$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9e18dbd4-209d-35dd-82a3-839e83821d7c.roa File: 9e18dbd4-209d-35dd-82a3-839e83821d7c.roa (raw, json) Hash identifier: x5bDy8LIeFlQO5AiEV907dOFYsWabBoeneQLkdTxjEM= Subject key identifier: 6A:95:D5:7B:57:40:57:08:AB:26:02:E8:F8:E7:6C:21:25:82:03:FD Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E86F505148C08712926B5C700 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9e18dbd4-209d-35dd-82a3-839e83821d7c.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 8069 IP address blocks: 20.33.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f5:05:14:8c:08:71:29:26:b5:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=8c096c7a-0e67-42dc-b5e9-b8cc7bbbefee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:35:46:95:a6:75:88:41:b1:ef:10:a8:9e:72: f3:6e:9e:16:67:37:48:6c:52:f3:d3:43:26:9a:09: 03:84:0d:e6:1c:e0:fa:55:25:c2:d6:93:0d:c2:08: cb:5a:7e:47:96:3b:43:ba:7d:d9:1e:c9:db:e5:8c: 16:78:a2:86:50:d3:d5:3c:b5:ac:79:e0:da:a7:38: e9:94:88:5f:a3:a7:2e:e4:5d:0d:7f:47:e6:75:f5: 0a:41:94:65:c8:49:2f:75:e8:5a:98:ef:51:6b:96: ae:7e:c0:c2:6b:8e:c5:b0:e5:88:d1:71:3c:90:c1: fe:d4:c5:5f:e2:ec:4e:7c:d2:f0:9e:db:1d:c2:ff: 00:a3:d8:45:f1:fd:87:f5:3b:96:00:1f:6a:cd:11: 9b:cc:6a:87:e9:b6:46:4a:ae:cf:cc:cf:35:5b:ec: 06:61:d9:05:78:48:76:7d:d0:17:64:50:7f:65:4e: ed:6a:03:bc:6a:fe:64:a6:7c:67:6f:58:37:60:9d: a4:e2:a5:7c:07:ad:a4:df:4f:74:ac:02:87:2e:eb: 17:3e:c9:02:63:74:b3:3d:b8:21:07:c8:bc:fc:3f: 40:81:12:94:37:33:13:ba:3f:82:3e:15:e2:c2:6d: e2:20:27:3c:f3:76:bf:32:c6:2b:9b:72:7f:f0:02: 47:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:95:D5:7B:57:40:57:08:AB:26:02:E8:F8:E7:6C:21:25:82:03:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9e18dbd4-209d-35dd-82a3-839e83821d7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:61:09:74:5f:2a:0c:d8:61:97:21:9d:c8:36:3b:4c:75:72: 27:80:fe:dd:52:e3:2f:dc:89:2c:ae:63:17:67:b2:4f:e0:66: 55:97:72:cb:84:a6:2f:35:52:af:51:21:5e:e6:50:73:cf:ed: d6:7c:e5:30:70:b7:38:15:c8:27:9c:42:e9:25:d0:f0:f9:35: c8:56:fd:c3:b5:fd:20:39:fe:de:e2:77:60:b9:53:5c:3a:56: fc:b8:37:b3:1d:a5:78:93:cd:3f:dc:2e:d1:87:4a:2e:00:da: 57:78:98:7e:c8:9c:11:39:b5:3d:f9:d2:0a:63:56:8e:a4:83: 8d:16:9c:aa:88:0e:fc:4f:1a:03:d1:60:1a:75:5c:83:18:f7: 49:a5:86:6a:25:5a:0b:fe:8a:61:70:b9:8c:00:b3:9e:30:47: c7:92:14:fe:c7:c9:ce:7f:6e:25:0f:6d:aa:96:b9:4a:42:17: c2:45:2e:82:14:0d:64:4c:d2:01:10:83:55:b8:e7:df:74:81: 3a:77:d1:d9:0f:a2:50:86:a3:40:7b:69:15:ef:61:f6:86:76: 89:8a:d7:63:76:98:6d:28:63:9a:1e:48:c5:cc:aa:91:a5:ae: eb:5c:7d:ea:36:d6:24:d7:74:df:22:14:ef:da:02:47:f5:55: 24:55:aa:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9QUUjAhxKSa1xwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk OGMwOTZjN2EtMGU2Ny00MmRjLWI1ZTktYjhjYzdiYmJlZmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDVGlaZ1iEGx7xConnLzbp4WZzdIbFLz00Mm mgkDhA3mHOD6VSXC1pMNwgjLWn5HljtDun3ZHsnb5YwWeKKGUNPVPLWseeDapzjp lIhfo6cu5F0Nf0fmdfUKQZRlyEkvdehamO9Ra5aufsDCa47FsOWI0XE8kMH+1MVf 4uxOfNLwntsdwv8Ao9hF8f2H9TuWAB9qzRGbzGqH6bZGSq7PzM81W+wGYdkFeEh2 fdAXZFB/ZU7tagO8av5kpnxnb1g3YJ2k4qV8B62k3090rAKHLusXPskCY3SzPbgh B8i8/D9AgRKUNzMTuj+CPhXiwm3iICc883a/MsYrm3J/8AJHCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqV1XtXQFcIqyYC6PjnbCElggP9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOWUxOGRiZDQtMjA5ZC0z NWRkLTgyYTMtODM5ZTgzODIxZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1hCXRfKgzYYZchncg2O0x1cieA/t1S4y/ciSyuYxdnsk/gZlWXcsuE pi81Uq9RIV7mUHPP7dZ85TBwtzgVyCecQukl0PD5NchW/cO1/SA5/t7id2C5U1w6 Vvy4N7MdpXiTzT/cLtGHSi4A2ld4mH7InBE5tT350gpjVo6kg40WnKqIDvxPGgPR YBp1XIMY90mlhmolWgv+imFwuYwAs54wR8eSFP7Hyc5/biUPbaqWuUpCF8JFLoIU DWRM0gEQg1W45990gTp30dkPolCGo0B7aRXvYfaGdomK12N2mG0oY5oeSMXMqpGl rutcfeo21iTXdN8iFO/aAkf1VSRVqmE= -----END CERTIFICATE-----Generated at Tue Jul 21 21:07:22 2026 by rpki-client