$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ffb5f399-7910-3515-819d-e4fcf15480cf.roa File: ffb5f399-7910-3515-819d-e4fcf15480cf.roa (raw, json) Hash identifier: EsxR1sgdypbLP5RoZdT98Z8i+nOQtVFg23tI5lM4uj4= Subject key identifier: 79:4C:5C:6D:62:EE:B4:88:63:1A:5C:6C:D4:74:58:36:64:EA:29:56 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E4129E0F442958F1B6BBB6B80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ffb5f399-7910-3515-819d-e4fcf15480cf.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 8069 IP address blocks: 20.33.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:e0:f4:42:95:8f:1b:6b:bb:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=f4c6a00e-395d-4db7-ac2c-28778e672227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6c:d0:78:3a:ec:f8:cb:89:e1:8b:11:cf:2c: 60:66:77:ae:00:49:bc:d7:da:8c:91:cc:1a:03:37: 32:da:25:ce:52:39:fd:09:2a:0a:7e:7d:9f:1b:b1: ac:ee:2b:26:56:91:bd:ca:3f:5a:02:89:ce:34:87: 45:d3:97:82:8d:f2:1f:c2:7e:3a:1a:8c:ff:ea:0d: ab:92:28:30:76:56:60:c8:90:37:a5:a8:f6:8a:e5: f8:5e:48:cc:36:f2:2a:7a:83:c8:0c:5b:a7:48:39: f7:ae:13:aa:b0:17:6c:77:5b:67:05:2e:14:c7:d7: b7:f2:c2:9c:8c:93:2b:f5:a2:a6:7d:5d:33:e7:d6: a0:f5:f5:59:16:3d:30:97:bd:c1:0a:8e:e9:14:0b: 0f:65:b5:ba:70:bf:05:a4:9a:a3:91:51:a6:2b:d0: bb:39:82:51:2a:67:b5:bf:99:62:5c:58:fd:38:e9: fe:20:64:5f:e0:f3:5f:5d:5d:09:76:1d:5c:9d:b8: 74:0b:3f:5a:09:0c:3e:39:74:39:12:99:d4:37:23: f5:f7:a8:ab:25:10:d0:d6:9c:27:2b:18:38:8f:75: 9c:d1:00:5e:89:60:59:e5:36:8b:eb:45:98:2a:9a: 9a:65:eb:26:f6:08:19:36:59:09:4f:28:9d:2a:24: c5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4C:5C:6D:62:EE:B4:88:63:1A:5C:6C:D4:74:58:36:64:EA:29:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ffb5f399-7910-3515-819d-e4fcf15480cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:3e:73:33:55:56:9a:3d:9b:be:b4:91:0d:18:82:b1:cd:75: 16:4e:79:4e:b5:ff:bf:d4:1e:d6:58:dd:40:a2:46:ba:bb:54: de:c2:79:88:90:76:20:0f:9f:90:54:7c:93:55:0c:4f:c1:44: 1d:0e:35:de:02:28:48:a4:6f:cd:87:46:25:72:a9:46:87:9b: b6:e9:a3:fb:ff:4e:62:87:00:73:8c:b1:63:23:36:f9:3f:21: 31:54:ad:54:c2:15:dd:b8:ea:dd:ae:b0:62:a9:41:ce:ce:5f: 47:1e:a6:be:d7:ed:42:bd:b8:f8:d2:f6:6e:95:ae:ec:b9:5a: 06:06:1e:d4:1c:71:c8:c1:45:26:b5:14:2e:26:ce:ca:8f:3f: c6:c0:8f:f7:9d:85:f2:e1:54:2f:44:92:b0:60:6d:5b:0c:df: 5e:c2:45:48:1f:44:58:86:07:df:90:54:95:48:33:19:ed:0b: 0b:17:d6:05:c7:9d:71:e8:b2:5d:15:38:0b:40:e4:4a:47:5a: 95:1e:aa:b3:44:b8:30:e2:fe:eb:f6:f1:2f:8c:38:62:5a:90: e7:88:8f:a7:f4:43:a3:e8:cd:a6:18:0e:39:c0:73:b1:75:a2: 26:ca:c4:dd:92:27:c0:c2:f0:ab:07:93:a0:23:a1:da:09:99: 5c:fa:24:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKeD0QpWPG2u7a4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk ZjRjNmEwMGUtMzk1ZC00ZGI3LWFjMmMtMjg3NzhlNjcyMjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWzQeDrs+MuJ4YsRzyxgZneuAEm819qMkcwa Azcy2iXOUjn9CSoKfn2fG7Gs7ismVpG9yj9aAonONIdF05eCjfIfwn46Goz/6g2r kigwdlZgyJA3paj2iuX4XkjMNvIqeoPIDFunSDn3rhOqsBdsd1tnBS4Ux9e38sKc jJMr9aKmfV0z59ag9fVZFj0wl73BCo7pFAsPZbW6cL8FpJqjkVGmK9C7OYJRKme1 v5liXFj9OOn+IGRf4PNfXV0Jdh1cnbh0Cz9aCQw+OXQ5EpnUNyP196irJRDQ1pwn Kxg4j3Wc0QBeiWBZ5TaL60WYKpqaZesm9ggZNlkJTyidKiTFWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlMXG1i7rSIYxpcbNR0WDZk6ilWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZmZiNWYzOTktNzkxMC0z NTE1LTgxOWQtZTRmY2YxNTQ4MGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKs+czNVVpo9m760kQ0YgrHNdRZOeU61/7/UHtZY3UCiRrq7VN7CeYiQ diAPn5BUfJNVDE/BRB0ONd4CKEikb82HRiVyqUaHm7bpo/v/TmKHAHOMsWMjNvk/ ITFUrVTCFd246t2usGKpQc7OX0cepr7X7UK9uPjS9m6Vruy5WgYGHtQcccjBRSa1 FC4mzsqPP8bAj/edhfLhVC9EkrBgbVsM317CRUgfRFiGB9+QVJVIMxntCwsX1gXH nXHosl0VOAtA5EpHWpUeqrNEuDDi/uv28S+MOGJakOeIj6f0Q6PozaYYDjnAc7F1 oibKxN2SJ8DC8KsHk6AjodoJmVz6JMo= -----END CERTIFICATE-----Generated at Tue Jul 21 21:06:06 2026 by rpki-client