$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c6e160e3-34d1-3b1f-bb5b-b2f34cecf1c0.roa File: c6e160e3-34d1-3b1f-bb5b-b2f34cecf1c0.roa (raw, json) Hash identifier: Z7pZeMGIiywnc3ioWlHWxi0BCUMoG5z9DipJtGt2h8Q= Subject key identifier: 8B:5D:8B:C9:8D:09:09:78:1E:24:AA:44:53:86:16:B7:88:7C:FE:0C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E885A4EEDE94AA742AC7CC380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c6e160e3-34d1-3b1f-bb5b-b2f34cecf1c0.roa Signing time: Fri 17 Jul 2026 21:00:12 +0000 ROA not before: Fri 17 Jul 2026 21:00:12 +0000 ROA not after: Thu 15 Oct 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.33.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:88:5a:4e:ed:e9:4a:a7:42:ac:7c:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 17 21:00:12 2026 GMT Not After : Oct 15 21:00:12 2026 GMT Subject: CN=23601dad-28c1-4f81-b30a-102b6f7e994d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f3:98:e8:5f:02:54:0a:05:5f:d2:96:37:bf: 6a:23:a8:23:86:2b:5e:05:95:bc:ac:6d:fa:59:c3: 20:d7:da:01:62:73:0a:49:02:30:da:ef:be:17:74: 1b:89:5c:50:a1:69:99:1d:b9:f1:af:c3:08:30:d2: a1:8b:7b:3c:5a:cb:90:53:75:25:be:fd:03:df:74: 1a:5e:55:00:cd:26:75:53:e5:9e:bb:5e:17:16:22: 9f:83:f5:12:cd:ca:3e:8a:1d:e3:6d:18:5a:87:37: 51:c1:d7:55:cb:4b:b6:b2:68:e8:29:c1:6c:fd:34: 42:9f:b1:84:8f:44:a0:2e:f2:39:e9:02:68:63:81: fa:bd:8d:c2:4b:1d:6b:7f:5c:1a:89:b1:fa:3a:3d: fd:1e:5b:5b:43:82:be:49:d1:6c:08:d5:38:54:4b: f1:16:04:f6:9d:99:e7:5a:71:87:67:b4:ec:30:c9: 8b:40:53:c5:d6:6e:4e:4d:46:23:b6:c0:7f:90:9a: 27:50:6e:2f:a3:cd:ff:6b:a8:d7:26:34:d4:54:a3: ca:c1:8f:1e:f8:ea:9f:2b:e9:f7:2a:6b:df:1d:c7: 0b:e1:3b:af:b2:44:bd:b5:c0:b4:5a:83:eb:be:c6: c1:8b:da:c7:9f:13:4c:76:67:6a:5c:1b:c4:b8:93: 28:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5D:8B:C9:8D:09:09:78:1E:24:AA:44:53:86:16:B7:88:7C:FE:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c6e160e3-34d1-3b1f-bb5b-b2f34cecf1c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:7e:22:a7:63:47:c9:38:6a:d8:c4:9a:bd:04:fa:04:58:8f: 25:7e:37:c4:4a:c2:d1:21:0f:fa:79:4b:cd:bf:92:9e:0b:9a: 03:9b:c9:ad:88:d7:f3:bb:d8:e8:f6:ef:30:12:b7:1f:04:b3: 78:50:ff:5d:0b:1a:c1:57:12:7f:36:96:e4:82:7f:56:f9:40: 03:ed:8e:b2:2b:bf:55:9a:cc:b9:bf:fa:13:35:ec:ad:c2:d8: b1:18:e8:0c:a7:fa:7a:b7:de:3d:e1:61:f2:5b:82:14:e2:2d: b3:a5:0a:2b:cc:c6:0d:ee:4d:3a:5f:ef:ea:b1:77:4c:3a:48: 70:85:c5:45:2b:b9:e3:0e:10:8b:15:9d:71:8b:20:57:22:b2: c4:72:32:f1:a2:45:a4:53:d2:e3:3f:38:ec:7b:7a:84:16:25: 97:87:e5:3a:24:03:f6:af:72:20:40:cf:8a:69:44:32:23:54: fc:38:98:27:5e:a2:3a:b7:69:61:01:2d:4f:f9:30:94:07:8e: 09:12:04:d9:74:7e:1a:5b:50:60:a1:eb:41:fe:40:fc:01:83: 67:73:a6:29:6d:08:c6:4c:41:af:11:d2:ff:34:72:31:86:37: 3e:38:f4:d6:3c:f1:84:f7:90:33:a6:ee:ee:01:c8:67:e1:d3: 57:e4:47:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWk7t6UqnQqx8w4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk MjM2MDFkYWQtMjhjMS00ZjgxLWIzMGEtMTAyYjZmN2U5OTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvOY6F8CVAoFX9KWN79qI6gjhiteBZW8rG36 WcMg19oBYnMKSQIw2u++F3QbiVxQoWmZHbnxr8MIMNKhi3s8WsuQU3Ulvv0D33Qa XlUAzSZ1U+Weu14XFiKfg/USzco+ih3jbRhahzdRwddVy0u2smjoKcFs/TRCn7GE j0SgLvI56QJoY4H6vY3CSx1rf1waibH6Oj39HltbQ4K+SdFsCNU4VEvxFgT2nZnn WnGHZ7TsMMmLQFPF1m5OTUYjtsB/kJonUG4vo83/a6jXJjTUVKPKwY8e+OqfK+n3 KmvfHccL4TuvskS9tcC0WoPrvsbBi9rHnxNMdmdqXBvEuJMovQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItdi8mNCQl4HiSqRFOGFreIfP4MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzZlMTYwZTMtMzRkMS0z YjFmLWJiNWItYjJmMzRjZWNmMWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGN+IqdjR8k4atjEmr0E+gRYjyV+N8RKwtEhD/p5S82/kp4LmgObya2I 1/O72Oj27zAStx8Es3hQ/10LGsFXEn82luSCf1b5QAPtjrIrv1WazLm/+hM17K3C 2LEY6Ayn+nq33j3hYfJbghTiLbOlCivMxg3uTTpf7+qxd0w6SHCFxUUrueMOEIsV nXGLIFcissRyMvGiRaRT0uM/OOx7eoQWJZeH5TokA/avciBAz4ppRDIjVPw4mCde ojq3aWEBLU/5MJQHjgkSBNl0fhpbUGCh60H+QPwBg2dzpiltCMZMQa8R0v80cjGG Nz449NY88YT3kDOm7u4ByGfh01fkR6s= -----END CERTIFICATE-----Generated at Tue Jul 21 21:06:42 2026 by rpki-client