$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec1a8906-033b-3989-b1b1-0dfeb0948d2c.roa File: ec1a8906-033b-3989-b1b1-0dfeb0948d2c.roa (raw, json) Hash identifier: 6EE7+1wl1xVSuI0+tIW1XStfmJsszGQKTc/2/MY8t1A= Subject key identifier: B6:E3:F3:37:D0:28:98:EF:59:C0:C8:9B:EE:95:30:E5:9D:7C:1B:07 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E8DEFAEA6245E268C4A0E48E0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec1a8906-033b-3989-b1b1-0dfeb0948d2c.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.33.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:ae:a6:24:5e:26:8c:4a:0e:48:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=336b653b-515d-45a1-8877-ba0ea9bb1dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b6:49:7f:a1:30:c2:58:03:9c:b5:2b:e6:76: 96:96:79:a5:f6:b7:b1:41:a0:cc:fc:c3:54:dd:40: 80:e3:b0:f0:e8:4d:2a:48:1b:f0:fd:69:dd:44:a0: 80:07:fe:03:d8:93:d1:78:a3:a6:a6:55:e8:db:05: 7f:bf:30:ed:61:fd:40:71:93:ed:ce:a9:63:73:62: f0:bb:b4:b8:9d:6e:8b:36:8f:32:a8:5f:e6:f0:55: 6d:e3:37:76:d5:f6:a9:d0:30:42:01:32:6b:b2:22: 16:a9:95:a4:94:e2:99:76:82:d9:85:05:95:c4:1d: 2b:c3:84:43:ec:a1:a9:a7:a2:e9:d4:39:6c:c0:0c: da:da:b4:99:c4:55:c0:e6:3b:e9:b4:43:d7:25:cd: ed:a3:5d:e2:a2:ac:4e:b0:af:bd:82:19:02:98:24: 72:e0:4c:aa:ec:32:75:97:a2:70:f4:55:0c:d3:fd: fd:0c:46:6c:c9:94:82:6c:de:ad:85:c2:37:2f:dd: 51:90:d9:d6:a4:d8:79:63:8d:ce:b4:17:e0:53:08: 02:a9:8d:6e:ee:0c:da:ef:ea:e6:ba:7d:b0:74:3f: 9f:e8:cb:4c:db:31:9d:ec:9d:b4:f3:79:bf:1d:49: b5:d2:40:0a:79:aa:a1:80:0f:d3:34:4e:b6:36:a9: ca:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E3:F3:37:D0:28:98:EF:59:C0:C8:9B:EE:95:30:E5:9D:7C:1B:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec1a8906-033b-3989-b1b1-0dfeb0948d2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:3d:9c:c9:c5:0d:62:53:52:42:f5:28:47:db:06:64:87:43: 1a:6d:ad:12:17:16:d5:cc:3c:fd:5c:45:a2:5e:1f:42:fb:23: c5:66:d2:19:c4:7f:d3:99:6f:1e:8a:3b:a7:82:23:60:c0:ba: 8a:69:a1:95:9f:d2:0f:84:34:9a:df:1b:5e:e4:51:40:90:56: 05:64:8b:79:a2:ee:4b:d6:80:81:a4:33:cf:9b:3c:32:1a:dd: 2f:04:aa:2a:23:0c:a5:e0:9a:e9:c4:1f:14:e7:90:2e:40:15: e5:89:ad:a0:ee:bf:b1:8c:29:48:34:d1:4a:4c:b4:85:d9:5f: f5:df:7f:fd:c6:21:db:4b:44:c9:a1:2b:0a:90:cd:06:55:c7: b0:a5:43:e5:b8:38:13:ca:4c:d1:e8:61:9a:6a:c6:e8:33:a9: a9:4a:04:b7:22:97:10:63:52:5c:85:78:31:26:2e:d0:c8:cb: 48:d3:f9:19:b9:a8:d7:eb:f7:df:fe:82:99:5a:ae:68:c1:d7: cf:b8:7e:65:54:ba:29:a4:79:52:c1:df:09:19:d7:ed:d6:69: 04:54:64:18:51:f7:00:aa:76:41:50:19:59:cc:04:23:d2:d9: ee:0a:04:dc:fb:af:ab:ee:d5:12:c4:bc:38:db:06:bc:b6:7e: dc:5a:ad:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N766mJF4mjEoOSOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk MzM2YjY1M2ItNTE1ZC00NWExLTg4NzctYmEwZWE5YmIxZGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbZJf6EwwlgDnLUr5naWlnml9rexQaDM/MNU 3UCA47Dw6E0qSBvw/WndRKCAB/4D2JPReKOmplXo2wV/vzDtYf1AcZPtzqljc2Lw u7S4nW6LNo8yqF/m8FVt4zd21fap0DBCATJrsiIWqZWklOKZdoLZhQWVxB0rw4RD 7KGpp6Lp1DlswAza2rSZxFXA5jvptEPXJc3to13ioqxOsK+9ghkCmCRy4Eyq7DJ1 l6Jw9FUM0/39DEZsyZSCbN6thcI3L91RkNnWpNh5Y43OtBfgUwgCqY1u7gza7+rm un2wdD+f6MtM2zGd7J2083m/HUm10kAKeaqhgA/TNE62NqnKKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbj8zfQKJjvWcDIm+6VMOWdfBsHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWMxYTg5MDYtMDMzYi0z OTg5LWIxYjEtMGRmZWIwOTQ4ZDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB89nMnFDWJTUkL1KEfbBmSHQxptrRIXFtXMPP1cRaJeH0L7I8Vm0hnE f9OZbx6KO6eCI2DAuoppoZWf0g+ENJrfG17kUUCQVgVki3mi7kvWgIGkM8+bPDIa 3S8EqiojDKXgmunEHxTnkC5AFeWJraDuv7GMKUg00UpMtIXZX/Xff/3GIdtLRMmh KwqQzQZVx7ClQ+W4OBPKTNHoYZpqxugzqalKBLcilxBjUlyFeDEmLtDIy0jT+Rm5 qNfr99/+gplarmjB18+4fmVUuimkeVLB3wkZ1+3WaQRUZBhR9wCqdkFQGVnMBCPS 2e4KBNz7r6vu1RLEvDjbBry2ftxarSE= -----END CERTIFICATE-----Generated at Tue Jul 21 21:06:52 2026 by rpki-client