$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ad2e0f01-a70d-32d5-b0b2-4c19a4955a30.roa File: ad2e0f01-a70d-32d5-b0b2-4c19a4955a30.roa (raw, json) Hash identifier: GbE88UwXlDCCaWEwjlt+sS1xj/fmrbXjynd098hozw4= Subject key identifier: 6C:86:9B:FA:7D:AF:DE:AC:72:43:82:4F:82:A0:5D:C3:5E:B3:76:6C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E885A4F4530944C7871663000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ad2e0f01-a70d-32d5-b0b2-4c19a4955a30.roa Signing time: Fri 17 Jul 2026 21:00:12 +0000 ROA not before: Fri 17 Jul 2026 21:00:12 +0000 ROA not after: Thu 15 Oct 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.33.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:88:5a:4f:45:30:94:4c:78:71:66:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 17 21:00:12 2026 GMT Not After : Oct 15 21:00:12 2026 GMT Subject: CN=ad5c1b8d-fb7c-49a2-877e-7855a03d8a0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ff:30:33:32:20:32:cd:89:cc:ce:f8:4e:b5: be:e5:a1:a5:c5:f9:a8:18:79:4c:33:15:29:40:f2: 1a:43:ab:3c:45:5b:ef:93:82:c3:77:dc:b9:53:33: 4f:4e:d0:f2:0c:7b:21:a5:03:8d:75:09:10:81:a4: fd:df:38:63:5f:59:3d:56:1c:34:f3:c5:f6:52:f8: 89:54:09:18:c9:78:c0:aa:5f:f7:9a:cc:76:4b:4b: 78:d2:7e:74:d3:3a:56:d1:3f:2f:0e:36:7f:4a:4f: ed:26:ba:6d:01:c0:40:3a:15:2c:1e:8f:a4:c3:d6: ef:38:fe:25:98:94:ba:c6:8a:4e:9f:7b:d4:71:ce: 86:0d:a4:43:af:ab:8e:79:9e:97:59:0a:28:ef:60: 42:03:1c:24:0d:b1:d1:81:64:19:25:b9:d6:85:cd: 2d:16:89:54:02:8d:20:97:05:c0:21:13:41:f8:be: ee:bb:13:de:f9:0f:b3:ad:fe:1a:11:7e:36:be:75: 61:eb:98:d0:d5:aa:38:fc:28:7c:68:b5:6c:fc:e0: e5:e0:6d:00:1b:ee:47:71:7f:4b:48:65:52:b4:ab: 9a:b0:43:09:c0:23:5c:29:a0:6d:8d:8d:34:97:57: 0a:05:78:70:e2:8a:0d:06:5a:b5:f9:a4:6c:2e:f4: 31:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:86:9B:FA:7D:AF:DE:AC:72:43:82:4F:82:A0:5D:C3:5E:B3:76:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ad2e0f01-a70d-32d5-b0b2-4c19a4955a30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:8d:f0:f0:27:09:f1:87:01:c4:87:ba:b6:4b:f0:ad:bf:2a: a2:a4:ec:de:75:5f:75:49:56:bd:7e:03:37:d8:3b:cc:fc:66: 83:cb:36:8a:a3:f3:12:cd:d8:1a:2c:a2:79:93:10:28:f0:dc: dc:f2:a2:8f:6d:dd:99:f1:c5:09:8a:e8:e8:50:7c:91:de:69: 0c:cf:3d:eb:96:b7:62:0b:77:41:0f:b2:fd:60:a3:ad:0b:38: 0f:08:fb:60:8d:dc:31:cc:41:4c:1a:74:99:57:3d:e5:70:eb: b1:65:8e:a9:65:5c:4c:a7:9a:ac:86:6c:3b:59:8e:73:eb:dc: 15:98:c3:06:02:e1:de:26:94:58:74:29:a0:09:ed:45:f3:f9: 53:76:93:40:83:9a:84:d6:be:0e:c1:a5:f0:93:79:37:fd:60: 98:f1:1d:48:c3:78:95:99:a7:f9:62:7c:8e:30:21:e9:84:29: 18:9a:cb:85:57:4f:b4:26:1a:d6:a4:22:15:e5:26:ad:a4:72: 90:f8:cd:65:72:7a:cf:c7:cb:84:a5:e1:c4:82:f0:02:d4:7a: 88:d8:c9:79:b2:82:8a:5f:9a:d1:b2:31:3c:a9:60:3d:3d:e1: 33:57:25:7a:a7:ee:78:68:98:04:c1:11:28:d9:23:fd:d6:ed: 19:5a:7a:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWk9FMJRMeHFmMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk YWQ1YzFiOGQtZmI3Yy00OWEyLTg3N2UtNzg1NWEwM2Q4YTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP8wMzIgMs2JzM74TrW+5aGlxfmoGHlMMxUp QPIaQ6s8RVvvk4LDd9y5UzNPTtDyDHshpQONdQkQgaT93zhjX1k9Vhw088X2UviJ VAkYyXjAql/3msx2S0t40n500zpW0T8vDjZ/Sk/tJrptAcBAOhUsHo+kw9bvOP4l mJS6xopOn3vUcc6GDaRDr6uOeZ6XWQoo72BCAxwkDbHRgWQZJbnWhc0tFolUAo0g lwXAIRNB+L7uuxPe+Q+zrf4aEX42vnVh65jQ1ao4/Ch8aLVs/ODl4G0AG+5HcX9L SGVStKuasEMJwCNcKaBtjY00l1cKBXhw4ooNBlq1+aRsLvQxCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyGm/p9r96sckOCT4KgXcNes3ZsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWQyZTBmMDEtYTcwZC0z MmQ1LWIwYjItNGMxOWE0OTU1YTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuN8PAnCfGHAcSHurZL8K2/KqKk7N51X3VJVr1+AzfYO8z8ZoPLNoqj 8xLN2BosonmTECjw3Nzyoo9t3ZnxxQmK6OhQfJHeaQzPPeuWt2ILd0EPsv1go60L OA8I+2CN3DHMQUwadJlXPeVw67FljqllXEynmqyGbDtZjnPr3BWYwwYC4d4mlFh0 KaAJ7UXz+VN2k0CDmoTWvg7BpfCTeTf9YJjxHUjDeJWZp/lifI4wIemEKRiay4VX T7QmGtakIhXlJq2kcpD4zWVyes/Hy4Sl4cSC8ALUeojYyXmygopfmtGyMTypYD09 4TNXJXqn7nhomATBESjZI/3W7RlaevA= -----END CERTIFICATE-----Generated at Tue Jul 21 21:05:48 2026 by rpki-client