$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/848376e0-ddab-3a49-a842-785182b9be6b.roa File: 848376e0-ddab-3a49-a842-785182b9be6b.roa (raw, json) Hash identifier: iKyoaaZP2P1z01PtECabXVVdOGZIcRZ8RLDmiNawc0I= Subject key identifier: 62:35:30:26:D3:88:56:CD:3F:A8:F4:7E:36:1F:B9:E9:7F:34:A0:A3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E86F505C657712929D1D28940 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/848376e0-ddab-3a49-a842-785182b9be6b.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 8069 IP address blocks: 20.33.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f5:05:c6:57:71:29:29:d1:d2:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=cf0f3874-f830-4195-8ff6-17c8f40d4741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f2:4b:df:db:b7:e5:73:70:5d:c3:32:b2:95: 0d:1b:84:9a:22:82:38:84:ac:43:dc:de:81:58:07: 58:07:c2:54:23:28:da:98:a9:e3:09:c6:91:c0:27: 79:e3:81:ae:ab:a9:ac:61:28:d1:89:69:c6:d3:fb: 7c:ba:d9:64:7d:d7:6e:1d:33:1d:d0:49:d9:d9:68: 1c:8c:14:af:20:d0:61:dd:6a:a8:71:42:43:52:6e: 30:ef:d6:84:80:e7:32:15:de:90:96:9e:8e:75:22: 7b:b4:3d:81:02:55:d3:db:82:22:45:f6:f4:f6:9a: 66:ec:da:7b:6b:93:51:68:5b:49:47:4b:e5:06:4a: ef:fe:2c:ea:a0:84:78:06:c4:b7:76:4e:92:4b:28: 56:24:2d:95:29:0f:29:e5:da:c3:66:2c:7a:46:28: f9:86:a6:7b:09:7e:ca:32:65:d2:9c:71:d4:12:53: 71:7e:e5:88:dc:b2:9c:14:55:9c:24:fd:e4:99:04: 47:93:91:fa:62:4f:b5:5b:fa:19:d7:92:24:4f:6f: 82:b8:1b:60:fb:3c:8b:88:86:f6:30:2f:20:76:de: cb:24:17:f9:a7:3f:99:ec:f1:4b:60:c4:06:96:65: 3c:73:40:55:21:64:f6:8f:b0:7f:a3:cc:22:d5:56: ee:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:35:30:26:D3:88:56:CD:3F:A8:F4:7E:36:1F:B9:E9:7F:34:A0:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/848376e0-ddab-3a49-a842-785182b9be6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:aa:ed:bc:83:4e:54:ee:c7:ea:9c:d5:2b:da:a3:1e:e9:6d: 88:4a:e9:58:6e:e1:95:8e:e0:09:6c:72:53:2c:51:da:f7:7f: e4:63:72:2f:19:a2:30:56:99:ef:7e:e5:dd:1c:7f:cd:20:08: 76:b6:c9:b8:2c:ed:38:30:a0:f5:16:1f:96:93:6b:e1:2d:48: 0f:f6:04:70:00:44:54:bc:a0:23:19:df:b7:77:c8:73:89:96: c7:4b:bf:a9:0b:93:ae:a5:d3:b2:59:32:5f:9c:ae:81:e1:e8: 8f:32:7e:e1:b4:25:10:97:aa:1f:e4:b6:c1:9c:43:11:29:af: 5a:10:90:2e:3a:c8:66:ac:00:1d:09:2e:45:da:f0:5d:2a:e1: 19:eb:76:dd:36:1a:06:8f:4b:c1:96:cf:60:eb:5b:ef:6b:d0: 88:42:82:d5:60:85:cd:62:6a:3c:2e:31:21:cf:e2:c9:87:1f: ef:65:2e:b2:61:03:4d:49:6f:14:bb:62:f1:67:69:f0:ee:c2: a5:4e:58:14:3b:0b:6e:45:73:40:07:e4:c2:3d:aa:8b:0a:9c: 19:5f:02:f8:54:6f:1e:94:0c:ed:aa:1a:0e:10:e8:75:34:cc: 5e:3b:14:88:78:30:02:37:e1:4f:a3:2d:45:8f:26:7c:0f:e6: 21:2d:57:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9QXGV3EpKdHSiUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk Y2YwZjM4NzQtZjgzMC00MTk1LThmZjYtMTdjOGY0MGQ0NzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPJL39u35XNwXcMyspUNG4SaIoI4hKxD3N6B WAdYB8JUIyjamKnjCcaRwCd544Guq6msYSjRiWnG0/t8utlkfdduHTMd0EnZ2Wgc jBSvINBh3WqocUJDUm4w79aEgOcyFd6Qlp6OdSJ7tD2BAlXT24IiRfb09ppm7Np7 a5NRaFtJR0vlBkrv/izqoIR4BsS3dk6SSyhWJC2VKQ8p5drDZix6Rij5hqZ7CX7K MmXSnHHUElNxfuWI3LKcFFWcJP3kmQRHk5H6Yk+1W/oZ15IkT2+CuBtg+zyLiIb2 MC8gdt7LJBf5pz+Z7PFLYMQGlmU8c0BVIWT2j7B/o8wi1Vbu/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGI1MCbTiFbNP6j0fjYfuel/NKCjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODQ4Mzc2ZTAtZGRhYi0z YTQ5LWE4NDItNzg1MTgyYjliZTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWq7byDTlTux+qc1Svaox7pbYhK6Vhu4ZWO4AlsclMsUdr3f+Rjci8Z ojBWme9+5d0cf80gCHa2ybgs7TgwoPUWH5aTa+EtSA/2BHAARFS8oCMZ37d3yHOJ lsdLv6kLk66l07JZMl+croHh6I8yfuG0JRCXqh/ktsGcQxEpr1oQkC46yGasAB0J LkXa8F0q4Rnrdt02GgaPS8GWz2DrW+9r0IhCgtVghc1iajwuMSHP4smHH+9lLrJh A01JbxS7YvFnafDuwqVOWBQ7C25Fc0AH5MI9qosKnBlfAvhUbx6UDO2qGg4Q6HU0 zF47FIh4MAI34U+jLUWPJnwP5iEtV8w= -----END CERTIFICATE-----Generated at Tue Jul 21 21:07:49 2026 by rpki-client