$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01a3c2a1-2f63-34b0-8a64-c14151d1f457.roa File: 01a3c2a1-2f63-34b0-8a64-c14151d1f457.roa (raw, json) Hash identifier: /RAWRg6fUnSahoYeIREL4RSIQZbdad1xbWclX8HJd14= Subject key identifier: 1F:F9:4F:EC:57:06:D0:C4:7A:D5:09:DD:9B:49:1C:0E:35:DF:65:20 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA788C01EB8BC5A1917ED3680 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01a3c2a1-2f63-34b0-8a64-c14151d1f457.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.33.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:c0:1e:b8:bc:5a:19:17:ed:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=cafc59e7-26ab-4d5b-9bab-2eafc7d1d874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a7:75:8b:63:9d:70:63:db:48:5c:16:de:ca: c2:b2:c2:3f:52:c7:57:ee:38:01:28:37:ee:9a:ca: ae:85:d1:a5:14:0e:14:24:57:19:7d:6e:8b:e0:29: d4:f9:bc:71:a8:64:17:af:f6:55:eb:16:e1:17:45: ba:a3:7b:c1:b7:8c:c1:f9:91:d4:a5:34:d2:15:da: c6:54:74:ea:12:b8:34:db:59:89:48:08:43:0d:1e: 49:5c:99:b7:28:8a:01:b3:c9:7c:a3:0b:fc:c3:13: fe:0d:bd:80:57:6b:be:3e:d1:f9:14:8a:11:fc:76: be:95:bc:bb:60:05:e2:da:40:af:65:50:bc:ad:47: a8:66:ea:27:d0:fd:d5:f5:6f:12:c2:43:8b:76:75: 43:2c:a9:4a:9a:93:de:aa:f2:78:6b:f3:90:5b:af: 97:ca:66:5f:63:20:5f:78:59:d7:e0:d7:9b:7c:46: b9:c8:c2:77:84:ce:ff:fc:33:d6:16:f4:ca:62:f0: 96:25:a0:7f:cc:00:70:88:65:0a:3a:a3:2c:4c:34: 55:7f:ce:a1:01:b4:3c:aa:71:ef:94:99:c2:46:7c: 8d:dd:d5:45:47:26:df:44:09:07:a3:45:5a:f2:4d: f4:97:02:59:42:a0:18:43:8e:5d:71:18:d9:16:4e: d7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F9:4F:EC:57:06:D0:C4:7A:D5:09:DD:9B:49:1C:0E:35:DF:65:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01a3c2a1-2f63-34b0-8a64-c14151d1f457.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:b2:a3:84:f9:47:20:aa:a6:52:0e:62:ee:63:a4:17:76:04: 73:23:ad:78:cb:df:78:7e:84:87:cc:fa:e9:bd:0b:a3:7b:77: a8:dc:a8:fd:58:3c:ef:ea:52:8c:a0:1c:df:4e:df:dc:f5:c7: 7e:f8:c6:3f:03:c9:7c:3b:52:02:30:26:31:45:d6:09:72:59: 31:8c:96:3e:51:58:6f:02:74:49:71:8c:39:3c:24:10:9f:d5: c3:25:e3:f6:b3:06:dc:c5:b1:ab:29:e9:9b:56:76:f4:9b:54: 15:14:54:7f:5f:2f:57:74:f6:8f:c5:6b:9c:7b:56:e9:cd:ba: c2:7c:4e:07:05:f8:35:f3:19:66:bf:b8:63:ac:40:26:d5:bc: 3f:8d:de:d2:a0:75:b0:b0:7e:73:29:6b:e3:7c:d0:75:00:13: e0:c3:71:03:d8:8f:cc:18:10:11:21:f0:a5:3f:06:16:bb:b9: 3f:c1:f4:37:38:ce:47:92:60:c8:75:71:00:0a:28:e5:67:c3: ef:42:6e:16:c7:9c:29:32:4c:fc:23:58:d0:f7:58:31:3f:1e: 1f:d9:fe:e1:33:50:7a:1c:67:b7:0d:ee:86:1e:9d:44:1f:c5: ab:dd:b7:ce:1d:59:73:22:c3:2d:75:a7:fd:fa:58:17:dd:58: 6c:f2:a8:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niMAeuLxaGRftNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Y2FmYzU5ZTctMjZhYi00ZDViLTliYWItMmVhZmM3ZDFkODc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6d1i2OdcGPbSFwW3srCssI/UsdX7jgBKDfu msquhdGlFA4UJFcZfW6L4CnU+bxxqGQXr/ZV6xbhF0W6o3vBt4zB+ZHUpTTSFdrG VHTqErg021mJSAhDDR5JXJm3KIoBs8l8owv8wxP+Db2AV2u+PtH5FIoR/Ha+lby7 YAXi2kCvZVC8rUeoZuon0P3V9W8SwkOLdnVDLKlKmpPeqvJ4a/OQW6+XymZfYyBf eFnX4NebfEa5yMJ3hM7//DPWFvTKYvCWJaB/zABwiGUKOqMsTDRVf86hAbQ8qnHv lJnCRnyN3dVFRybfRAkHo0Va8k30lwJZQqAYQ45dcRjZFk7XNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/5T+xXBtDEetUJ3ZtJHA4132UgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDFhM2MyYTEtMmY2My0z NGIwLThhNjQtYzE0MTUxZDFmNDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISyo4T5RyCqplIOYu5jpBd2BHMjrXjL33h+hIfM+um9C6N7d6jcqP1Y PO/qUoygHN9O39z1x374xj8DyXw7UgIwJjFF1glyWTGMlj5RWG8CdElxjDk8JBCf 1cMl4/azBtzFsasp6ZtWdvSbVBUUVH9fL1d09o/Fa5x7VunNusJ8TgcF+DXzGWa/ uGOsQCbVvD+N3tKgdbCwfnMpa+N80HUAE+DDcQPYj8wYEBEh8KU/Bha7uT/B9Dc4 zkeSYMh1cQAKKOVnw+9CbhbHnCkyTPwjWND3WDE/Hh/Z/uEzUHocZ7cN7oYenUQf xavdt84dWXMiwy11p/36WBfdWGzyqHU= -----END CERTIFICATE-----Generated at Wed Jul 29 03:56:10 2026 by rpki-client