$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f0058f51-71cc-3456-babb-8278aa6adf3e.roa File: f0058f51-71cc-3456-babb-8278aa6adf3e.roa (raw, json) Hash identifier: dp95Y9+JGkzCPk1IBos6R7nJgUrQHpRz9q+4Xu4qBrs= Subject key identifier: 22:93:78:74:05:A5:01:D4:D0:60:FD:0E:DB:43:24:6B:DB:22:55:A4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E7BCA316245090559763F5300 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f0058f51-71cc-3456-babb-8278aa6adf3e.roa Signing time: Mon 13 Jul 2026 09:00:12 +0000 ROA not before: Mon 13 Jul 2026 09:00:12 +0000 ROA not after: Sun 11 Oct 2026 09:00:12 +0000 asID: 8069 IP address blocks: 20.33.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7b:ca:31:62:45:09:05:59:76:3f:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 13 09:00:12 2026 GMT Not After : Oct 11 09:00:12 2026 GMT Subject: CN=eefa3908-f317-41c7-9894-57085eb8b9d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7f:9b:a8:83:8f:99:b5:8c:a1:1a:64:c6:8a: ef:12:6d:dc:de:00:9f:b8:84:51:aa:91:0b:8a:d0: 55:01:0e:ee:4f:2d:67:38:37:79:81:7e:b4:18:18: 31:5e:e8:dd:80:ba:e2:e4:ae:1b:9a:05:c2:70:30: 02:08:a7:88:2f:df:a1:8d:92:c5:6a:3b:c0:60:e0: 02:5a:0c:53:8f:ba:dc:3c:78:d1:12:73:46:b2:d0: c0:c5:2f:00:62:e4:53:95:46:9f:74:15:1d:f7:97: 65:c2:c0:f7:2e:34:23:89:96:e8:cc:4b:3f:bc:d4: 97:e1:c9:46:81:16:85:dd:37:c6:b6:be:94:e9:dc: 8d:54:73:27:2a:3c:91:b4:fa:de:2e:cd:15:df:7b: f7:80:67:3f:78:41:c0:75:b2:de:e7:d3:64:5d:39: 8f:80:7f:9d:56:0f:31:fd:de:5f:61:9f:82:98:bd: 0d:27:00:67:48:d0:45:0f:25:5a:18:77:66:b3:f7: e0:c0:6c:89:88:52:af:e2:15:82:d7:a4:58:c1:6f: c9:d8:e2:04:67:f1:91:14:0f:57:37:ab:ae:a5:fb: bf:9d:8e:a2:6e:a4:2b:11:bb:8f:8e:43:92:c5:70: da:49:26:16:5e:9e:79:fa:be:af:9b:99:9d:cd:35: 50:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:93:78:74:05:A5:01:D4:D0:60:FD:0E:DB:43:24:6B:DB:22:55:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f0058f51-71cc-3456-babb-8278aa6adf3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f4:68:93:49:7f:e5:3c:ed:e7:cf:4a:40:5c:0d:23:01:54: 8b:c0:40:af:97:1b:ca:b9:76:bb:50:03:ba:b6:98:77:d2:9b: 4c:71:7b:e5:63:58:b7:d5:02:e2:21:20:81:e8:83:e5:03:c7: ba:e3:e3:06:c9:4e:bb:7c:ac:27:f9:6d:84:f7:30:9e:05:cc: 37:22:4a:a9:8b:d2:2b:98:52:f4:88:a5:b3:3b:aa:4e:eb:2d: a2:af:d4:10:97:dc:cc:cc:8f:07:c3:74:eb:4a:38:98:be:f8: ca:e6:d2:30:6a:97:d0:1b:ac:cd:c7:e3:17:9a:aa:a6:50:da: 4e:2f:8c:51:e0:08:d0:76:b2:ea:18:d5:61:9e:44:bc:10:4f: 78:29:d1:1b:ea:70:5c:9c:4d:bb:d2:85:84:ad:36:bd:89:da: f4:6a:ae:85:2e:d0:81:57:61:9f:b6:9e:d2:5a:5d:3e:70:67: a0:e6:a5:55:85:d7:e2:4c:e8:3e:1b:f0:ba:a0:3b:35:da:ab: 30:5c:96:c3:4d:2a:4f:d2:45:36:a3:6a:1a:9c:73:79:ea:20: 51:4f:14:fd:ca:66:01:5b:40:30:97:9f:74:0e:4a:65:e3:ef: 1c:d7:e7:7c:c1:06:97:93:27:a2:b8:85:94:73:f8:c4:8b:56: 72:39:ea:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE57yjFiRQkFWXY/UwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxMzA5MDAxMloXDTI2MTAxMTA5MDAxMlowLzEtMCsGA1UEAxMk ZWVmYTM5MDgtZjMxNy00MWM3LTk4OTQtNTcwODVlYjhiOWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3+bqIOPmbWMoRpkxorvEm3c3gCfuIRRqpEL itBVAQ7uTy1nODd5gX60GBgxXujdgLri5K4bmgXCcDACCKeIL9+hjZLFajvAYOAC WgxTj7rcPHjREnNGstDAxS8AYuRTlUafdBUd95dlwsD3LjQjiZbozEs/vNSX4clG gRaF3TfGtr6U6dyNVHMnKjyRtPreLs0V33v3gGc/eEHAdbLe59NkXTmPgH+dVg8x /d5fYZ+CmL0NJwBnSNBFDyVaGHdms/fgwGyJiFKv4hWC16RYwW/J2OIEZ/GRFA9X N6uupfu/nY6ibqQrEbuPjkOSxXDaSSYWXp55+r6vm5mdzTVQowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKTeHQFpQHU0GD9DttDJGvbIlWkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjAwNThmNTEtNzFjYy0z NDU2LWJhYmItODI3OGFhNmFkZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAr0aJNJf+U87efPSkBcDSMBVIvAQK+XG8q5drtQA7q2mHfSm0xxe+Vj WLfVAuIhIIHog+UDx7rj4wbJTrt8rCf5bYT3MJ4FzDciSqmL0iuYUvSIpbM7qk7r LaKv1BCX3MzMjwfDdOtKOJi++Mrm0jBql9AbrM3H4xeaqqZQ2k4vjFHgCNB2suoY 1WGeRLwQT3gp0RvqcFycTbvShYStNr2J2vRqroUu0IFXYZ+2ntJaXT5wZ6DmpVWF 1+JM6D4b8LqgOzXaqzBclsNNKk/SRTajahqcc3nqIFFPFP3KZgFbQDCXn3QOSmXj 7xzX53zBBpeTJ6K4hZRz+MSLVnI56iI= -----END CERTIFICATE-----Generated at Tue Jul 21 21:08:08 2026 by rpki-client