$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d788fc99-fa38-3c04-8fc4-7eb6bb125dc2.roa File: d788fc99-fa38-3c04-8fc4-7eb6bb125dc2.roa (raw, json) Hash identifier: UiyCQAFYipOymlY4suW5/7w0fkTOi0EBVFh38RiUAs0= Subject key identifier: D2:4D:CE:AB:8B:E7:9B:45:E3:72:6F:75:2A:95:C6:39:44:CD:A5:80 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E7BCA319287927D4AC077B5C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d788fc99-fa38-3c04-8fc4-7eb6bb125dc2.roa Signing time: Mon 13 Jul 2026 09:00:12 +0000 ROA not before: Mon 13 Jul 2026 09:00:12 +0000 ROA not after: Sun 11 Oct 2026 09:00:12 +0000 asID: 8069 IP address blocks: 20.33.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7b:ca:31:92:87:92:7d:4a:c0:77:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 13 09:00:12 2026 GMT Not After : Oct 11 09:00:12 2026 GMT Subject: CN=90da6944-ffae-4539-a2bd-40f6ffbedc22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:99:80:3c:8b:8d:38:8d:ac:2a:bf:ad:a1:41: b4:e6:7c:0b:1d:d8:19:38:6c:b8:de:a3:3c:a7:25: 31:6d:f3:86:6e:06:7e:ae:95:43:7f:45:43:6d:3c: 66:ce:f4:a4:d5:07:a2:15:a3:97:f7:14:0d:f6:e1: 4d:dd:e0:38:9b:6e:de:d2:6a:6f:57:19:2a:2a:f3: 21:18:c5:29:83:cf:f1:16:dc:01:54:f5:c8:5c:f3: ac:17:75:31:7b:ac:98:e4:25:64:d5:13:74:52:90: 52:2e:9c:63:83:a8:fd:c1:91:01:21:9d:a4:53:fb: 90:8e:6c:29:c6:0f:51:7e:f3:58:a0:60:be:67:1f: e4:cf:a4:e0:80:b5:38:28:4e:68:b2:ae:eb:d6:c1: 74:cd:32:6f:36:8e:c8:d2:67:47:01:bd:31:c7:7a: b0:d8:27:03:15:bc:3b:a8:38:95:f4:41:12:b9:54: cc:37:a2:50:f0:3c:e9:db:b0:5f:fe:05:6d:38:22: 48:47:ce:a8:2a:f4:3f:ac:d5:8b:74:c3:22:4a:81: c8:6f:e9:6f:76:8e:d2:2e:26:87:f0:48:60:43:e6: fc:a8:66:06:c7:98:e7:02:42:0f:81:b3:22:a4:48: 0e:93:bd:92:8e:86:38:aa:1e:40:56:1e:e8:10:20: b2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4D:CE:AB:8B:E7:9B:45:E3:72:6F:75:2A:95:C6:39:44:CD:A5:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d788fc99-fa38-3c04-8fc4-7eb6bb125dc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:ba:45:00:de:5f:f7:f5:5d:0e:c9:7b:e7:c3:6a:e6:bb:71: 68:a2:6f:c8:8d:ff:1b:78:20:95:17:bd:2f:ed:01:c9:ec:be: 33:77:82:84:48:3a:80:64:29:5a:83:a8:98:d2:6a:05:fe:cc: 78:92:92:6e:ab:6c:65:cf:79:c6:41:d0:f7:40:f2:51:f5:48: ac:14:7f:88:be:3e:ad:b8:d5:59:4f:42:5d:9d:ae:d5:f8:8d: 9c:29:ec:88:5a:e0:36:58:0c:cb:3a:47:f6:6b:96:d1:e8:d4: f2:6e:e4:d6:91:53:b5:d6:53:24:25:27:b0:f2:20:64:8a:d0: 01:15:30:03:ed:5b:91:bf:23:f6:75:62:5e:9e:55:bc:63:c6: 3d:6f:f5:ba:63:46:12:a4:55:0e:29:7d:19:48:3d:00:17:a3: 63:4c:58:9c:a2:89:5a:47:9d:d0:47:d5:51:74:56:a3:0a:95: b6:b8:dd:ef:fb:c8:95:94:b7:48:ef:16:92:e8:da:56:3f:aa: 66:d9:6f:84:ec:5b:17:35:2c:ad:57:84:dd:5b:95:10:ee:52: 24:7c:45:c2:e4:0e:34:63:85:c5:0b:cc:a4:d8:74:b4:4f:1a: e4:3a:d4:5d:56:19:5b:d6:61:c3:4f:ca:4a:01:0a:64:3e:83: f0:f4:95:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE57yjGSh5J9SsB3tcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxMzA5MDAxMloXDTI2MTAxMTA5MDAxMlowLzEtMCsGA1UEAxMk OTBkYTY5NDQtZmZhZS00NTM5LWEyYmQtNDBmNmZmYmVkYzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZmAPIuNOI2sKr+toUG05nwLHdgZOGy43qM8 pyUxbfOGbgZ+rpVDf0VDbTxmzvSk1QeiFaOX9xQN9uFN3eA4m27e0mpvVxkqKvMh GMUpg8/xFtwBVPXIXPOsF3Uxe6yY5CVk1RN0UpBSLpxjg6j9wZEBIZ2kU/uQjmwp xg9RfvNYoGC+Zx/kz6TggLU4KE5osq7r1sF0zTJvNo7I0mdHAb0xx3qw2CcDFbw7 qDiV9EESuVTMN6JQ8Dzp27Bf/gVtOCJIR86oKvQ/rNWLdMMiSoHIb+lvdo7SLiaH 8EhgQ+b8qGYGx5jnAkIPgbMipEgOk72SjoY4qh5AVh7oECCykwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJNzquL55tF43JvdSqVxjlEzaWAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDc4OGZjOTktZmEzOC0z YzA0LThmYzQtN2ViNmJiMTI1ZGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABa6RQDeX/f1XQ7Je+fDaua7cWiib8iN/xt4IJUXvS/tAcnsvjN3goRI OoBkKVqDqJjSagX+zHiSkm6rbGXPecZB0PdA8lH1SKwUf4i+Pq241VlPQl2drtX4 jZwp7Iha4DZYDMs6R/ZrltHo1PJu5NaRU7XWUyQlJ7DyIGSK0AEVMAPtW5G/I/Z1 Yl6eVbxjxj1v9bpjRhKkVQ4pfRlIPQAXo2NMWJyiiVpHndBH1VF0VqMKlba43e/7 yJWUt0jvFpLo2lY/qmbZb4TsWxc1LK1XhN1blRDuUiR8RcLkDjRjhcULzKTYdLRP GuQ61F1WGVvWYcNPykoBCmQ+g/D0lQQ= -----END CERTIFICATE-----Generated at Tue Jul 21 21:06:08 2026 by rpki-client