$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1da52d71-8ee6-39ae-8f50-8b6776ffe1ff.roa File: 1da52d71-8ee6-39ae-8f50-8b6776ffe1ff.roa (raw, json) Hash identifier: vUY4xciPDJAmUteTHZHblLC6xc+VoiSxxkYejKtRt+g= Subject key identifier: DB:B5:FD:3D:D0:DB:D7:9A:C0:A6:DD:97:7D:83:29:95:2E:B1:1C:8F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA7873D5313B6FCCCFFF03080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1da52d71-8ee6-39ae-8f50-8b6776ffe1ff.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.33.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:3d:53:13:b6:fc:cc:ff:f0:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f193466d-8384-40ff-855f-1e0d83f65f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b2:99:58:fc:b0:40:48:03:cd:df:a4:b2:b9: bc:e3:56:ec:08:a2:9e:d4:23:85:f1:e7:e9:9b:e2: a2:50:ca:a7:38:a6:ab:98:c2:52:f6:08:52:e0:25: 34:50:19:e4:3b:1c:d7:83:0d:fd:cb:25:03:29:e6: 9b:7e:d0:9f:1e:32:41:d3:7e:c3:e2:62:35:1e:58: 46:ce:13:90:3b:a6:51:c8:51:b2:d3:ee:7e:f8:e1: 14:50:35:44:92:2a:9e:f2:4e:6a:0a:f8:c4:4e:a9: 3d:7b:91:fb:37:ab:dd:4a:63:ec:fc:df:c8:ca:53: 1b:c4:6e:f0:b3:20:4d:11:53:5f:3f:35:a7:21:f5: e3:77:a0:8e:73:40:ac:86:f7:9c:98:4c:61:d8:70: 72:78:d1:0b:9a:f7:d1:24:01:f1:a3:cf:9c:a2:d2: 63:b7:48:de:9f:bf:f8:1f:cf:06:5b:f7:c8:ed:78: 81:a6:c0:2c:68:a0:8b:11:aa:e5:c8:13:81:a6:21: 5a:28:cf:37:50:d5:71:d1:cd:0d:d2:02:01:cc:f8: 34:6c:e3:12:7d:ee:db:4e:76:2d:d1:b0:f6:8b:20: df:1c:64:a1:be:de:5a:5c:e2:17:56:d5:85:40:6e: 39:c2:10:36:e0:eb:c0:e4:c4:7d:7a:f6:a5:b1:87: 85:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B5:FD:3D:D0:DB:D7:9A:C0:A6:DD:97:7D:83:29:95:2E:B1:1C:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1da52d71-8ee6-39ae-8f50-8b6776ffe1ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:51:ba:ce:fb:92:14:de:33:5b:c5:7a:44:af:be:de:6d:f7: 8b:22:61:d8:08:c4:bc:63:72:6f:e7:31:c3:fa:2e:41:10:ac: 89:2d:79:d1:4a:e4:96:22:fa:be:81:2b:ad:a9:6c:3b:02:45: a1:44:1b:d4:7f:a0:82:c8:81:b3:ec:ee:b0:82:ad:29:dc:48: a7:c5:1b:e9:b2:a5:4b:9c:64:41:2c:6d:9f:c3:41:02:59:35: 75:99:29:0f:45:80:9e:25:8e:00:23:e2:46:ce:aa:fa:08:0c: a1:11:30:c4:b3:71:49:b6:19:cb:f3:1a:96:a5:e0:78:f1:24: 25:de:cd:06:54:55:53:e2:37:1b:8d:4d:df:98:e1:c0:5a:94: 08:e0:47:95:ea:11:c5:0e:5d:de:21:93:ca:10:f3:a9:08:fe: ff:67:6a:66:23:78:3a:39:1f:f8:5c:c0:66:9b:db:b6:35:7d: cc:6d:0b:81:3e:42:77:b3:c2:73:5a:bc:39:a8:aa:e2:0c:ab: e2:7a:20:28:4a:40:bd:b6:bd:14:e6:03:af:a7:44:54:35:74: 52:34:8a:26:b6:42:cb:07:9b:03:f4:77:7a:fa:1b:e6:08:a7: 36:14:74:5c:78:11:df:4d:bd:b4:43:02:4e:47:c2:14:51:3e: d1:d9:b8:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhz1TE7b8zP/wMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZjE5MzQ2NmQtODM4NC00MGZmLTg1NWYtMWUwZDgzZjY1ZjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbKZWPywQEgDzd+ksrm841bsCKKe1COF8efp m+KiUMqnOKarmMJS9ghS4CU0UBnkOxzXgw39yyUDKeabftCfHjJB037D4mI1HlhG zhOQO6ZRyFGy0+5++OEUUDVEkiqe8k5qCvjETqk9e5H7N6vdSmPs/N/IylMbxG7w syBNEVNfPzWnIfXjd6COc0CshvecmExh2HByeNELmvfRJAHxo8+cotJjt0jen7/4 H88GW/fI7XiBpsAsaKCLEarlyBOBpiFaKM83UNVx0c0N0gIBzPg0bOMSfe7bTnYt 0bD2iyDfHGShvt5aXOIXVtWFQG45whA24OvA5MR9evalsYeF0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNu1/T3Q29eawKbdl32DKZUusRyPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMWRhNTJkNzEtOGVlNi0z OWFlLThmNTAtOGI2Nzc2ZmZlMWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpRus77khTeM1vFekSvvt5t94siYdgIxLxjcm/nMcP6LkEQrIktedFK 5JYi+r6BK62pbDsCRaFEG9R/oILIgbPs7rCCrSncSKfFG+mypUucZEEsbZ/DQQJZ NXWZKQ9FgJ4ljgAj4kbOqvoIDKERMMSzcUm2GcvzGpal4HjxJCXezQZUVVPiNxuN Td+Y4cBalAjgR5XqEcUOXd4hk8oQ86kI/v9namYjeDo5H/hcwGab27Y1fcxtC4E+ QnezwnNavDmoquIMq+J6IChKQL22vRTmA6+nRFQ1dFI0iia2QssHmwP0d3r6G+YI pzYUdFx4Ed9NvbRDAk5HwhRRPtHZuBc= -----END CERTIFICATE-----Generated at Wed Jul 29 07:32:18 2026 by rpki-client