$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec15a5a9-3318-3dd2-9e36-e6a359acf7ba.roa File: ec15a5a9-3318-3dd2-9e36-e6a359acf7ba.roa (raw, json) Hash identifier: u0JOivkyAuadO/2JUfiaegTbJ/yqdVBVlCdBlvWNXig= Subject key identifier: 83:46:67:2D:9F:0D:FE:A9:03:8F:F6:BB:19:CC:ED:65:4D:3C:BD:1D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E8DEFAE179760F7406DCA5100 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec15a5a9-3318-3dd2-9e36-e6a359acf7ba.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.33.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:ae:17:97:60:f7:40:6d:ca:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=ff420c99-7a23-49f1-a9b2-9301aeb0ae72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b5:74:2a:df:86:e5:87:e0:11:9a:3d:8c:32: 70:57:fc:e3:49:26:06:d8:ff:1c:f2:62:24:29:a6: 3a:fc:ed:9d:47:c1:d2:29:95:41:c1:45:12:b2:c6: 48:25:75:41:39:9e:0e:10:1d:2a:61:15:d1:23:be: 1e:43:a9:aa:c7:0a:a1:54:05:0f:58:3b:5a:f5:af: 0f:b8:07:2a:8c:11:4a:5a:37:ff:b1:ad:b7:e4:d7: 80:e7:34:83:d3:2a:24:a3:17:b8:71:7b:07:bd:96: 27:fa:f7:eb:84:92:d3:9b:df:e2:20:02:3c:c6:2f: e6:19:77:1f:6b:a0:eb:c8:cf:fe:c1:76:00:da:4b: a4:ad:94:e4:8c:39:6c:12:c6:d2:0c:69:b7:56:87: 7c:d3:13:2b:e9:fd:69:e2:28:57:5e:33:d0:27:1f: f6:f1:33:29:f2:ec:8a:a9:b6:94:c2:8b:8e:25:46: ae:84:0d:e0:7b:99:b5:65:b0:7f:b6:03:bf:0f:2e: 4f:ae:56:cb:f4:dc:42:35:c8:da:d9:c6:29:90:27: bc:ea:7e:39:69:af:c3:d4:4c:94:2d:b8:f5:65:a2: 6e:cc:ac:da:4c:1c:3b:17:75:2a:81:d4:04:c4:e1: ac:1d:a7:48:ca:98:71:99:25:0f:a1:03:06:44:46: 81:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:46:67:2D:9F:0D:FE:A9:03:8F:F6:BB:19:CC:ED:65:4D:3C:BD:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec15a5a9-3318-3dd2-9e36-e6a359acf7ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:c2:52:29:40:da:63:28:e0:80:96:76:09:0a:b1:fa:f5:e3: a7:df:fc:c7:70:50:0e:db:4d:61:cb:5f:99:e7:0c:19:34:8b: 05:bf:1d:1e:d6:a1:83:2a:32:7c:8e:3f:ac:c2:c0:0b:3b:ac: f7:26:39:2a:d7:4f:a9:9f:8f:68:84:ca:a4:10:a5:47:eb:71: 8b:38:3b:6f:7c:37:6c:c7:c8:58:08:c2:54:c8:36:f5:02:4a: 2d:03:15:db:10:96:11:17:ec:13:83:41:48:5c:c8:5c:d7:46: f4:c8:9d:44:bc:49:4b:2a:65:96:3c:31:35:c8:80:89:f0:13: 72:43:d2:49:7a:c0:cb:9c:d0:65:d7:ff:a8:ad:60:5b:7c:63: 58:ce:1c:f8:50:24:a5:7a:94:fa:34:63:56:6b:d0:f9:4f:4e: 20:c8:67:77:ee:9e:cf:7d:d1:7f:f5:7d:b5:16:6a:58:b5:e9: 13:a7:51:66:87:d0:45:52:b0:a2:0c:d9:fc:bb:e3:fa:97:99: e9:9d:61:b9:ba:39:6a:e1:21:8b:5e:f5:87:36:44:ca:ea:d2: 86:0d:e3:ea:71:c5:2d:c6:07:a7:db:35:89:37:2d:28:5b:76: 5b:31:49:1e:ed:84:aa:4c:92:cf:f8:e2:71:03:11:11:fc:72: 5e:22:03:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N764Xl2D3QG3KUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk ZmY0MjBjOTktN2EyMy00OWYxLWE5YjItOTMwMWFlYjBhZTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbV0Kt+G5YfgEZo9jDJwV/zjSSYG2P8c8mIk KaY6/O2dR8HSKZVBwUUSssZIJXVBOZ4OEB0qYRXRI74eQ6mqxwqhVAUPWDta9a8P uAcqjBFKWjf/sa235NeA5zSD0yokoxe4cXsHvZYn+vfrhJLTm9/iIAI8xi/mGXcf a6DryM/+wXYA2kukrZTkjDlsEsbSDGm3Vod80xMr6f1p4ihXXjPQJx/28TMp8uyK qbaUwouOJUauhA3ge5m1ZbB/tgO/Dy5PrlbL9NxCNcja2cYpkCe86n45aa/D1EyU Lbj1ZaJuzKzaTBw7F3UqgdQExOGsHadIyphxmSUPoQMGREaBPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINGZy2fDf6pA4/2uxnM7WVNPL0dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWMxNWE1YTktMzMxOC0z ZGQyLTllMzYtZTZhMzU5YWNmN2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7CUilA2mMo4ICWdgkKsfr146ff/MdwUA7bTWHLX5nnDBk0iwW/HR7W oYMqMnyOP6zCwAs7rPcmOSrXT6mfj2iEyqQQpUfrcYs4O298N2zHyFgIwlTINvUC Si0DFdsQlhEX7BODQUhcyFzXRvTInUS8SUsqZZY8MTXIgInwE3JD0kl6wMuc0GXX /6itYFt8Y1jOHPhQJKV6lPo0Y1Zr0PlPTiDIZ3funs990X/1fbUWali16ROnUWaH 0EVSsKIM2fy74/qXmemdYbm6OWrhIYte9Yc2RMrq0oYN4+pxxS3GB6fbNYk3LShb dlsxSR7thKpMks/44nEDERH8cl4iA4k= -----END CERTIFICATE-----Generated at Tue Jul 21 21:06:10 2026 by rpki-client