$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/798adac3-d14c-35f6-92cf-8429aea1bb8e.roa File: 798adac3-d14c-35f6-92cf-8429aea1bb8e.roa (raw, json) Hash identifier: 39eLOgZQ+ImP3nidDo5DURQmmvqZNPElscqnfeiY1iU= Subject key identifier: 71:24:03:BC:B9:FC:A9:18:1E:94:20:08:A1:14:F9:39:50:8C:6E:A5 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E86F504CC6A6A0BAAABBAF520 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/798adac3-d14c-35f6-92cf-8429aea1bb8e.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 8069 IP address blocks: 20.33.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f5:04:cc:6a:6a:0b:aa:ab:ba:f5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=7e3e90b9-eaa2-4d93-a08d-ee1337cfa3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:36:04:eb:a1:9c:1f:20:25:d3:a0:cd:b0:49: 6d:7d:30:a7:d0:dc:2a:ce:f2:34:f2:fd:61:ae:5b: ab:2d:66:1f:fe:e6:c7:65:be:78:f2:d0:45:7c:f4: 4f:a3:ff:ac:29:4b:3d:62:9b:d6:25:d2:a2:a0:b8: 22:19:0c:81:bd:d6:8a:53:63:0c:32:d3:a5:57:2c: 7f:4c:f5:d8:49:ec:f0:8f:db:58:a6:de:15:6f:64: ea:72:33:27:5f:9c:f0:04:a4:48:94:a6:37:c3:4d: f4:98:d3:1a:a5:25:ed:32:ef:62:ce:ba:0e:30:2f: 46:91:8c:60:36:ff:8e:e9:08:67:cf:22:1e:87:d3: 0d:d0:6b:82:40:d4:0d:94:bd:29:2a:c4:85:46:1e: da:6a:12:a5:0b:b0:71:40:2e:0e:a3:55:66:85:33: 63:30:40:45:5c:96:b6:e9:5d:f9:9d:40:6e:a0:5b: 3f:29:72:09:f8:75:64:80:26:1b:e6:b5:30:0a:77: 35:1f:a3:4e:e0:d7:5c:1a:ce:b7:e8:8f:82:45:b4: b1:ca:63:2d:84:84:f9:37:c7:27:46:67:99:08:fe: 71:dc:45:aa:77:c0:3f:eb:ab:4e:1e:b8:84:38:3d: 14:e2:58:8f:ee:41:00:26:e1:26:da:0f:f6:85:df: db:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:24:03:BC:B9:FC:A9:18:1E:94:20:08:A1:14:F9:39:50:8C:6E:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/798adac3-d14c-35f6-92cf-8429aea1bb8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:52:67:70:c1:3c:0d:7c:e7:6b:83:0c:8e:60:b8:8e:9e:8f: 29:31:72:42:10:e6:e1:f6:40:f3:d7:e6:e4:b4:5a:c3:d6:42: 2b:2a:35:c1:34:99:19:b9:bc:28:91:c8:0b:c3:2a:86:3f:f5: e7:51:3a:cc:5c:07:a6:a5:1d:c5:07:bd:48:f5:10:6a:67:0b: de:33:32:4b:3f:c3:58:e9:aa:ca:16:54:cb:85:32:f5:59:97: 66:7b:7e:9c:d3:b4:91:06:6a:06:5b:cc:94:2b:e8:f8:9b:b8: fe:b9:e1:ad:16:b5:4b:17:db:fa:1b:73:32:4a:0c:42:b2:77: 5d:48:5a:fa:6e:fc:91:79:60:03:23:48:af:81:a7:39:71:a0: d5:43:b4:e3:ad:e6:14:5f:72:b1:fa:75:8d:0b:95:85:b4:f9: 3b:32:60:5f:69:58:49:42:7b:43:9d:1f:66:bb:54:35:b6:3c: 54:33:6d:cb:f2:16:22:35:db:86:74:25:1e:ce:54:43:c6:86: f2:d4:db:f7:2a:6d:5b:a5:ee:da:0f:12:3e:35:e6:e7:6b:26: ef:1b:45:07:d0:1d:9e:10:c5:ec:97:84:a6:58:cd:85:2a:2f: 97:7f:c7:09:2f:28:11:0f:b3:52:99:b7:20:69:0a:9e:5d:c3: 6c:a3:b3:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9QTMamoLqqu69SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk N2UzZTkwYjktZWFhMi00ZDkzLWEwOGQtZWUxMzM3Y2ZhM2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTYE66GcHyAl06DNsEltfTCn0NwqzvI08v1h rlurLWYf/ubHZb548tBFfPRPo/+sKUs9YpvWJdKioLgiGQyBvdaKU2MMMtOlVyx/ TPXYSezwj9tYpt4Vb2TqcjMnX5zwBKRIlKY3w030mNMapSXtMu9izroOMC9GkYxg Nv+O6QhnzyIeh9MN0GuCQNQNlL0pKsSFRh7aahKlC7BxQC4Oo1VmhTNjMEBFXJa2 6V35nUBuoFs/KXIJ+HVkgCYb5rUwCnc1H6NO4NdcGs636I+CRbSxymMthIT5N8cn RmeZCP5x3EWqd8A/66tOHriEOD0U4liP7kEAJuEm2g/2hd/bQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEkA7y5/KkYHpQgCKEU+TlQjG6lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzk4YWRhYzMtZDE0Yy0z NWY2LTkyY2YtODQyOWFlYTFiYjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRSZ3DBPA1852uDDI5guI6ejykxckIQ5uH2QPPX5uS0WsPWQisqNcE0 mRm5vCiRyAvDKoY/9edROsxcB6alHcUHvUj1EGpnC94zMks/w1jpqsoWVMuFMvVZ l2Z7fpzTtJEGagZbzJQr6PibuP654a0WtUsX2/obczJKDEKyd11IWvpu/JF5YAMj SK+BpzlxoNVDtOOt5hRfcrH6dY0LlYW0+TsyYF9pWElCe0OdH2a7VDW2PFQzbcvy FiI124Z0JR7OVEPGhvLU2/cqbVul7toPEj415udrJu8bRQfQHZ4QxeyXhKZYzYUq L5d/xwkvKBEPs1KZtyBpCp5dw2yjs2Y= -----END CERTIFICATE-----Generated at Tue Jul 21 21:07:59 2026 by rpki-client