWUtNmFkNC00M2UxLWEwMWEtYjg4YjIyNzkyMzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR18WJlW2cKqW8r3UK1z4CQSSChAD755tH3V V9MrQkipTIfpUI9CiC7uljThdyFJ66BLeZBvlstyqwrAWxCy84unIMlzvZ1L1tHz lpONVXtvIQoasdJ6lag2y1iC8Pxvb5RxL28MqatRRTc5LppDxPsBA1ZWvLYsGnjJ 22oW4QaxLhHU6iQRic6vu4C7lnKKk20FXqHuY+KAdsn5pv0sSDETycpll5f3GlAp H4G129tJRW8TuDviChBZyyiY32zT+smbDr6tmRyxuiW/lpVTHIoZs29SpRNqHtYB cv/q5t+pTn69kXolG1bicYUqBa3IXOPKqoWSZtc+vfmbpoROqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6lxB+RFkDh6SwAu04sRBeMf4aEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzNiZWY5MTktNjZmOC0z MDNiLTk1YjEtMjIxNjY0YTFkNzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCF6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEUFy/cpK+PeV9AYDm4vKZ6999LDF4oALafKoFRN3CaqsJGFlUn3Wst qXXRjIHLwvPf2axxRQNG++s8EdMoTyYI5DeSL6Afve9PNogtytYOwuU3R7c2jnHi TnzRjBRfivI6YsUFb0sYKYpWxx8/6gcYO1InsKfSdavYMLHjc0KixP4Q/yFKJ/r3 cz1yndiSSSKvYTdK3pLa3arJPNNhqdSPIEeYhQNj5JtKpgDcLQusdM9b76GwDNgo GT27o4tog67/d7Lsa9HLFuWGZlkf1ok5TaOOUp+vKAL6HZ6UnwYpVkpjDmmLUXd2 /426WYQXFzxRu7f8D0Pz4cCVgR9HrmU= -----END CERTIFICATE-----Generated at Tue Jul 21 21:08:53 2026 by rpki-client