$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/826b271f-edee-3676-98e4-6d4c334e95f2.roa File: 826b271f-edee-3676-98e4-6d4c334e95f2.roa (raw, json) Hash identifier: Y1L2fAT2CLsCr8+PoqOa29tP1bPpw+fuOB0eum+rEPg= Subject key identifier: 72:8B:1C:8D:C0:33:73:FC:BD:66:CC:E4:CE:1A:7D:1B:BC:79:21:E7 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E779A29B48C0FD494C7AC6700 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/826b271f-edee-3676-98e4-6d4c334e95f2.roa Signing time: Sat 11 Jul 2026 21:00:11 +0000 ROA not before: Sat 11 Jul 2026 21:00:11 +0000 ROA not after: Fri 09 Oct 2026 21:00:11 +0000 asID: 8069 IP address blocks: 20.33.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:77:9a:29:b4:8c:0f:d4:94:c7:ac:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 11 21:00:11 2026 GMT Not After : Oct 9 21:00:11 2026 GMT Subject: CN=39d6e77c-6a2d-40c1-af9e-0fe03f6b5308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:31:23:78:cd:b3:96:9d:94:4c:2b:5e:3a:ab: 91:a2:b4:08:5c:25:95:01:60:20:d3:64:7d:1a:7c: 75:0b:5b:6a:fd:81:b0:0a:52:60:25:ba:86:f8:19: 2e:c3:ab:41:d5:94:e5:05:fe:bb:96:4c:8a:f0:ab: f4:13:00:6a:3b:34:da:86:1c:9a:ce:df:49:fc:47: 96:7e:7a:6f:6a:fb:aa:b6:f8:18:77:a0:2c:56:1b: 55:a3:a1:45:51:1c:e4:59:3c:fa:2f:23:04:9f:bf: a1:d1:76:ba:6a:ac:1b:2b:98:fa:9b:8d:36:ae:11: 31:d7:09:28:59:f6:70:72:d4:5d:3e:83:86:84:5f: a7:47:9d:53:05:7a:98:58:1d:f5:55:b6:d8:12:a5: 33:93:9c:c3:af:1e:2d:d3:e7:a2:ad:3e:6a:73:76: 4e:91:0a:57:b9:30:c6:7c:96:a0:c2:02:17:6d:e7: 60:fc:cf:a7:74:b1:25:48:a1:ae:66:a0:da:03:4d: a9:b8:68:bd:60:b9:5b:73:b3:2e:1b:7c:06:94:dd: 9b:75:4c:77:f8:38:53:fd:32:00:c1:5f:89:9e:27: b7:23:c4:44:64:4c:ee:60:82:1d:0f:b4:16:a8:ca: 63:5f:03:95:5a:ee:5b:7a:dc:97:a1:e9:48:78:4e: bd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8B:1C:8D:C0:33:73:FC:BD:66:CC:E4:CE:1A:7D:1B:BC:79:21:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/826b271f-edee-3676-98e4-6d4c334e95f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:43:0f:13:ed:48:4a:89:e6:dc:a2:47:a1:31:ea:46:19:b0: 44:6a:97:ac:da:6b:51:26:41:e4:cc:ad:cb:d4:bb:ba:54:99: bf:10:86:62:9f:db:91:29:60:d2:2b:fc:00:14:a5:1c:01:9b: 8d:6d:cc:ea:c0:3e:f3:80:08:50:81:22:97:0d:51:28:9a:ad: b3:35:5d:71:f4:41:cb:69:06:69:c7:ac:97:db:82:c1:39:ad: 3e:59:d8:23:98:37:0a:ce:e0:ef:22:7a:73:60:e0:56:0b:2d: 5d:21:19:e2:29:c7:e9:41:3c:fd:ef:1d:b2:01:d4:5d:78:00: c4:4c:56:48:54:6d:81:c6:b4:89:53:55:ad:93:ca:84:96:57: 87:bc:fe:cf:a3:5d:d8:6f:7c:ee:7e:04:f7:72:f2:65:b1:ab: 27:24:8c:58:64:e4:ac:68:f8:0d:4d:61:14:4d:9c:85:45:6f: d1:3a:d1:d3:6f:1e:b0:1a:d0:98:0e:f4:b2:2e:67:16:16:3d: 7b:4d:aa:c2:38:5d:f5:ea:bc:7f:70:9b:6f:5b:69:c7:a8:95: a6:7b:f3:04:04:9a:f3:ae:3f:43:40:a5:4d:9e:47:c2:1f:29: 5e:2a:2a:b6:c3:83:20:90:b2:86:a7:0e:5c:5f:38:ad:df:8f: a8:df:f7:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE53mim0jA/UlMesZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk MzlkNmU3N2MtNmEyZC00MGMxLWFmOWUtMGZlMDNmNmI1MzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDEjeM2zlp2UTCteOquRorQIXCWVAWAg02R9 Gnx1C1tq/YGwClJgJbqG+Bkuw6tB1ZTlBf67lkyK8Kv0EwBqOzTahhyazt9J/EeW fnpvavuqtvgYd6AsVhtVo6FFURzkWTz6LyMEn7+h0Xa6aqwbK5j6m402rhEx1wko WfZwctRdPoOGhF+nR51TBXqYWB31VbbYEqUzk5zDrx4t0+eirT5qc3ZOkQpXuTDG fJagwgIXbedg/M+ndLElSKGuZqDaA02puGi9YLlbc7MuG3wGlN2bdUx3+DhT/TIA wV+Jnie3I8REZEzuYIIdD7QWqMpjXwOVWu5betyXoelIeE694wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKLHI3AM3P8vWbM5M4afRu8eSHnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODI2YjI3MWYtZWRlZS0z Njc2LTk4ZTQtNmQ0YzMzNGU5NWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9DDxPtSEqJ5tyiR6Ex6kYZsERql6zaa1EmQeTMrcvUu7pUmb8QhmKf 25EpYNIr/AAUpRwBm41tzOrAPvOACFCBIpcNUSiarbM1XXH0QctpBmnHrJfbgsE5 rT5Z2COYNwrO4O8ienNg4FYLLV0hGeIpx+lBPP3vHbIB1F14AMRMVkhUbYHGtIlT Va2TyoSWV4e8/s+jXdhvfO5+BPdy8mWxqyckjFhk5Kxo+A1NYRRNnIVFb9E60dNv HrAa0JgO9LIuZxYWPXtNqsI4XfXqvH9wm29baceolaZ78wQEmvOuP0NApU2eR8If KV4qKrbDgyCQsoanDlxfOK3fj6jf9+0= -----END CERTIFICATE-----Generated at Tue Jul 21 21:06:53 2026 by rpki-client