$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f45acc02-de81-35fc-8583-59e61118770c.roa File: f45acc02-de81-35fc-8583-59e61118770c.roa (raw, json) Hash identifier: 72ztdboJSLqVz0qFxS6pCmup+CUcp7NInj3mkXMZO48= Subject key identifier: DF:61:A2:5F:09:30:6F:F7:4C:6C:6C:9B:8C:46:88:94:13:74:75:FA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E8DEFAE9A386E1C0BBB1A8500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f45acc02-de81-35fc-8583-59e61118770c.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.33.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:ae:9a:38:6e:1c:0b:bb:1a:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=a614e842-9e7b-44f5-8a26-91bab2a93895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:75:3d:08:94:ea:ca:2f:31:12:e2:c6:45:0c: 60:a7:02:18:37:70:c1:d2:fe:0b:b9:04:dd:c1:fb: 3c:a3:c4:23:d7:89:29:c1:47:0b:4c:76:52:b8:91: 39:e0:f6:7e:b2:c6:63:01:dc:69:15:7c:58:83:a9: 9b:32:d2:f3:c1:c9:cc:45:da:81:d7:76:3c:8d:ad: 9d:e5:62:9b:47:0a:2d:40:60:61:41:e2:5e:37:c1: 8b:a2:6b:35:ea:47:9a:2c:51:1d:71:78:0f:8e:f2: 56:27:3b:63:9d:bf:2e:9f:e5:90:cb:3c:0f:a3:b9: 88:ce:6a:da:73:12:0f:36:b5:57:e6:bc:90:bd:5f: 68:23:6b:9e:17:4a:07:5a:b5:ce:df:de:5d:20:25: 3c:5e:d7:ec:05:71:7f:2b:82:ba:27:d6:13:bc:21: 79:e0:19:16:ca:ea:e4:93:f8:37:40:3e:26:be:c2: 37:77:01:e7:03:87:b3:02:80:57:ad:43:17:af:c6: 22:d1:e4:66:51:da:cb:33:cd:db:e9:c6:de:35:ca: 78:c7:8a:99:da:36:e0:c7:77:44:7e:e3:81:e1:8a: 91:2a:5c:1e:4e:8b:22:db:ed:75:d1:c0:ac:f8:b9: 38:b6:cb:60:39:93:a0:d4:7a:85:db:9b:6e:c7:ff: fe:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:61:A2:5F:09:30:6F:F7:4C:6C:6C:9B:8C:46:88:94:13:74:75:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f45acc02-de81-35fc-8583-59e61118770c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:37:0c:f1:fa:97:29:b3:14:9d:72:38:ff:2e:dc:a4:4e:7e: 36:f8:ac:84:c6:f1:73:a5:fd:b3:6b:9c:ab:d3:41:44:a6:20: 11:cc:c4:f4:ce:06:11:0d:da:94:86:6e:f7:41:c1:30:8e:47: f4:37:cc:7c:fc:84:ba:04:08:d8:41:63:45:b0:05:4f:bf:d6: a5:c0:9a:32:7e:00:7b:23:7b:92:c6:56:74:e2:3c:60:6c:de: a7:ad:55:f4:42:92:e2:3e:d8:a6:a4:2d:ac:ae:e2:f4:9a:26: 75:bc:03:05:80:6c:60:92:d4:8b:7a:4e:7c:a2:c6:00:09:3e: 4a:6f:f0:de:7f:01:e3:d7:05:42:44:65:8b:85:18:47:37:1e: 25:06:77:89:50:27:67:d8:29:31:a6:18:83:5e:e0:66:5e:9c: ba:bf:5d:cd:2d:6b:6b:a9:f0:b1:bd:09:93:b0:8a:be:17:99: dc:d4:26:c9:ec:5f:7d:16:e3:3f:9d:9e:bb:cf:af:7c:7d:1c: 11:af:7a:2a:ae:ad:c7:18:da:b0:54:43:3b:2f:95:1a:c4:c7: 7b:0f:67:3f:05:60:9c:8d:66:d0:fa:b5:1d:da:47:dc:f6:28: b8:44:bd:8c:3b:c8:13:9d:30:1f:21:46:df:b9:eb:a2:ec:30: 4a:49:4a:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N766aOG4cC7sahQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk YTYxNGU4NDItOWU3Yi00NGY1LThhMjYtOTFiYWIyYTkzODk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHU9CJTqyi8xEuLGRQxgpwIYN3DB0v4LuQTd wfs8o8Qj14kpwUcLTHZSuJE54PZ+ssZjAdxpFXxYg6mbMtLzwcnMRdqB13Y8ja2d 5WKbRwotQGBhQeJeN8GLoms16keaLFEdcXgPjvJWJztjnb8un+WQyzwPo7mIzmra cxIPNrVX5ryQvV9oI2ueF0oHWrXO395dICU8XtfsBXF/K4K6J9YTvCF54BkWyurk k/g3QD4mvsI3dwHnA4ezAoBXrUMXr8Yi0eRmUdrLM83b6cbeNcp4x4qZ2jbgx3dE fuOB4YqRKlweTosi2+110cCs+Lk4tstgOZOg1HqF25tux//+eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9hol8JMG/3TGxsm4xGiJQTdHX6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjQ1YWNjMDItZGU4MS0z NWZjLTg1ODMtNTllNjExMTg3NzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHA3DPH6lymzFJ1yOP8u3KROfjb4rITG8XOl/bNrnKvTQUSmIBHMxPTO BhEN2pSGbvdBwTCOR/Q3zHz8hLoECNhBY0WwBU+/1qXAmjJ+AHsje5LGVnTiPGBs 3qetVfRCkuI+2KakLayu4vSaJnW8AwWAbGCS1It6TnyixgAJPkpv8N5/AePXBUJE ZYuFGEc3HiUGd4lQJ2fYKTGmGINe4GZenLq/Xc0ta2up8LG9CZOwir4XmdzUJsns X30W4z+dnrvPr3x9HBGveiqurccY2rBUQzsvlRrEx3sPZz8FYJyNZtD6tR3aR9z2 KLhEvYw7yBOdMB8hRt+566LsMEpJSrI= -----END CERTIFICATE-----Generated at Tue Jul 21 21:08:52 2026 by rpki-client