$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/db7d766b-51b9-32a6-aae1-08e7427132fc.roa File: db7d766b-51b9-32a6-aae1-08e7427132fc.roa (raw, json) Hash identifier: N/atmrzaTjpgOICX+yjVB9NVRc0Lg9XEmJ4wwGx7xoY= Subject key identifier: 34:A3:8C:85:5A:75:87:D3:2B:B7:B6:FB:6D:1C:E6:46:20:98:22:44 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E885A4F24A6AA68EDAFD04040 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/db7d766b-51b9-32a6-aae1-08e7427132fc.roa Signing time: Fri 17 Jul 2026 21:00:12 +0000 ROA not before: Fri 17 Jul 2026 21:00:12 +0000 ROA not after: Thu 15 Oct 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.33.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:88:5a:4f:24:a6:aa:68:ed:af:d0:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 17 21:00:12 2026 GMT Not After : Oct 15 21:00:12 2026 GMT Subject: CN=d59d0237-0229-4619-bdb5-e328a0aa650d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:66:26:4d:38:aa:72:98:b6:ab:48:9f:66:0d: e9:5d:44:a0:75:de:b4:08:22:82:88:66:c2:16:70: ba:b4:dd:a7:c9:9b:c1:c6:33:cb:3d:62:04:35:f4: 6a:03:6f:25:fc:87:a0:89:82:2d:1f:b5:fe:cf:e2: e6:bc:dd:75:54:4c:fb:f0:51:a0:55:13:0f:ab:20: 1d:81:eb:0e:c0:3b:8e:0a:42:f6:74:65:68:c8:ce: 3d:9e:20:4e:e2:6f:fc:93:01:31:03:49:b3:16:d0: 0f:d9:b4:5f:25:5f:d3:c3:31:ce:7d:cb:ca:e0:a8: 56:f5:58:21:a8:07:ec:04:30:5e:63:08:05:14:d7: d3:d8:68:bc:19:bb:23:21:5f:3a:e7:19:c0:d8:93: af:4f:e3:9b:1c:26:41:af:78:e9:cd:46:a5:1a:ee: d8:7d:d6:d9:ec:28:36:2c:73:3b:24:24:17:6d:ab: ec:38:6d:61:b4:65:31:0e:be:f1:6c:f4:ca:92:2f: 2b:b9:ba:93:bf:22:07:00:51:86:e1:fb:d3:38:c0: e2:5e:2d:73:7b:dd:95:90:00:d3:f6:59:89:06:29: 98:6f:e9:69:25:59:f3:40:80:5e:58:16:66:3b:2e: 6c:f7:80:a4:2f:20:99:ba:bf:8f:c9:c9:8d:71:ee: 2d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A3:8C:85:5A:75:87:D3:2B:B7:B6:FB:6D:1C:E6:46:20:98:22:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/db7d766b-51b9-32a6-aae1-08e7427132fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:dc:e1:c1:c4:f1:90:1d:f8:68:34:53:68:fa:ca:1d:2c:eb: fa:55:8d:79:3e:70:15:3b:93:65:f0:59:d4:95:c4:08:31:23: c6:aa:82:36:3b:69:15:4c:c8:c9:30:33:bc:d3:d1:c3:6b:c6: 69:67:b6:24:2d:72:16:dc:48:9d:5a:e0:11:ae:0c:b4:7a:b4: 81:59:55:5e:ad:3e:2c:7b:83:f7:0b:c9:fb:62:db:ab:31:b0: 74:9b:b2:c3:b6:9f:f1:fd:f5:93:26:62:4e:bb:60:a4:2a:11: 73:a9:9b:69:7e:3a:c9:e6:84:de:ab:ce:de:8f:f4:25:a9:20: 3d:e7:ac:5b:de:fe:c4:62:3e:9a:4b:1f:7f:81:99:9a:3c:3b: 49:29:b9:26:5e:0d:50:1f:d1:a6:13:d0:44:f2:61:cb:43:a2: 5d:eb:4b:d3:3c:bc:d3:05:27:a0:a1:4f:af:0f:4d:6a:cb:41: cf:e9:91:2f:13:7a:29:f6:5c:42:bc:0b:2d:c6:41:bb:0f:a1: c9:03:1f:bc:fe:3b:11:c0:59:82:2f:ff:e4:9f:8f:83:4b:6e: e7:49:6b:ec:0a:24:3e:e1:14:74:f7:ca:c0:8a:79:b8:a5:81: b1:b5:e4:2b:64:2a:8d:46:37:6b:53:8b:1b:8d:b7:e2:68:2c: 60:52:5d:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWk8kpqpo7a/QQEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk ZDU5ZDAyMzctMDIyOS00NjE5LWJkYjUtZTMyOGEwYWE2NTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomYmTTiqcpi2q0ifZg3pXUSgdd60CCKCiGbC FnC6tN2nyZvBxjPLPWIENfRqA28l/IegiYItH7X+z+LmvN11VEz78FGgVRMPqyAd gesOwDuOCkL2dGVoyM49niBO4m/8kwExA0mzFtAP2bRfJV/TwzHOfcvK4KhW9Vgh qAfsBDBeYwgFFNfT2Gi8GbsjIV865xnA2JOvT+ObHCZBr3jpzUalGu7YfdbZ7Cg2 LHM7JCQXbavsOG1htGUxDr7xbPTKki8rubqTvyIHAFGG4fvTOMDiXi1ze92VkADT 9lmJBimYb+lpJVnzQIBeWBZmOy5s94CkLyCZur+PycmNce4tKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSjjIVadYfTK7e2+20c5kYgmCJEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGI3ZDc2NmItNTFiOS0z MmE2LWFhZTEtMDhlNzQyNzEzMmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3c4cHE8ZAd+Gg0U2j6yh0s6/pVjXk+cBU7k2XwWdSVxAgxI8aqgjY7 aRVMyMkwM7zT0cNrxmlntiQtchbcSJ1a4BGuDLR6tIFZVV6tPix7g/cLyfti26sx sHSbssO2n/H99ZMmYk67YKQqEXOpm2l+OsnmhN6rzt6P9CWpID3nrFve/sRiPppL H3+BmZo8O0kpuSZeDVAf0aYT0ETyYctDol3rS9M8vNMFJ6ChT68PTWrLQc/pkS8T ein2XEK8Cy3GQbsPockDH7z+OxHAWYIv/+Sfj4NLbudJa+wKJD7hFHT3ysCKebil gbG15CtkKo1GN2tTixuNt+JoLGBSXYU= -----END CERTIFICATE-----Generated at Tue Jul 21 21:08:17 2026 by rpki-client