$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/95f14b3c-2287-3ac7-91a0-5e45572c8e25.roa File: 95f14b3c-2287-3ac7-91a0-5e45572c8e25.roa (raw, json) Hash identifier: Ny4dVHQahCcfJVKp3z8qYrnDD5dZ3eXyf9sXQMBz9I4= Subject key identifier: 8E:1E:B2:EA:80:0B:9E:40:BE:7D:4F:25:16:47:4D:3F:0F:00:C6:ED Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E7BCA31857EE04D614BA573A0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/95f14b3c-2287-3ac7-91a0-5e45572c8e25.roa Signing time: Mon 13 Jul 2026 09:00:12 +0000 ROA not before: Mon 13 Jul 2026 09:00:12 +0000 ROA not after: Sun 11 Oct 2026 09:00:12 +0000 asID: 8069 IP address blocks: 20.33.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7b:ca:31:85:7e:e0:4d:61:4b:a5:73:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 13 09:00:12 2026 GMT Not After : Oct 11 09:00:12 2026 GMT Subject: CN=997f174d-f7d6-412b-9093-b127a4a4fd30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:38:19:56:36:0e:bf:55:6c:27:ee:b3:7d:1e: 84:22:6f:00:4b:f1:46:8b:de:4a:c3:7c:19:19:7f: 93:aa:93:45:32:6f:6b:c9:9c:0c:12:d0:8d:0d:cb: 85:c3:85:32:65:b8:d9:4f:4c:3f:49:8e:bc:9b:70: f8:68:6b:29:d2:3e:e6:13:c0:a7:70:d5:85:e9:c9: 25:29:e8:d5:c0:52:e0:a5:f7:7e:a7:5c:c7:f3:08: 41:89:96:7c:d4:4e:2b:bd:f1:d8:cf:f0:dd:b8:33: e0:7c:35:1d:02:18:a6:01:82:71:6f:dd:84:98:84: 25:6d:7b:9d:0e:e5:76:fc:17:22:ad:6b:b5:ec:25: 6b:33:88:06:4d:27:ab:43:67:83:d7:9f:4d:cf:80: b4:d3:0d:de:c5:51:7b:c2:66:41:1c:3b:61:30:d3: b5:15:82:96:43:0d:23:df:bc:e0:cc:ce:87:5b:24: 17:34:24:5d:22:64:2e:52:78:57:36:b8:fb:10:c0: d3:b5:45:9f:d4:53:9f:bf:e2:09:14:9f:71:b1:a7: 11:aa:31:71:3c:42:90:86:82:ee:7a:88:eb:bf:3f: 60:a5:94:05:fd:4e:b0:47:e6:1a:8b:27:5f:22:a8: 1a:d8:f6:6f:cc:9c:f0:fa:5b:10:32:9f:c4:1c:c7: 3c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1E:B2:EA:80:0B:9E:40:BE:7D:4F:25:16:47:4D:3F:0F:00:C6:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/95f14b3c-2287-3ac7-91a0-5e45572c8e25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ae:64:37:88:46:4c:31:33:a8:b4:01:72:8a:5b:90:46:9c: f6:bd:22:6d:9f:54:00:ff:fe:01:0e:54:7f:1a:81:4c:94:f7: b1:8b:38:af:c8:6e:b6:9d:5a:9f:68:91:67:ed:f4:b6:30:3b: c8:59:c5:46:65:0d:d5:e4:67:52:bd:98:38:e3:d2:73:62:b4: d3:c0:d7:30:f1:af:3b:44:76:c4:74:c2:f4:32:40:8f:e0:12: 8b:44:1d:61:9f:a9:c2:87:a2:ed:e0:9c:e2:78:b7:81:92:5e: 1a:df:ec:fc:ab:07:b8:59:ac:e1:59:01:c3:99:0f:7d:46:cf: d8:65:f4:c1:9c:ed:cf:82:ec:4a:39:38:2c:93:9a:77:77:d8: 1f:af:39:aa:18:7a:1a:d9:38:88:7f:81:26:e4:8b:96:5e:58: a4:3d:9e:68:fe:77:8f:dc:7a:8f:cb:d7:85:26:75:b4:56:08: ac:f7:59:ca:64:b2:0e:21:e6:6c:e9:ba:69:96:e8:82:0d:3f: 11:51:70:30:b4:3b:67:6f:0c:1c:7a:b4:52:f0:18:75:cc:ed: 44:95:94:77:1f:4c:25:cc:c9:2e:17:d2:97:8c:35:b4:b9:07: d7:3a:87:54:4f:36:8d:8b:51:1b:f3:42:9e:59:59:3f:a4:9d: fc:41:68:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE57yjGFfuBNYUulc6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxMzA5MDAxMloXDTI2MTAxMTA5MDAxMlowLzEtMCsGA1UEAxMk OTk3ZjE3NGQtZjdkNi00MTJiLTkwOTMtYjEyN2E0YTRmZDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjgZVjYOv1VsJ+6zfR6EIm8AS/FGi95Kw3wZ GX+TqpNFMm9ryZwMEtCNDcuFw4UyZbjZT0w/SY68m3D4aGsp0j7mE8CncNWF6ckl KejVwFLgpfd+p1zH8whBiZZ81E4rvfHYz/DduDPgfDUdAhimAYJxb92EmIQlbXud DuV2/BcirWu17CVrM4gGTSerQ2eD159Nz4C00w3exVF7wmZBHDthMNO1FYKWQw0j 37zgzM6HWyQXNCRdImQuUnhXNrj7EMDTtUWf1FOfv+IJFJ9xsacRqjFxPEKQhoLu eojrvz9gpZQF/U6wR+YaiydfIqga2PZvzJzw+lsQMp/EHMc8BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4esuqAC55Avn1PJRZHTT8PAMbtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTVmMTRiM2MtMjI4Ny0z YWM3LTkxYTAtNWU0NTU3MmM4ZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAquZDeIRkwxM6i0AXKKW5BGnPa9Im2fVAD//gEOVH8agUyU97GLOK/I bradWp9okWft9LYwO8hZxUZlDdXkZ1K9mDjj0nNitNPA1zDxrztEdsR0wvQyQI/g EotEHWGfqcKHou3gnOJ4t4GSXhrf7PyrB7hZrOFZAcOZD31Gz9hl9MGc7c+C7Eo5 OCyTmnd32B+vOaoYehrZOIh/gSbki5ZeWKQ9nmj+d4/ceo/L14UmdbRWCKz3Wcpk sg4h5mzpummW6IINPxFRcDC0O2dvDBx6tFLwGHXM7USVlHcfTCXMyS4X0peMNbS5 B9c6h1RPNo2LURvzQp5ZWT+knfxBaF4= -----END CERTIFICATE-----Generated at Tue Jul 21 21:08:00 2026 by rpki-client