$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8980512-7775-361d-924e-d23443bde100.roa File: c8980512-7775-361d-924e-d23443bde100.roa (raw, json) Hash identifier: y2yAs6FNoFtvwJ3sLwB4o3yxA/UXYpKPj0jWHQ1R8CQ= Subject key identifier: D0:E6:7A:43:C6:90:99:F6:79:77:1E:15:7E:D2:6B:78:FA:FD:08:00 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E736A33EB03C20BFE34036600 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8980512-7775-361d-924e-d23443bde100.roa Signing time: Fri 10 Jul 2026 09:00:12 +0000 ROA not before: Fri 10 Jul 2026 09:00:12 +0000 ROA not after: Thu 08 Oct 2026 09:00:12 +0000 asID: 8069 IP address blocks: 20.33.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:73:6a:33:eb:03:c2:0b:fe:34:03:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 10 09:00:12 2026 GMT Not After : Oct 8 09:00:12 2026 GMT Subject: CN=ea3fc960-9bc7-4908-bd40-b2cc4ed56674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:2f:68:5f:c1:81:b7:36:7a:cd:e4:1c:b4:aa: df:eb:02:db:23:ce:d0:11:d7:1f:d6:43:40:0b:c1: 3a:fb:25:3a:dc:53:13:00:7c:b5:d6:41:17:55:21: d2:23:91:45:39:1f:09:38:e0:7b:28:ec:87:b0:c3: c5:15:27:ea:9e:1a:fa:a8:d5:92:d1:11:1c:79:c1: ea:59:0c:7f:87:2d:ff:eb:77:ca:9b:0c:d7:bb:6d: 44:9e:fa:22:50:99:0f:74:66:dc:1d:7d:8a:d0:57: f2:75:de:6c:99:6b:4f:fe:b4:38:5b:4b:90:02:0b: 3b:71:28:7a:14:85:f3:92:b6:8c:ee:3c:7a:6f:a4: 2e:2f:af:a6:eb:c5:dd:0b:4b:ef:bb:9b:98:56:44: 08:4f:35:b8:4f:4d:b5:ab:00:12:03:e8:48:36:33: 2b:4a:99:83:1d:57:f5:72:64:38:25:bd:62:49:77: 0e:e9:7b:ea:c1:14:85:7f:ad:57:ad:bd:74:bb:cc: 39:54:7a:6d:39:86:10:c7:33:61:96:4c:8e:01:a5: cc:46:81:c5:f0:0c:d6:f2:3e:8b:d9:1e:28:14:0e: db:b7:75:e2:25:75:ab:24:b8:80:84:03:17:30:a2: 0a:57:e7:21:b1:ff:52:89:2f:92:84:91:64:78:b0: ef:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E6:7A:43:C6:90:99:F6:79:77:1E:15:7E:D2:6B:78:FA:FD:08:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8980512-7775-361d-924e-d23443bde100.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:88:1a:df:54:6e:e7:1e:95:d6:d6:17:23:c5:f1:f8:fd:df: 55:61:77:8c:b2:40:00:b2:b0:ab:08:bd:9b:0a:c3:48:17:2d: af:df:ee:84:8a:7b:e5:92:d2:81:c5:63:da:ee:5c:d1:94:26: b4:e7:27:1f:c8:16:5e:89:f7:7f:1c:a0:05:cf:3d:17:09:a0: 63:ae:3e:10:aa:3d:6b:69:04:4e:66:de:7c:37:19:14:1d:3b: 17:ae:8b:fc:04:fd:e9:79:38:e8:cd:12:1c:35:d3:91:1e:11: 94:4b:48:33:8f:99:a6:ce:56:09:f3:6e:b2:f3:4f:d4:f4:b7: 31:9d:ce:fe:98:f1:dd:1d:c2:8d:66:44:e8:26:c1:3c:a0:8e: 41:83:02:b6:f3:f6:23:04:42:18:22:f7:71:f1:78:8a:c1:4b: e6:bc:9b:e1:f8:d5:0f:89:cf:63:51:0b:0a:90:73:5f:90:e0: ab:62:2d:ef:36:d0:65:a4:25:af:36:79:78:3d:b3:0a:65:3f: d5:bd:64:7a:93:20:c4:29:a6:f1:1f:2b:dc:46:d4:cd:ce:7c: 44:70:e9:17:77:f0:23:b1:0b:c2:ad:8e:e1:ab:0b:88:1a:6a: 58:be:38:c1:d4:d2:34:6b:2c:a6:1c:5f:98:73:49:e7:40:b5: 4e:04:35:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zajPrA8IL/jQDZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk ZWEzZmM5NjAtOWJjNy00OTA4LWJkNDAtYjJjYzRlZDU2Njc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgy9oX8GBtzZ6zeQctKrf6wLbI87QEdcf1kNA C8E6+yU63FMTAHy11kEXVSHSI5FFOR8JOOB7KOyHsMPFFSfqnhr6qNWS0REcecHq WQx/hy3/63fKmwzXu21EnvoiUJkPdGbcHX2K0Ffydd5smWtP/rQ4W0uQAgs7cSh6 FIXzkraM7jx6b6QuL6+m68XdC0vvu5uYVkQITzW4T021qwASA+hINjMrSpmDHVf1 cmQ4Jb1iSXcO6XvqwRSFf61Xrb10u8w5VHptOYYQxzNhlkyOAaXMRoHF8AzW8j6L 2R4oFA7bt3XiJXWrJLiAhAMXMKIKV+chsf9SiS+ShJFkeLDv8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDmekPGkJn2eXceFX7Sa3j6/QgAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzg5ODA1MTItNzc3NS0z NjFkLTkyNGUtZDIzNDQzYmRlMTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOIGt9UbuceldbWFyPF8fj931Vhd4yyQACysKsIvZsKw0gXLa/f7oSK e+WS0oHFY9ruXNGUJrTnJx/IFl6J938coAXPPRcJoGOuPhCqPWtpBE5m3nw3GRQd Oxeui/wE/el5OOjNEhw105EeEZRLSDOPmabOVgnzbrLzT9T0tzGdzv6Y8d0dwo1m ROgmwTygjkGDArbz9iMEQhgi93HxeIrBS+a8m+H41Q+Jz2NRCwqQc1+Q4KtiLe82 0GWkJa82eXg9swplP9W9ZHqTIMQppvEfK9xG1M3OfERw6Rd38COxC8KtjuGrC4ga ali+OMHU0jRrLKYcX5hzSedAtU4ENWs= -----END CERTIFICATE-----Generated at Tue Jul 21 21:08:53 2026 by rpki-client