$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dd987b5e-3883-33aa-beed-2bb079da51c0.roa File: dd987b5e-3883-33aa-beed-2bb079da51c0.roa (raw, json) Hash identifier: WX10PqAvvpNot6/I8MWMQB4VrfyxC6O7FL5TXRuh6ps= Subject key identifier: 51:6E:98:8A:1A:65:30:40:9C:93:33:AE:5F:02:97:D0:5E:38:93:DE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E86F5056AB8650AC7B9567FC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dd987b5e-3883-33aa-beed-2bb079da51c0.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 8069 IP address blocks: 20.33.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f5:05:6a:b8:65:0a:c7:b9:56:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=fabea325-2bb4-42bc-86bc-44e6d557fa55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dc:36:06:e8:85:24:fe:60:45:a1:8a:cb:45: 77:9e:5a:3d:ab:cc:f4:2f:46:8f:40:d5:25:bd:d0: 6a:9c:19:7f:57:25:92:5c:75:e7:02:a7:3a:68:ee: e6:2e:e4:67:3b:fd:6a:e4:21:87:9e:8e:22:8f:99: bc:ca:f6:99:13:26:d7:1d:15:9e:aa:95:a6:91:61: e0:3c:8a:96:b9:ff:ed:f8:a5:52:b8:ee:8b:6b:7e: 74:04:56:4c:f0:a0:3b:16:d3:7a:06:41:d9:fa:0c: 91:58:de:ca:db:8f:58:2b:7b:11:c3:c6:f1:73:91: a2:4e:4f:33:e8:df:4f:59:7d:63:21:12:16:ba:17: fa:65:c1:da:e7:5f:2f:d6:a8:5b:98:5e:22:df:96: e6:3e:36:f8:bd:07:2d:0f:ca:e0:68:51:94:67:f4: ff:c5:78:ae:63:0a:41:78:17:e2:b9:73:82:ca:7c: 86:f6:e8:cd:dd:dd:4f:bf:24:45:19:1a:6c:dc:9c: 47:55:89:6d:a0:22:a0:73:e9:39:94:c8:6b:a6:c6: 93:10:d5:d0:54:19:7f:0c:b8:55:1a:35:a0:6d:77: b1:6f:60:3f:96:0e:e4:0b:0a:8c:73:97:37:f1:31: e8:69:81:4f:11:c5:03:aa:a8:2c:4a:64:0d:82:fe: d2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:6E:98:8A:1A:65:30:40:9C:93:33:AE:5F:02:97:D0:5E:38:93:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dd987b5e-3883-33aa-beed-2bb079da51c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:7d:db:76:a8:d5:88:43:39:f1:52:5c:d9:83:2f:0d:b8:fa: 02:5c:07:d6:a3:b2:1e:65:58:a3:94:e4:31:a9:a5:5c:2e:55: e1:7a:71:f3:a9:ec:5e:e9:33:01:43:17:b0:4e:38:df:6a:96: 6e:a7:56:b9:b8:36:e5:c9:59:9b:6f:f4:e2:75:bc:36:e4:f6: 15:e3:6f:48:60:30:23:f7:5c:47:81:c5:f0:36:19:b2:54:89: ad:08:ec:be:7e:0d:67:ca:98:48:19:2e:b8:ba:c3:0b:ce:12: b3:84:be:f0:db:02:5e:72:14:7f:33:f8:2f:5a:e5:fe:c5:98: bd:be:ba:92:d8:8a:a6:97:a6:b4:e0:83:00:d4:32:a9:d1:76: 98:b9:59:fa:32:09:a5:89:e4:36:bc:7f:5d:93:b7:e7:3e:5c: 3f:94:de:a9:a5:db:29:85:d5:bf:36:4a:fc:56:8c:6e:4e:0b: 15:f5:7d:2b:77:fd:64:10:ee:ef:be:31:31:30:e2:a1:26:b9: ff:14:a3:5d:6f:56:00:a2:f9:6e:17:bd:12:8b:31:80:18:a1: 25:0e:3b:a4:e5:ee:ab:f8:5d:10:39:d6:d8:0e:0c:5e:45:9e: cb:e4:2e:a1:0d:19:4f:63:ff:d4:99:58:dd:47:f3:c7:8f:2e: 1e:c3:de:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9QVquGUKx7lWf8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk ZmFiZWEzMjUtMmJiNC00MmJjLTg2YmMtNDRlNmQ1NTdmYTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndw2BuiFJP5gRaGKy0V3nlo9q8z0L0aPQNUl vdBqnBl/VyWSXHXnAqc6aO7mLuRnO/1q5CGHno4ij5m8yvaZEybXHRWeqpWmkWHg PIqWuf/t+KVSuO6La350BFZM8KA7FtN6BkHZ+gyRWN7K249YK3sRw8bxc5GiTk8z 6N9PWX1jIRIWuhf6ZcHa518v1qhbmF4i35bmPjb4vQctD8rgaFGUZ/T/xXiuYwpB eBfiuXOCynyG9ujN3d1PvyRFGRps3JxHVYltoCKgc+k5lMhrpsaTENXQVBl/DLhV GjWgbXexb2A/lg7kCwqMc5c38THoaYFPEcUDqqgsSmQNgv7SCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFumIoaZTBAnJMzrl8Cl9BeOJPeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGQ5ODdiNWUtMzg4My0z M2FhLWJlZWQtMmJiMDc5ZGE1MWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFt923ao1YhDOfFSXNmDLw24+gJcB9ajsh5lWKOU5DGppVwuVeF6cfOp 7F7pMwFDF7BOON9qlm6nVrm4NuXJWZtv9OJ1vDbk9hXjb0hgMCP3XEeBxfA2GbJU ia0I7L5+DWfKmEgZLri6wwvOErOEvvDbAl5yFH8z+C9a5f7FmL2+upLYiqaXprTg gwDUMqnRdpi5WfoyCaWJ5Da8f12Tt+c+XD+U3qml2ymF1b82SvxWjG5OCxX1fSt3 /WQQ7u++MTEw4qEmuf8Uo11vVgCi+W4XvRKLMYAYoSUOO6Tl7qv4XRA51tgODF5F nsvkLqENGU9j/9SZWN1H88ePLh7D3is= -----END CERTIFICATE-----Generated at Tue Jul 21 21:07:21 2026 by rpki-client