$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c7375d5-e6fa-37b0-aa8e-ab53e4385ead.roa File: 7c7375d5-e6fa-37b0-aa8e-ab53e4385ead.roa (raw, json) Hash identifier: kBXmkdF9nU9pG7ABlpRE0N1+fO4pjYX0nG4jwFJvVbg= Subject key identifier: 40:F1:77:52:16:F7:65:E1:10:86:59:F5:DD:4C:70:7C:12:EB:DB:3A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EC7A1D9AA16F61F86E64B4340 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c7375d5-e6fa-37b0-aa8e-ab53e4385ead.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:d9:aa:16:f6:1f:86:e6:4b:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=90d2cde3-afaf-418f-a132-5b85b523e8f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5f:1c:8e:05:22:78:b5:61:ff:e3:77:bb:73: 2d:9d:e9:83:73:a3:ae:e4:5a:6b:65:33:db:50:f9: 27:be:e1:80:c4:fd:32:28:05:5f:23:ea:67:a6:1c: 23:a0:57:4d:55:38:8c:a6:d5:31:59:1e:bb:c1:d7: 6d:c2:52:46:22:dd:46:86:4a:3e:55:7f:87:e7:0e: 95:b7:65:97:24:08:df:06:3e:36:99:21:35:b9:4f: da:c0:b7:76:9f:05:45:37:32:14:48:dc:59:fc:08: bb:aa:49:a7:dd:4d:fa:c8:1b:f7:32:a9:1b:24:2c: fe:2a:51:c4:d9:81:32:4e:f1:c3:63:9f:5f:e3:a0: 9a:7a:e5:e7:d6:c2:e2:6e:63:80:da:3a:fe:56:5f: 73:43:40:91:24:78:66:d1:e5:f1:da:3b:21:7d:5c: 3a:b9:4f:dc:8b:48:41:88:3c:33:53:f0:88:0a:fb: 3c:bf:7c:0d:68:a2:99:b4:f9:00:72:c4:2f:cc:19: 33:2a:b9:58:ea:fc:43:f5:85:4f:67:40:79:38:cd: b2:7d:73:f9:ad:28:c1:5f:6c:09:ea:93:ef:b2:75: cb:d2:fb:c0:1c:c9:9a:65:09:a8:79:8d:6d:31:7a: 95:8b:3d:3a:de:71:3f:59:bd:6f:62:b8:5d:14:a7: 63:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F1:77:52:16:F7:65:E1:10:86:59:F5:DD:4C:70:7C:12:EB:DB:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c7375d5-e6fa-37b0-aa8e-ab53e4385ead.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:25:b0:0d:60:d4:8c:9d:8e:7e:b1:17:c2:56:2e:46:5e:10: 7b:a2:ad:11:2d:67:f2:0d:c4:3d:4a:a4:35:5c:e0:62:f4:23: 71:45:37:c0:8e:1d:05:31:21:d6:39:31:c5:94:5a:c2:a8:a9: 99:2e:e6:0b:3f:d6:16:2e:e7:45:94:fb:26:dd:f9:ff:16:d5: f8:eb:02:d6:0e:e1:c9:ab:2f:39:73:01:38:0c:7b:af:80:16: 0c:40:6b:15:af:b9:75:29:82:d1:e6:29:05:9e:af:ac:58:13: 6f:88:1f:89:c1:31:ba:5d:b4:5b:3d:d0:e3:f4:27:a5:03:d8: 65:e6:50:cb:58:f9:de:c4:27:33:e3:1e:dd:66:15:59:6e:43: b6:5d:8c:74:28:f6:95:1b:d1:6c:4d:de:65:3e:e0:53:72:31: 65:a9:9b:a3:a6:c5:18:59:e4:03:fe:56:a6:48:79:e1:84:1d: 31:75:fd:dd:8a:7c:66:c0:f8:ba:e5:ca:ad:80:32:c4:2c:e8: 74:f5:dc:cf:c9:6f:8f:fd:a8:0b:c9:5e:9b:6a:47:e9:b6:e2: cb:bf:d4:44:64:fd:eb:61:d2:84:ee:a4:2f:46:40:0c:31:90: 60:3f:89:e5:20:a1:e4:d4:00:d5:63:45:0d:24:51:4e:45:64: d7:98:d2:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HodmqFvYfhuZLQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk OTBkMmNkZTMtYWZhZi00MThmLWExMzItNWI4NWI1MjNlOGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu18cjgUieLVh/+N3u3MtnemDc6Ou5FprZTPb UPknvuGAxP0yKAVfI+pnphwjoFdNVTiMptUxWR67wddtwlJGIt1Ghko+VX+H5w6V t2WXJAjfBj42mSE1uU/awLd2nwVFNzIUSNxZ/Ai7qkmn3U36yBv3MqkbJCz+KlHE 2YEyTvHDY59f46CaeuXn1sLibmOA2jr+Vl9zQ0CRJHhm0eXx2jshfVw6uU/ci0hB iDwzU/CICvs8v3wNaKKZtPkAcsQvzBkzKrlY6vxD9YVPZ0B5OM2yfXP5rSjBX2wJ 6pPvsnXL0vvAHMmaZQmoeY1tMXqViz063nE/Wb1vYrhdFKdjCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDxd1IW92XhEIZZ9d1McHwS69s6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2M3Mzc1ZDUtZTZmYS0z N2IwLWFhOGUtYWI1M2U0Mzg1ZWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMlsA1g1Iydjn6xF8JWLkZeEHuirREtZ/INxD1KpDVc4GL0I3FFN8CO HQUxIdY5McWUWsKoqZku5gs/1hYu50WU+ybd+f8W1fjrAtYO4cmrLzlzATgMe6+A FgxAaxWvuXUpgtHmKQWer6xYE2+IH4nBMbpdtFs90OP0J6UD2GXmUMtY+d7EJzPj Ht1mFVluQ7ZdjHQo9pUb0WxN3mU+4FNyMWWpm6OmxRhZ5AP+VqZIeeGEHTF1/d2K fGbA+Lrlyq2AMsQs6HT13M/Jb4/9qAvJXptqR+m24su/1ERk/eth0oTupC9GQAwx kGA/ieUgoeTUANVjRQ0kUU5FZNeY0jw= -----END CERTIFICATE-----Generated at Sat Sep 5 06:03:17 2026 by rpki-client