$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d0a7225f-2047-3944-a23d-469eab9df0ec.roa File: d0a7225f-2047-3944-a23d-469eab9df0ec.roa (raw, json) Hash identifier: mQ+7e16iUoFJDWTaMNJIQm8kmHVQfEgaJxg9nItgB8c= Subject key identifier: E2:A3:00:44:48:6D:D2:63:8A:A8:7E:84:E4:26:F0:C7:45:66:5D:89 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E86F50583A485A6D880613790 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d0a7225f-2047-3944-a23d-469eab9df0ec.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 8069 IP address blocks: 20.33.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f5:05:83:a4:85:a6:d8:80:61:37:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=b64c166e-aea2-4304-82f3-082213fdbf73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:63:f0:c0:c3:54:b5:04:9d:e0:12:78:07:d7: 67:8d:4c:07:38:bb:54:62:d4:af:a9:c7:e4:8f:f6: c1:c4:bc:c6:d4:9b:ed:66:fd:22:15:80:9c:72:e8: 33:41:e0:5a:40:03:dd:5f:e4:0e:af:a2:ef:ee:b8: 09:ca:ec:12:07:9f:bb:df:67:fa:93:a8:ed:c6:4f: 4f:36:3c:62:04:c2:5e:5f:10:4e:c6:75:72:8d:51: 87:61:6e:21:3e:60:2f:c0:e2:28:26:60:c7:52:d3: d0:84:23:5f:b2:98:10:e9:66:ee:4a:2d:88:7e:14: a4:5c:a6:de:0c:2c:dd:ba:53:00:2a:9a:dd:aa:d1: 1e:ec:7d:11:24:7d:a5:72:d1:88:f6:da:f9:cc:f8: 94:96:1a:7f:06:aa:21:7c:57:a1:75:79:f1:87:b9: 78:aa:5d:12:bd:94:28:41:97:bd:e1:1c:18:95:f5: b0:19:29:9f:39:c3:6b:18:34:7f:2e:7f:56:5c:c0: b5:8e:46:ca:6f:00:43:83:25:9a:e5:4a:b8:67:2f: a5:53:1a:ae:04:b4:f6:19:5a:47:c4:2c:45:f3:cf: e9:4a:60:f3:c2:bd:2d:03:6c:b3:ca:65:ee:cd:44: 5b:a9:af:95:dd:51:73:27:5d:b4:cf:56:8a:61:89: 87:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A3:00:44:48:6D:D2:63:8A:A8:7E:84:E4:26:F0:C7:45:66:5D:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d0a7225f-2047-3944-a23d-469eab9df0ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:0d:3f:59:2d:e3:03:58:a5:7e:a8:95:0b:96:f9:13:c1:d5: 44:51:1a:17:5f:a3:36:4e:af:8b:c2:c0:77:97:6b:69:21:10: 31:9f:fd:f6:67:a5:0f:52:c6:79:49:eb:1b:31:50:25:35:73: ed:05:2f:c4:a3:f5:7c:46:84:59:50:77:bf:da:aa:b4:ac:f8: 80:b7:51:fc:45:97:fd:8c:db:b1:1f:98:bd:a9:5f:ae:f6:fb: fa:3f:48:92:3d:67:42:03:8b:30:70:ef:04:a4:26:a5:dc:30: be:44:10:3e:d1:24:69:29:ae:89:30:ca:9e:f0:2b:c4:b5:88: 20:83:e5:59:89:dd:f3:0f:ce:81:00:78:41:70:fe:6b:bb:46: 28:c7:fb:dd:8d:90:72:7e:de:a3:3b:4f:ba:7f:50:b3:b2:92: 7b:1a:78:90:95:04:01:a1:d8:04:54:ca:a7:dd:4e:e1:96:6d: f8:9a:6b:1d:2b:52:05:ba:2c:09:06:14:c8:ac:a5:ad:ce:8a: 99:db:99:90:a7:a6:c7:36:c6:cd:aa:19:17:74:1f:7b:a8:8f: 9a:8f:33:eb:06:b4:0a:ad:d5:19:85:65:19:30:0c:c2:0e:88: 24:b8:89:bd:1b:e8:0c:af:f3:74:12:d0:f2:70:c2:48:cb:8e: 73:d9:1e:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9QWDpIWm2IBhN5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk YjY0YzE2NmUtYWVhMi00MzA0LTgyZjMtMDgyMjEzZmRiZjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmPwwMNUtQSd4BJ4B9dnjUwHOLtUYtSvqcfk j/bBxLzG1JvtZv0iFYCccugzQeBaQAPdX+QOr6Lv7rgJyuwSB5+732f6k6jtxk9P NjxiBMJeXxBOxnVyjVGHYW4hPmAvwOIoJmDHUtPQhCNfspgQ6WbuSi2IfhSkXKbe DCzdulMAKprdqtEe7H0RJH2lctGI9tr5zPiUlhp/BqohfFehdXnxh7l4ql0SvZQo QZe94RwYlfWwGSmfOcNrGDR/Ln9WXMC1jkbKbwBDgyWa5Uq4Zy+lUxquBLT2GVpH xCxF88/pSmDzwr0tA2yzymXuzURbqa+V3VFzJ120z1aKYYmH2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKjAERIbdJjiqh+hOQm8MdFZl2JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDBhNzIyNWYtMjA0Ny0z OTQ0LWEyM2QtNDY5ZWFiOWRmMGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcNP1kt4wNYpX6olQuW+RPB1URRGhdfozZOr4vCwHeXa2khEDGf/fZn pQ9SxnlJ6xsxUCU1c+0FL8Sj9XxGhFlQd7/aqrSs+IC3UfxFl/2M27EfmL2pX672 +/o/SJI9Z0IDizBw7wSkJqXcML5EED7RJGkprokwyp7wK8S1iCCD5VmJ3fMPzoEA eEFw/mu7RijH+92NkHJ+3qM7T7p/ULOyknsaeJCVBAGh2ARUyqfdTuGWbfiaax0r UgW6LAkGFMispa3OipnbmZCnpsc2xs2qGRd0H3uoj5qPM+sGtAqt1RmFZRkwDMIO iCS4ib0b6Ayv83QS0PJwwkjLjnPZHj8= -----END CERTIFICATE-----Generated at Tue Jul 21 21:08:06 2026 by rpki-client