$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f936e6cc-baa1-313f-bf0e-1713ad436581.roa File: f936e6cc-baa1-313f-bf0e-1713ad436581.roa (raw, json) Hash identifier: +AO/NHSTXb4xx7an0GLPhzlR7J8v+kq8mDj7kvpEyss= Subject key identifier: 8E:7A:34:24:4A:B0:98:E6:82:E2:1A:23:07:E9:1F:CB:0C:69:43:11 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E86F504E559949B2300C90CE0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f936e6cc-baa1-313f-bf0e-1713ad436581.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 8069 IP address blocks: 20.33.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f5:04:e5:59:94:9b:23:00:c9:0c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=db3451e8-9469-488b-9736-25d422b8e7ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:60:b0:c0:3a:4b:7b:8b:2f:8e:9f:f6:cd:04: 71:8b:9b:55:44:f5:24:72:d5:75:c5:52:07:d8:36: 65:4d:f4:9d:77:8a:cd:c7:b7:81:15:86:3e:01:64: 74:ae:51:66:a2:63:9f:84:32:40:5d:22:2a:c3:cc: cf:97:74:e0:3f:ce:eb:0c:2b:a4:f9:2f:ab:56:27: 29:f8:16:b6:53:7f:4a:1b:7b:d1:f2:9f:0a:a9:13: 04:be:60:83:e5:c6:40:3c:68:b5:4f:28:14:88:6f: 9c:25:19:20:1a:52:5f:e3:20:dc:26:7b:e8:6b:b8: 45:a3:16:59:66:1c:89:90:0f:38:3f:17:be:fb:c7: 82:be:ee:51:f6:10:4e:e3:55:53:01:a7:9b:3c:12: d6:6b:fc:93:66:62:79:74:8a:1a:6e:ac:08:d6:a8: fe:19:86:d8:89:80:a6:a4:ab:1a:95:fe:d5:66:1e: a1:ec:45:f1:4a:9c:c4:3b:ef:d6:19:50:4c:ca:00: 30:c8:b0:7c:2c:9a:c3:2d:bf:62:6e:e1:c5:45:e0: 85:87:d5:c0:06:6a:f7:21:0d:56:f8:eb:71:c6:ba: d2:18:cc:7e:6b:e3:fe:ee:21:95:b8:9a:19:3e:aa: 16:b8:83:99:e6:77:0f:31:1a:92:17:7a:fb:7b:5a: a1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7A:34:24:4A:B0:98:E6:82:E2:1A:23:07:E9:1F:CB:0C:69:43:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f936e6cc-baa1-313f-bf0e-1713ad436581.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:4f:58:00:13:12:62:57:c6:ea:19:6a:d6:f5:bb:91:03:80: f8:e1:b5:21:bc:69:7c:a2:25:28:ee:53:19:35:00:b8:f5:d4: b0:d0:ac:f4:d3:29:06:48:3e:68:e0:82:26:8b:9f:3c:38:85: a3:84:cb:7b:22:4a:5d:30:b0:b4:4d:ea:24:da:32:9c:bd:54: e4:ca:e6:50:30:97:4c:79:86:5d:77:9d:f4:bc:bf:41:57:db: 26:56:1b:b6:dc:60:b6:8a:ba:b7:2e:c8:36:11:6d:2b:bf:78: bf:ce:9e:0e:5b:57:20:7f:ca:61:a5:67:d5:f7:86:c9:b2:c5: 2a:11:f0:94:1a:70:8a:26:3d:60:21:52:6f:89:57:2a:da:26: e8:1f:29:b4:ee:7e:bb:e0:21:4f:75:ee:df:59:90:88:75:dc: 15:f5:22:0d:4e:0b:2a:9d:bd:67:6c:73:c9:53:73:ee:08:e0: 7a:7c:d4:c3:22:98:15:c0:12:bc:31:37:80:a7:3b:64:02:d2: 70:51:65:6a:95:ef:52:f1:32:5a:d8:68:63:cc:90:fc:44:e6: a5:6a:7e:b8:80:b0:c2:d6:eb:f2:de:64:68:42:43:fa:ce:a7: 6a:df:9f:f1:f8:c0:35:bd:df:ea:33:83:c9:8f:6e:dc:23:ff: 18:73:9f:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9QTlWZSbIwDJDOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk ZGIzNDUxZTgtOTQ2OS00ODhiLTk3MzYtMjVkNDIyYjhlN2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGCwwDpLe4svjp/2zQRxi5tVRPUkctV1xVIH 2DZlTfSdd4rNx7eBFYY+AWR0rlFmomOfhDJAXSIqw8zPl3TgP87rDCuk+S+rVicp +Ba2U39KG3vR8p8KqRMEvmCD5cZAPGi1TygUiG+cJRkgGlJf4yDcJnvoa7hFoxZZ ZhyJkA84Pxe++8eCvu5R9hBO41VTAaebPBLWa/yTZmJ5dIoabqwI1qj+GYbYiYCm pKsalf7VZh6h7EXxSpzEO+/WGVBMygAwyLB8LJrDLb9ibuHFReCFh9XABmr3IQ1W +OtxxrrSGMx+a+P+7iGVuJoZPqoWuIOZ5ncPMRqSF3r7e1qhNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI56NCRKsJjmguIaIwfpH8sMaUMRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjkzNmU2Y2MtYmFhMS0z MTNmLWJmMGUtMTcxM2FkNDM2NTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBPWAATEmJXxuoZatb1u5EDgPjhtSG8aXyiJSjuUxk1ALj11LDQrPTT KQZIPmjggiaLnzw4haOEy3siSl0wsLRN6iTaMpy9VOTK5lAwl0x5hl13nfS8v0FX 2yZWG7bcYLaKurcuyDYRbSu/eL/Ong5bVyB/ymGlZ9X3hsmyxSoR8JQacIomPWAh Um+JVyraJugfKbTufrvgIU917t9ZkIh13BX1Ig1OCyqdvWdsc8lTc+4I4Hp81MMi mBXAErwxN4CnO2QC0nBRZWqV71LxMlrYaGPMkPxE5qVqfriAsMLW6/LeZGhCQ/rO p2rfn/H4wDW93+ozg8mPbtwj/xhzn6c= -----END CERTIFICATE-----Generated at Tue Jul 21 21:08:07 2026 by rpki-client