$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/db4e4f6a-d694-32a7-b2e1-f4d4ee97c262.roa File: db4e4f6a-d694-32a7-b2e1-f4d4ee97c262.roa (raw, json) Hash identifier: fWvcA/Ex11Eymlp/Azk6aAJ2lafejYVoqbhfhQkpSTk= Subject key identifier: E5:0F:1E:91:57:11:79:2F:9F:47:94:88:8C:AD:4B:BB:04:3C:A3:1F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E86F504F1D33347259DAACD00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/db4e4f6a-d694-32a7-b2e1-f4d4ee97c262.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 8069 IP address blocks: 20.33.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f5:04:f1:d3:33:47:25:9d:aa:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=c516fe8f-4961-4e4e-ad16-8cee1f620001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:15:fd:74:b2:97:7e:7f:3a:3e:c4:4a:f7:31: a7:18:17:c9:ae:db:03:ca:9b:48:f7:2a:ba:f4:9a: eb:bb:9e:09:75:56:2d:18:92:e6:53:b2:41:34:fb: a4:23:82:a1:72:91:f3:04:71:ae:63:cb:c9:00:29: 0d:3b:46:2c:dc:06:3d:eb:b2:e5:90:99:1a:3a:fa: 48:32:05:37:fb:b5:26:66:d1:b2:d2:33:1f:7a:20: 82:4e:70:3d:66:1f:98:a9:65:29:92:55:ba:88:6d: ea:a4:30:0e:9a:97:ec:5e:c7:81:de:85:df:d5:f1: f9:27:22:f2:77:67:4f:73:59:1f:cb:e2:14:7c:93: bb:04:2c:99:63:7d:ac:01:e5:38:fd:00:11:0a:87: 0e:0b:68:cf:70:1d:07:4c:b7:4b:e6:8a:2f:b3:5b: f6:6b:64:a5:12:cb:70:e9:5c:0c:38:7b:cc:82:4f: 6a:2d:41:8a:04:37:48:f7:80:37:16:27:63:53:53: df:25:ac:60:b6:33:62:df:c9:41:6c:93:7c:97:8a: c4:05:fd:18:66:d9:6f:cd:df:17:f9:3b:ec:00:09: 6e:7f:51:9b:26:3f:db:1a:83:fe:8e:71:b3:32:71: 2a:62:ae:9a:58:4c:33:48:21:0e:fe:57:c4:10:97: 6b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0F:1E:91:57:11:79:2F:9F:47:94:88:8C:AD:4B:BB:04:3C:A3:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/db4e4f6a-d694-32a7-b2e1-f4d4ee97c262.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:41:b9:78:bd:73:c6:7d:86:b3:54:e1:d4:49:07:e3:69:56: 20:dd:12:59:6b:8d:f2:b8:16:28:90:5f:2b:b8:7c:78:5d:31: c1:17:ac:46:e8:7d:f9:96:c5:af:4b:1e:3e:2f:08:55:46:3d: 2c:fa:a7:bc:1e:e9:5c:b7:c7:b1:56:15:07:34:d5:37:b4:6d: 6c:c6:f9:c5:21:50:da:ed:8c:ac:c6:d9:ef:f0:11:61:a7:e8: af:05:75:9d:06:65:75:d7:60:32:f2:85:86:85:16:59:5d:25: d4:6f:11:d9:f7:42:ba:40:39:c6:17:72:cc:20:4f:b3:97:a4: 53:f2:dd:38:11:a2:9d:ad:0b:2c:22:d3:ab:7b:bb:1e:70:d0: 2c:33:a0:1d:34:02:a0:01:ed:3c:57:9b:3c:2f:4d:7e:15:2d: 00:5b:04:d4:f3:7a:48:03:b3:67:7c:92:d8:39:c7:9b:b6:ea: 44:32:72:f2:8e:cf:f7:44:26:99:81:15:17:0d:20:3f:58:89: 10:7e:e1:a5:01:c6:a4:0f:42:9f:32:a7:38:8a:b0:be:d1:86: ae:79:06:1f:41:26:1a:ea:d6:05:7a:3f:6f:e2:94:93:2d:b0: d5:2a:b8:8e:04:c6:32:42:30:7d:c0:ab:7a:9e:37:d5:1d:c3: de:a1:1e:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9QTx0zNHJZ2qzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk YzUxNmZlOGYtNDk2MS00ZTRlLWFkMTYtOGNlZTFmNjIwMDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxX9dLKXfn86PsRK9zGnGBfJrtsDyptI9yq6 9Jrru54JdVYtGJLmU7JBNPukI4KhcpHzBHGuY8vJACkNO0Ys3AY967LlkJkaOvpI MgU3+7UmZtGy0jMfeiCCTnA9Zh+YqWUpklW6iG3qpDAOmpfsXseB3oXf1fH5JyLy d2dPc1kfy+IUfJO7BCyZY32sAeU4/QARCocOC2jPcB0HTLdL5oovs1v2a2SlEstw 6VwMOHvMgk9qLUGKBDdI94A3FidjU1PfJaxgtjNi38lBbJN8l4rEBf0YZtlvzd8X +TvsAAluf1GbJj/bGoP+jnGzMnEqYq6aWEwzSCEO/lfEEJdrLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUPHpFXEXkvn0eUiIytS7sEPKMfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGI0ZTRmNmEtZDY5NC0z MmE3LWIyZTEtZjRkNGVlOTdjMjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhBuXi9c8Z9hrNU4dRJB+NpViDdEllrjfK4FiiQXyu4fHhdMcEXrEbo ffmWxa9LHj4vCFVGPSz6p7we6Vy3x7FWFQc01Te0bWzG+cUhUNrtjKzG2e/wEWGn 6K8FdZ0GZXXXYDLyhYaFFlldJdRvEdn3QrpAOcYXcswgT7OXpFPy3TgRop2tCywi 06t7ux5w0CwzoB00AqAB7TxXmzwvTX4VLQBbBNTzekgDs2d8ktg5x5u26kQycvKO z/dEJpmBFRcNID9YiRB+4aUBxqQPQp8ypziKsL7Rhq55Bh9BJhrq1gV6P2/ilJMt sNUquI4ExjJCMH3Aq3qeN9Udw96hHs8= -----END CERTIFICATE-----Generated at Tue Jul 21 21:06:09 2026 by rpki-client