$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/075e6095-708d-322b-ad93-8707fd68b819.roa File: 075e6095-708d-322b-ad93-8707fd68b819.roa (raw, json) Hash identifier: a1CTFdAEZaP3lvNODn6mXBmdgang/skaoKCVnLypLhE= Subject key identifier: 3A:16:DA:82:2D:C9:17:F0:1F:DF:8C:75:60:57:09:0C:A9:8D:DF:3B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA7873D5DE8976175AE170540 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/075e6095-708d-322b-ad93-8707fd68b819.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.33.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:3d:5d:e8:97:61:75:ae:17:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e62296f3-ea92-4e6b-8d4d-0a39d8e35d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:87:b0:f7:e2:ac:2e:90:1e:53:cb:c4:fd:61: 03:58:bb:67:1a:35:5d:e0:e6:06:74:09:99:1b:37: 79:e2:5d:bf:61:d7:fd:04:2b:4d:71:70:3a:c0:18: d7:da:4c:7c:b4:dd:69:08:09:fc:d7:9c:2f:5b:6b: 1e:20:af:00:65:59:22:ca:52:72:9d:e0:cd:cd:04: e1:4b:d9:7c:81:11:9a:3e:0d:09:6d:05:ec:43:e5: 3c:a8:2a:99:2a:7b:69:df:6d:c9:1a:c5:51:63:cb: b4:b7:dc:cf:7e:2c:8c:dc:81:e9:70:d6:5b:5f:1c: 5b:a0:21:da:7e:ab:2c:f4:f6:c4:37:bc:7f:4b:08: d4:f0:f1:a8:de:23:8c:76:3a:66:8f:98:c5:16:e4: 5e:0c:93:dc:63:10:37:69:0e:74:8a:11:d1:e4:8b: cb:9a:59:41:7a:f3:8f:47:76:b2:f9:35:5e:30:67: 50:fe:50:7e:2f:01:07:e5:11:32:88:65:45:6d:7b: e2:13:5c:ee:60:cb:55:80:bc:12:5a:06:f4:ae:0c: d6:ad:5e:a1:eb:cc:41:ac:7e:3d:a0:bf:a7:9c:97: 18:56:93:a2:0b:1c:67:e8:27:15:53:ab:ac:3b:f4: 84:49:0e:9a:47:4c:f6:5a:ea:29:03:c1:73:98:f5: 8e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:16:DA:82:2D:C9:17:F0:1F:DF:8C:75:60:57:09:0C:A9:8D:DF:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/075e6095-708d-322b-ad93-8707fd68b819.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:40:68:32:71:89:b6:d5:04:08:90:e4:48:07:a1:10:cd:bb: 51:be:21:2e:e6:15:b2:81:13:cb:68:4b:ab:0e:e3:70:9e:1d: 5c:f1:2c:10:15:33:cb:8c:5b:3f:6f:2c:8d:dd:b4:35:ab:e7: 61:cc:07:bc:46:0f:7c:49:99:88:a1:44:38:6f:80:06:35:b1: 98:5f:24:b4:5a:80:7b:c7:8b:30:19:7a:5b:18:8a:97:9c:7d: 75:08:48:24:45:10:1f:d2:18:08:98:26:6a:67:c0:7f:92:ce: 34:a5:eb:05:5c:e2:20:ec:96:09:3f:78:4d:a0:d5:97:f1:80: 5a:0b:de:d4:b3:54:f3:33:c5:6b:6c:1a:47:d8:18:b6:e1:bc: 4e:4f:27:5e:5b:9c:7b:2a:4f:e6:bb:e9:83:7c:a9:ca:a5:77: bb:be:8b:65:c5:b7:2b:2f:cc:5a:0a:a8:14:a1:97:12:8b:62: 13:a2:2b:14:6e:8d:da:06:77:7b:68:cc:02:f5:44:72:58:ac: 9f:ae:f9:35:71:9d:30:dd:e2:7a:51:c8:93:92:0d:14:15:f9: 8a:16:a2:09:1e:b2:48:0b:ee:0e:81:96:87:70:94:80:17:14: be:a1:82:03:1d:6c:6a:b2:97:63:8d:9a:14:25:04:9d:23:ab: 6a:5a:cf:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhz1d6Jdhda4XBUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTYyMjk2ZjMtZWE5Mi00ZTZiLThkNGQtMGEzOWQ4ZTM1ZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oew9+KsLpAeU8vE/WEDWLtnGjVd4OYGdAmZ Gzd54l2/Ydf9BCtNcXA6wBjX2kx8tN1pCAn815wvW2seIK8AZVkiylJyneDNzQTh S9l8gRGaPg0JbQXsQ+U8qCqZKntp323JGsVRY8u0t9zPfiyM3IHpcNZbXxxboCHa fqss9PbEN7x/SwjU8PGo3iOMdjpmj5jFFuReDJPcYxA3aQ50ihHR5IvLmllBevOP R3ay+TVeMGdQ/lB+LwEH5REyiGVFbXviE1zuYMtVgLwSWgb0rgzWrV6h68xBrH49 oL+nnJcYVpOiCxxn6CcVU6usO/SESQ6aR0z2WuopA8FzmPWOCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoW2oItyRfwH9+MdWBXCQypjd87MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDc1ZTYwOTUtNzA4ZC0z MjJiLWFkOTMtODcwN2ZkNjhiODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhAaDJxibbVBAiQ5EgHoRDNu1G+IS7mFbKBE8toS6sO43CeHVzxLBAV M8uMWz9vLI3dtDWr52HMB7xGD3xJmYihRDhvgAY1sZhfJLRagHvHizAZelsYipec fXUISCRFEB/SGAiYJmpnwH+SzjSl6wVc4iDslgk/eE2g1ZfxgFoL3tSzVPMzxWts GkfYGLbhvE5PJ15bnHsqT+a76YN8qcqld7u+i2XFtysvzFoKqBShlxKLYhOiKxRu jdoGd3tozAL1RHJYrJ+u+TVxnTDd4npRyJOSDRQV+YoWogkeskgL7g6BlodwlIAX FL6hggMdbGqyl2ONmhQlBJ0jq2paz4c= -----END CERTIFICATE-----Generated at Sat Sep 5 09:41:48 2026 by rpki-client