$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1e796ea4-1fb4-3409-a7ad-00cd41d5aed7.roa File: 1e796ea4-1fb4-3409-a7ad-00cd41d5aed7.roa (raw, json) Hash identifier: LbZAw5GEj3tN6ll1xgguk63mVk9JciUgenrM7/a6MfY= Subject key identifier: A4:42:F0:C1:8E:BD:04:17:07:FE:D6:5A:E6:C4:37:30:20:12:0C:7B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA4451914A3E9811F02B6E0C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1e796ea4-1fb4-3409-a7ad-00cd41d5aed7.roa Signing time: Mon 27 Jul 2026 21:00:11 +0000 ROA not before: Mon 27 Jul 2026 21:00:11 +0000 ROA not after: Sun 25 Oct 2026 21:00:11 +0000 asID: 8069 IP address blocks: 20.33.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a4:45:19:14:a3:e9:81:1f:02:b6:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 27 21:00:11 2026 GMT Not After : Oct 25 21:00:11 2026 GMT Subject: CN=7bcfe75a-77ae-4429-9e03-05c30ba4614a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:81:e4:26:f3:85:24:2f:60:31:95:25:63:7f: 51:74:52:87:e4:2b:0b:a0:9f:d6:19:de:24:e8:dc: 59:5e:3c:56:11:ad:7c:b2:71:30:7f:ad:31:b9:d5: 2b:d6:c7:91:6e:24:c5:c7:8c:c0:ea:d2:49:aa:4d: 84:41:03:7b:44:80:3b:74:f9:92:d6:d6:8a:a4:fc: 2c:55:d9:45:62:d2:87:fc:ef:6f:71:fa:b5:a1:67: a4:2d:0d:22:eb:3e:6c:f1:10:21:7e:70:da:76:9e: fb:eb:67:f1:91:15:c9:01:d9:19:bd:b6:3c:1c:6d: 76:c5:6c:d4:6a:e0:8b:a6:83:7a:b0:00:0c:28:15: 3c:09:22:3b:d5:98:c5:34:db:22:33:f2:4a:13:55: cf:f9:ab:fb:b1:42:7d:99:fa:08:46:e5:c3:40:77: f8:3a:dc:9e:20:51:f6:88:ae:2b:13:06:02:31:d2: f2:29:64:19:80:9d:ad:59:37:21:f0:47:e6:7e:9b: 2c:e3:bb:6b:8c:e2:0f:0f:0f:46:88:f0:ec:a8:78: eb:c2:db:c3:e8:44:18:ad:5a:d6:d6:3f:74:f9:b4: f9:59:57:ed:3b:c7:fe:21:af:b6:dd:eb:d8:d8:c2: 46:d1:34:1a:24:fb:ee:70:59:cf:10:53:65:a7:ca: 56:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:42:F0:C1:8E:BD:04:17:07:FE:D6:5A:E6:C4:37:30:20:12:0C:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1e796ea4-1fb4-3409-a7ad-00cd41d5aed7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:bc:c6:c0:02:b4:b1:0a:46:3e:12:0b:b0:cb:8c:86:ed:31: 10:7b:73:74:2c:ce:f1:9e:94:c2:a1:e7:40:68:02:07:8d:60: 64:d5:f9:90:76:8e:ea:c1:1a:51:f3:3f:08:5e:c6:8d:14:fe: 5d:7c:9c:58:0e:20:c5:f8:78:e4:ad:42:3d:4e:2a:0e:d1:16: 8e:cf:09:12:0b:ec:d6:58:18:89:6e:28:44:47:bc:1d:f0:01: 15:b8:95:6e:01:d9:72:93:91:b8:d5:f4:ac:8b:92:5e:19:4d: 91:ba:65:1c:47:ac:4b:2d:67:37:d4:43:8b:c6:57:1b:52:2f: 77:71:ae:af:eb:19:5d:92:9e:40:cd:17:d4:8c:83:f9:a0:c1: e3:a9:39:24:04:e4:12:cb:d2:51:db:a1:ec:00:d3:2c:ab:6e: bb:b9:dd:ee:40:1b:03:dc:03:74:73:c1:8c:d9:a0:6a:86:04: c8:35:0c:01:84:3d:dc:4d:ef:26:fd:4c:ee:2b:d1:53:4d:26: 7a:5d:32:ae:af:f3:bf:07:f7:c5:8d:43:60:65:6b:26:a2:54: c8:de:2b:5e:79:28:d7:85:34:76:8b:d7:79:dc:d5:31:57:00: 12:6c:49:63:91:7f:38:10:b0:11:4a:92:c2:39:9a:08:17:64: d2:53:e1:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6kRRkUo+mBHwK24MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyNzIxMDAxMVoXDTI2MTAyNTIxMDAxMVowLzEtMCsGA1UEAxMk N2JjZmU3NWEtNzdhZS00NDI5LTllMDMtMDVjMzBiYTQ2MTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4HkJvOFJC9gMZUlY39RdFKH5CsLoJ/WGd4k 6NxZXjxWEa18snEwf60xudUr1seRbiTFx4zA6tJJqk2EQQN7RIA7dPmS1taKpPws VdlFYtKH/O9vcfq1oWekLQ0i6z5s8RAhfnDadp7762fxkRXJAdkZvbY8HG12xWzU auCLpoN6sAAMKBU8CSI71ZjFNNsiM/JKE1XP+av7sUJ9mfoIRuXDQHf4OtyeIFH2 iK4rEwYCMdLyKWQZgJ2tWTch8Efmfpss47trjOIPDw9GiPDsqHjrwtvD6EQYrVrW 1j90+bT5WVftO8f+Ia+23evY2MJG0TQaJPvucFnPEFNlp8pWCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRC8MGOvQQXB/7WWubENzAgEgx7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMWU3OTZlYTQtMWZiNC0z NDA5LWE3YWQtMDBjZDQxZDVhZWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGy8xsACtLEKRj4SC7DLjIbtMRB7c3QszvGelMKh50BoAgeNYGTV+ZB2 jurBGlHzPwhexo0U/l18nFgOIMX4eOStQj1OKg7RFo7PCRIL7NZYGIluKERHvB3w ARW4lW4B2XKTkbjV9KyLkl4ZTZG6ZRxHrEstZzfUQ4vGVxtSL3dxrq/rGV2SnkDN F9SMg/mgweOpOSQE5BLL0lHboewA0yyrbru53e5AGwPcA3RzwYzZoGqGBMg1DAGE PdxN7yb9TO4r0VNNJnpdMq6v878H98WNQ2BlayaiVMjeK155KNeFNHaL13nc1TFX ABJsSWORfzgQsBFKksI5mggXZNJT4c8= -----END CERTIFICATE-----Generated at Wed Jul 29 06:22:04 2026 by rpki-client