$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfce08b9-fa20-3011-97ac-85c4ba3785d5.roa File: cfce08b9-fa20-3011-97ac-85c4ba3785d5.roa (raw, json) Hash identifier: MJn9nCQFhy1q2gAu2kEFfTGWcQhP1r/tzb9sN9IK8vc= Subject key identifier: 26:9D:19:A1:A7:6B:22:C7:44:E4:47:42:8C:C8:51:CF:CB:5F:72:20 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E31CF4D6C1F07CB0087AE2E80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfce08b9-fa20-3011-97ac-85c4ba3785d5.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.33.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:4d:6c:1f:07:cb:00:87:ae:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=9619a259-192b-42f9-b49f-b5e15f9eaf61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7c:96:6d:3e:63:9f:79:c6:3e:1e:49:a7:6c: f8:22:71:74:cd:46:24:5b:f5:3f:ec:8b:87:75:76: 2f:88:bf:3a:15:66:b8:48:69:cd:fb:c4:b9:7c:41: af:fa:a1:7a:b9:94:ee:07:cd:8b:bf:23:b9:65:b4: d0:6d:f9:d9:8e:3e:9f:86:29:50:86:95:94:78:fc: 9a:5b:e7:1e:60:80:52:7b:8d:7e:df:6d:ff:a2:2b: d1:0b:48:9c:e7:fe:d9:6d:6b:bd:16:2b:db:66:9b: 81:7a:73:87:ca:8c:21:a8:00:31:ed:f1:f2:74:e5: 5b:6b:af:a7:f0:40:80:e4:80:5b:46:03:d1:e4:18: e5:62:a8:b1:cf:f3:f9:d0:d7:49:84:d7:80:3c:2b: 79:36:6c:10:41:90:79:e9:a2:da:f2:a7:a5:35:bd: 1a:39:d2:ba:4c:ac:52:b8:b2:25:49:b6:fa:4a:1a: 77:88:c4:61:b5:b2:f7:99:f8:56:8e:6d:7a:d9:da: 05:c8:d7:0a:ca:c9:ba:fe:5a:2f:26:a9:21:6c:b8: f8:e3:52:04:54:7f:3e:2f:ad:84:c8:a3:10:77:62: 67:f8:97:14:f8:29:07:1a:18:44:e3:b9:cf:a0:a0: f2:ac:fc:f6:87:42:ac:a3:c7:17:ea:60:a0:f9:91: 5b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:9D:19:A1:A7:6B:22:C7:44:E4:47:42:8C:C8:51:CF:CB:5F:72:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfce08b9-fa20-3011-97ac-85c4ba3785d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:1b:96:32:dc:02:38:60:91:4f:d5:a4:5d:f2:c8:9a:34:98: de:5a:f1:18:cc:38:c1:d4:11:38:91:a1:31:de:22:d1:34:c6: 1f:4e:cc:da:b2:47:fa:20:5e:50:9e:55:13:cc:17:f5:d8:b8: 68:7a:ca:18:79:2c:3b:e2:ed:e3:63:3c:72:c9:08:68:ab:c6: 0a:b3:d3:45:41:0b:62:65:df:c6:1a:20:d8:35:37:68:c0:5c: 69:29:de:d1:ba:c4:1c:33:b5:ec:37:62:bc:90:ef:dd:ae:91: 92:94:4c:c1:71:12:41:c9:06:b6:ca:67:22:6a:dc:22:70:9b: 13:af:58:48:ab:99:94:7d:e5:1c:28:62:9f:4b:fd:52:9e:1f: b6:c0:c0:37:4f:03:cd:e5:c5:a9:0b:69:b8:11:9b:f3:cf:4c: 48:9f:1b:ff:9f:1a:8c:ee:03:c3:87:61:e0:3f:45:04:01:95: 2e:20:c0:7b:9b:c2:ce:ab:cc:68:b6:4d:4f:95:b1:06:25:43: ef:4c:0d:32:26:8f:78:72:b7:f6:83:eb:a4:c1:d7:f8:a7:1f: 87:b4:99:1f:1a:b0:27:a8:7b:c0:63:36:3d:d2:80:e4:ec:19: 57:2b:06:ef:55:f3:39:8e:68:9a:08:a2:0d:27:9b:45:3e:14: 59:e0:41:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xz01sHwfLAIeuLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk OTYxOWEyNTktMTkyYi00MmY5LWI0OWYtYjVlMTVmOWVhZjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HyWbT5jn3nGPh5Jp2z4InF0zUYkW/U/7IuH dXYviL86FWa4SGnN+8S5fEGv+qF6uZTuB82LvyO5ZbTQbfnZjj6fhilQhpWUePya W+ceYIBSe41+323/oivRC0ic5/7ZbWu9FivbZpuBenOHyowhqAAx7fHydOVba6+n 8ECA5IBbRgPR5BjlYqixz/P50NdJhNeAPCt5NmwQQZB56aLa8qelNb0aOdK6TKxS uLIlSbb6Shp3iMRhtbL3mfhWjm162doFyNcKysm6/lovJqkhbLj441IEVH8+L62E yKMQd2Jn+JcU+CkHGhhE47nPoKDyrPz2h0Kso8cX6mCg+ZFbSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCadGaGnayLHRORHQozIUc/LX3IgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2ZjZTA4YjktZmEyMC0z MDExLTk3YWMtODVjNGJhMzc4NWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMbljLcAjhgkU/VpF3yyJo0mN5a8RjMOMHUETiRoTHeItE0xh9OzNqy R/ogXlCeVRPMF/XYuGh6yhh5LDvi7eNjPHLJCGirxgqz00VBC2Jl38YaINg1N2jA XGkp3tG6xBwztew3YryQ792ukZKUTMFxEkHJBrbKZyJq3CJwmxOvWEirmZR95Rwo Yp9L/VKeH7bAwDdPA83lxakLabgRm/PPTEifG/+fGozuA8OHYeA/RQQBlS4gwHub ws6rzGi2TU+VsQYlQ+9MDTImj3hyt/aD66TB1/inH4e0mR8asCeoe8BjNj3SgOTs GVcrBu9V8zmOaJoIog0nm0U+FFngQSo= -----END CERTIFICATE-----Generated at Tue Jul 21 21:07:20 2026 by rpki-client