$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/273c9b70-70a4-3eb6-9810-590c5e753b05.roa File: 273c9b70-70a4-3eb6-9810-590c5e753b05.roa (raw, json) Hash identifier: GLPcWoQUx81TiG6QqTKDalx0U+HRHFVGh5ut9rEI9D8= Subject key identifier: F9:00:8B:09:1F:09:A5:CB:90:73:DB:2F:8D:BB:E1:43:A9:B0:4C:15 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA7873D7EFEECA9F788697D80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/273c9b70-70a4-3eb6-9810-590c5e753b05.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.33.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:3d:7e:fe:ec:a9:f7:88:69:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=97a9e3c1-e2f9-491f-85b9-b1937ba64860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dc:fc:ae:93:c6:f6:1f:2b:e1:4a:7a:a6:54: 14:48:9c:cb:00:27:80:a7:3f:f1:5d:40:a7:d6:eb: 09:41:19:23:f4:ac:1a:88:e6:03:e5:51:01:4f:47: 02:44:1c:ae:1a:eb:1f:26:9d:22:c7:df:88:fc:d2: b6:26:78:4a:33:46:8c:00:7a:ca:41:1b:48:d1:23: 30:d9:6e:06:b0:49:77:a7:03:73:e3:a9:e5:25:38: 46:5b:24:f1:c5:ad:ce:f7:f5:db:d5:6e:45:07:74: 4b:33:7a:5b:94:c9:50:08:d3:4c:52:4e:89:2a:ab: d5:36:28:55:24:d1:ae:d2:d9:e3:e3:8f:9f:15:90: 4d:55:f3:11:a7:a0:62:6d:19:a0:6f:f8:f2:7b:40: e8:c0:29:9c:5c:e8:0d:2c:f0:c6:e3:f6:5a:7e:a8: ca:b3:fa:e5:55:10:14:07:79:2d:96:2c:28:7e:ab: 2d:a8:76:e0:44:8d:a8:42:cb:0e:f3:c0:0e:42:de: 88:5e:32:65:9b:1d:93:9d:6d:21:1d:4c:bf:88:06: e6:d2:cc:dc:c6:60:a2:4b:52:ed:9d:ee:66:1d:12: 86:c2:a9:0c:4d:5e:ff:03:0f:ca:0c:c6:4b:ca:96: 7d:30:74:ef:80:c5:da:9e:9b:32:05:01:47:49:5a: f0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:00:8B:09:1F:09:A5:CB:90:73:DB:2F:8D:BB:E1:43:A9:B0:4C:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/273c9b70-70a4-3eb6-9810-590c5e753b05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:24:63:d3:46:c1:f1:45:88:2f:79:fd:60:fd:c7:7c:a6:73: 3b:05:ec:0f:d7:58:fe:1a:46:e1:cf:8a:ef:db:a7:95:11:ef: a0:27:d2:5e:6f:be:b3:68:a5:c6:13:3f:1d:bd:56:16:6f:f6: 65:a3:e4:5e:51:ed:42:d1:23:ca:f5:4e:3c:26:6f:25:b1:cf: 9c:6d:ee:a8:8f:db:4c:85:59:f8:1b:9d:1d:26:96:2b:02:f0: 2b:40:83:e0:8a:0b:de:ac:15:77:45:d7:87:68:cc:65:7b:f1: 72:6c:4b:38:63:5d:f6:c7:8e:fb:1a:60:9c:03:29:c3:be:49: 58:68:75:cb:86:61:75:31:1d:80:d9:d7:56:e3:e6:e1:31:d3: 26:7a:f2:0a:93:a1:df:02:7c:a8:24:76:73:9a:51:77:fa:33: e3:ce:3a:ff:1d:85:ec:fc:ec:26:19:fd:05:11:a6:8c:a0:e3: 76:c8:29:34:f1:24:0e:a2:8d:de:6b:b0:b9:c2:6f:06:c2:aa: 85:dd:a4:95:66:7b:2b:a5:5e:e7:6c:a0:20:05:30:90:01:e5: 5d:20:b2:79:56:fa:8c:71:71:58:cf:fc:d2:a1:64:ef:bc:f2: ac:d8:4a:45:af:65:5c:77:62:2f:69:7c:a4:d7:9a:cd:a5:84: 51:96:67:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhz1+/uyp94hpfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTdhOWUzYzEtZTJmOS00OTFmLTg1YjktYjE5MzdiYTY0ODYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9z8rpPG9h8r4Up6plQUSJzLACeApz/xXUCn 1usJQRkj9KwaiOYD5VEBT0cCRByuGusfJp0ix9+I/NK2JnhKM0aMAHrKQRtI0SMw 2W4GsEl3pwNz46nlJThGWyTxxa3O9/Xb1W5FB3RLM3pblMlQCNNMUk6JKqvVNihV JNGu0tnj44+fFZBNVfMRp6BibRmgb/jye0DowCmcXOgNLPDG4/ZafqjKs/rlVRAU B3ktliwofqstqHbgRI2oQssO88AOQt6IXjJlmx2TnW0hHUy/iAbm0szcxmCiS1Lt ne5mHRKGwqkMTV7/Aw/KDMZLypZ9MHTvgMXanpsyBQFHSVrwKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkAiwkfCaXLkHPbL4274UOpsEwVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjczYzliNzAtNzBhNC0z ZWI2LTk4MTAtNTkwYzVlNzUzYjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8kY9NGwfFFiC95/WD9x3ymczsF7A/XWP4aRuHPiu/bp5UR76An0l5v vrNopcYTPx29VhZv9mWj5F5R7ULRI8r1TjwmbyWxz5xt7qiP20yFWfgbnR0mlisC 8CtAg+CKC96sFXdF14dozGV78XJsSzhjXfbHjvsaYJwDKcO+SVhodcuGYXUxHYDZ 11bj5uEx0yZ68gqTod8CfKgkdnOaUXf6M+POOv8dhez87CYZ/QURpoyg43bIKTTx JA6ijd5rsLnCbwbCqoXdpJVmeyulXudsoCAFMJAB5V0gsnlW+oxxcVjP/NKhZO+8 8qzYSkWvZVx3Yi9pfKTXms2lhFGWZwc= -----END CERTIFICATE-----Generated at Sat Sep 5 06:10:51 2026 by rpki-client