$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c5213a05-0625-3375-8382-9c42d5a3e1cb.roa File: c5213a05-0625-3375-8382-9c42d5a3e1cb.roa (raw, json) Hash identifier: TD+F03vx66AesY/zklR9EIFGL0JVhc7iKsudNRRGEvU= Subject key identifier: D6:70:8C:64:BF:DB:4F:4E:5B:0D:0A:6B:4E:9A:6B:AA:A8:82:AD:0B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E4129E12F59B203D6FD8A2280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c5213a05-0625-3375-8382-9c42d5a3e1cb.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 8069 IP address blocks: 20.33.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:e1:2f:59:b2:03:d6:fd:8a:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=ad2a6ffd-74e5-4718-9453-dca66959d5fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5a:c6:6e:01:3f:1c:33:5c:0b:97:08:34:69: b5:e2:89:6d:01:04:2f:6c:fb:a5:ea:59:1b:2b:88: c1:bb:27:2d:8a:f5:32:f8:66:f9:be:c2:e0:e0:a7: 45:df:be:81:fa:e0:fc:6e:a3:d3:43:64:32:b9:f7: a5:19:39:da:8e:71:fa:8b:8f:45:e3:c6:7c:b8:62: 9a:a1:03:1c:52:48:81:54:27:bb:b3:dc:f9:0f:c7: a1:9e:0e:77:e7:2b:a5:54:a1:d4:19:b7:97:0d:bc: 70:4b:97:07:85:75:f9:55:32:25:53:5b:b4:6a:ce: e4:5a:e6:0e:a4:6d:01:2a:19:db:cf:d8:7e:cb:c9: e4:9b:fc:dd:08:ea:2a:31:76:ae:8e:44:20:29:5f: ef:e5:78:f2:b0:df:6b:d5:20:3d:74:d2:04:aa:15: fa:b9:b6:cc:ab:9c:6b:b2:63:63:9c:58:35:d5:72: 28:21:e0:b1:35:d2:69:a3:d4:12:7e:a1:de:f2:cc: c5:0b:55:78:75:a8:b5:6e:20:46:77:82:7a:5a:f4: b1:22:cc:19:fb:59:cd:39:5f:25:11:64:32:3b:9b: bb:04:84:ab:49:86:70:3d:11:53:63:aa:03:23:21: 53:03:cc:f0:d9:96:a9:32:34:78:dc:a1:d7:c7:75: d6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:70:8C:64:BF:DB:4F:4E:5B:0D:0A:6B:4E:9A:6B:AA:A8:82:AD:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c5213a05-0625-3375-8382-9c42d5a3e1cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:34:88:ff:4d:f5:1d:16:67:d3:e6:72:2c:c2:f2:85:ff:4a: f8:d8:ab:a0:80:f8:a6:01:14:61:76:53:c3:7b:ba:54:31:d2: 36:bd:ce:2a:b5:2b:05:d1:28:a0:2b:3e:02:46:08:25:a5:87: fe:7e:24:37:23:8d:15:c6:27:79:b2:4f:82:12:30:e0:f8:c1: 84:72:54:86:1e:a3:9f:c0:96:5c:29:81:6b:c1:45:b9:27:61: 36:e9:96:75:50:9d:3c:06:5c:05:b5:97:cb:7e:bc:c9:f2:55: 94:9a:4d:0a:bf:f7:88:7b:28:fe:4b:de:0e:ea:c3:99:e4:aa: 16:d1:da:be:1f:60:12:8f:b0:da:23:f1:12:ab:48:ff:2f:c6: 86:c9:31:08:af:ac:f8:78:96:8f:9c:1a:3a:55:d2:6b:3c:e8: 0a:55:53:47:90:55:93:bf:5f:1a:d6:02:cb:cd:4d:77:4e:fb: c8:3f:63:59:ac:55:f4:70:14:c2:26:94:0c:76:c6:d5:27:f1: 9f:a3:2f:ba:18:86:a7:ac:cf:a4:aa:e9:b1:71:ef:28:21:a9: 7e:5e:6d:a2:76:53:de:d0:40:19:91:0c:d9:50:cb:e7:16:24: 28:c6:cc:4d:b5:37:a2:03:d5:6f:25:7f:4f:49:f6:2d:64:a4: de:b3:92:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKeEvWbID1v2KIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk YWQyYTZmZmQtNzRlNS00NzE4LTk0NTMtZGNhNjY5NTlkNWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFrGbgE/HDNcC5cINGm14oltAQQvbPul6lkb K4jBuyctivUy+Gb5vsLg4KdF376B+uD8bqPTQ2QyufelGTnajnH6i49F48Z8uGKa oQMcUkiBVCe7s9z5D8ehng535yulVKHUGbeXDbxwS5cHhXX5VTIlU1u0as7kWuYO pG0BKhnbz9h+y8nkm/zdCOoqMXaujkQgKV/v5XjysN9r1SA9dNIEqhX6ubbMq5xr smNjnFg11XIoIeCxNdJpo9QSfqHe8szFC1V4dai1biBGd4J6WvSxIswZ+1nNOV8l EWQyO5u7BISrSYZwPRFTY6oDIyFTA8zw2ZapMjR43KHXx3XWjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZwjGS/209OWw0Ka06aa6qogq0LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzUyMTNhMDUtMDYyNS0z Mzc1LTgzODItOWM0MmQ1YTNlMWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKY0iP9N9R0WZ9PmcizC8oX/SvjYq6CA+KYBFGF2U8N7ulQx0ja9ziq1 KwXRKKArPgJGCCWlh/5+JDcjjRXGJ3myT4ISMOD4wYRyVIYeo5/AllwpgWvBRbkn YTbplnVQnTwGXAW1l8t+vMnyVZSaTQq/94h7KP5L3g7qw5nkqhbR2r4fYBKPsNoj 8RKrSP8vxobJMQivrPh4lo+cGjpV0ms86ApVU0eQVZO/XxrWAsvNTXdO+8g/Y1ms VfRwFMImlAx2xtUn8Z+jL7oYhqesz6Sq6bFx7yghqX5ebaJ2U97QQBmRDNlQy+cW JCjGzE21N6ID1W8lf09J9i1kpN6zkmA= -----END CERTIFICATE-----Generated at Tue Jul 21 21:08:10 2026 by rpki-client