$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7cbce0d9-041b-3c5c-87e4-357878aadde8.roa File: 7cbce0d9-041b-3c5c-87e4-357878aadde8.roa (raw, json) Hash identifier: 3KfoyeV/2v/yBTDmUragD+14P5sd+KZIcb55tKrMaj4= Subject key identifier: AA:98:25:9F:8B:43:8D:85:18:12:F3:E0:D0:8E:AE:D4:8E:8D:24:BE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EC7A1D99E254D47C8E0015AA0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7cbce0d9-041b-3c5c-87e4-357878aadde8.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:d9:9e:25:4d:47:c8:e0:01:5a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=da4acaa3-bde9-419e-b1ee-f1588d6a7469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ec:6c:63:28:68:f4:fb:dd:1f:9f:28:57:05: a8:fb:a3:88:36:49:7a:6e:cb:bb:bc:d0:36:ec:37: 11:66:81:f9:66:c2:09:ef:86:68:03:68:77:1a:2a: 6a:74:e8:c8:11:c5:37:7e:87:75:a1:e8:8b:ba:c4: fc:41:ca:6e:ab:a2:fd:e2:9b:21:12:72:21:f2:46: 16:62:37:5b:63:ea:cd:de:28:70:ed:4c:23:4d:d9: 0c:57:a3:69:f1:08:04:a7:14:ea:41:f2:3f:80:8a: b9:25:7e:1a:a3:4b:fb:9b:06:16:73:26:c5:91:dd: 8a:6c:6b:9d:59:4c:7c:38:e1:a4:fb:f0:8f:0a:26: a2:40:0d:24:c4:94:dd:2e:f6:65:90:0e:f5:3d:64: de:b2:b1:54:d9:5e:02:d1:c2:5b:e1:9d:af:f5:1d: db:4a:64:a3:e2:8f:2b:83:f0:37:8e:2a:e7:a9:f4: 5d:22:f6:aa:78:c4:e2:a9:b8:85:7a:c7:c6:78:fa: 42:0c:cb:53:2e:93:bc:3c:5b:36:0d:9c:42:ad:ff: 16:5f:3a:db:b3:3d:d1:fe:0a:88:15:23:c6:fb:7c: 29:33:3d:ca:5a:0d:2b:a5:68:96:f3:ed:ce:e7:ce: 4c:92:b3:9f:60:cb:12:20:d0:9f:5f:12:c7:69:6c: 8e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:98:25:9F:8B:43:8D:85:18:12:F3:E0:D0:8E:AE:D4:8E:8D:24:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7cbce0d9-041b-3c5c-87e4-357878aadde8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:59:d2:dc:cb:c3:cc:4e:91:8c:76:62:9c:06:44:4c:15:67: cb:f3:e0:f7:e1:3e:c5:af:e2:7a:66:16:ac:20:8a:89:79:6f: 57:aa:33:6d:b9:64:8e:fa:29:f8:4c:95:42:26:a6:ed:e9:10: 4a:09:b3:71:c3:31:d7:55:03:59:27:98:92:8d:75:13:59:0b: 1a:d5:91:44:4a:4e:a2:70:16:0e:6b:f1:f4:47:4b:22:35:9a: 80:c5:bf:46:21:55:83:46:4d:4d:17:8a:df:28:3a:c2:09:af: 7a:3d:a5:0e:a9:db:d5:14:7a:90:ea:7f:12:da:0b:73:20:9b: 4d:93:dc:1e:b2:a6:af:7c:85:df:1d:1c:11:7a:ca:39:ff:6e: 54:35:66:3c:d9:87:88:48:19:81:02:32:4b:14:10:4d:67:4f: 6b:00:5e:93:ba:b0:e7:bc:77:56:4c:5f:fa:48:c5:bd:d3:54: 47:42:71:47:2b:0b:00:9b:cb:cb:0d:02:19:80:2c:1c:63:88: f3:6f:93:25:0b:33:c6:89:fd:75:49:97:01:ca:ca:91:51:88: 9f:96:90:3f:ab:74:cc:96:7e:41:14:b5:bb:02:89:0a:54:88: 45:c8:4a:fc:93:62:4c:34:16:93:6a:07:e0:81:ee:0f:16:95: 9e:32:d3:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HodmeJU1HyOABWqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk ZGE0YWNhYTMtYmRlOS00MTllLWIxZWUtZjE1ODhkNmE3NDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnexsYyho9PvdH58oVwWo+6OINkl6bsu7vNA2 7DcRZoH5ZsIJ74ZoA2h3GipqdOjIEcU3fod1oeiLusT8Qcpuq6L94pshEnIh8kYW YjdbY+rN3ihw7UwjTdkMV6Np8QgEpxTqQfI/gIq5JX4ao0v7mwYWcybFkd2KbGud WUx8OOGk+/CPCiaiQA0kxJTdLvZlkA71PWTesrFU2V4C0cJb4Z2v9R3bSmSj4o8r g/A3jirnqfRdIvaqeMTiqbiFesfGePpCDMtTLpO8PFs2DZxCrf8WXzrbsz3R/gqI FSPG+3wpMz3KWg0rpWiW8+3O585MkrOfYMsSINCfXxLHaWyOMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqYJZ+LQ42FGBLz4NCOrtSOjSS+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2NiY2UwZDktMDQxYi0z YzVjLTg3ZTQtMzU3ODc4YWFkZGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5Z0tzLw8xOkYx2YpwGREwVZ8vz4PfhPsWv4npmFqwgiol5b1eqM225 ZI76KfhMlUImpu3pEEoJs3HDMddVA1knmJKNdRNZCxrVkURKTqJwFg5r8fRHSyI1 moDFv0YhVYNGTU0Xit8oOsIJr3o9pQ6p29UUepDqfxLaC3Mgm02T3B6ypq98hd8d HBF6yjn/blQ1ZjzZh4hIGYECMksUEE1nT2sAXpO6sOe8d1ZMX/pIxb3TVEdCcUcr CwCby8sNAhmALBxjiPNvkyULM8aJ/XVJlwHKypFRiJ+WkD+rdMyWfkEUtbsCiQpU iEXISvyTYkw0FpNqB+CB7g8WlZ4y0ww= -----END CERTIFICATE-----Generated at Sat Sep 5 06:29:48 2026 by rpki-client