$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/250542c4-d296-36c5-89dd-5586e9f13223.roa File: 250542c4-d296-36c5-89dd-5586e9f13223.roa (raw, json) Hash identifier: C/AXFJwlYkT5kiKN7M1T5eRMxhFer2WJsMqy6uUyCIQ= Subject key identifier: 41:25:5C:FF:31:E9:C6:D9:4F:54:13:A4:1A:6B:49:C3:38:13:16:A0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA7928BB6584156C041892480 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/250542c4-d296-36c5-89dd-5586e9f13223.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.33.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:8b:b6:58:41:56:c0:41:89:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9ae5eda7-1ca1-40a3-9f15-dd1289fae69b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b9:cb:1a:36:28:a0:c4:b3:4f:36:df:3f:c3: 93:3b:b4:d7:7f:13:2d:22:24:c0:e8:9f:fa:19:b5: 58:a5:17:29:08:91:26:8a:d8:d9:a7:8d:ae:f2:14: b1:1b:b8:5b:94:62:5f:4a:51:2e:2c:9d:3c:d3:29: a4:ee:36:29:29:a6:8d:a8:f6:81:ac:e4:b9:42:71: ee:5f:bc:21:de:c3:05:06:1a:5f:53:ac:10:e3:ef: 93:bc:50:a7:8d:dd:f4:35:b0:ab:49:0f:82:ef:b1: 7d:e7:37:47:6c:9d:c0:34:94:66:66:a2:8c:f9:30: 64:ae:08:29:c5:f6:7f:49:1a:77:3b:8f:f7:12:67: d5:59:8c:7f:01:f1:93:61:cf:ea:3f:1c:f4:ce:84: a1:6d:84:41:f9:72:aa:95:d4:af:c8:24:4c:61:58: 26:4b:82:73:f6:f6:a2:65:05:99:e8:89:88:b0:ab: 39:74:65:bf:8f:6c:6a:98:f2:30:d0:d2:2e:54:1a: 4c:12:74:2f:6b:53:cb:10:03:a7:9f:e9:51:d0:bd: 74:f5:53:55:5f:aa:40:71:1b:3c:42:0a:0a:52:55: b2:3d:68:c0:ba:84:7f:ba:38:fc:8b:22:a2:8c:8b: de:3b:77:02:a0:1b:18:ed:e1:88:45:bd:5c:d4:f4: 99:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:25:5C:FF:31:E9:C6:D9:4F:54:13:A4:1A:6B:49:C3:38:13:16:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/250542c4-d296-36c5-89dd-5586e9f13223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:37:22:0c:ef:17:bc:2b:5f:79:12:62:3c:7a:f2:11:35:b2: 02:19:dd:9a:6f:94:f8:a1:2a:28:97:e5:d3:b7:68:24:ac:b7: 44:a6:cd:b2:92:2d:b4:3e:27:89:98:e7:59:99:64:b6:79:96: ec:c1:42:8b:6c:66:76:f1:33:93:f1:e6:fb:da:52:43:c1:0d: 6f:e0:ce:33:c6:55:8d:d5:20:61:fa:5b:93:41:10:10:db:8a: 64:ca:ae:cb:d3:4c:83:3b:e4:81:47:81:39:24:ff:75:b4:41: a4:86:8d:95:92:09:18:30:82:cf:a1:d5:ae:65:38:23:b6:4d: 06:ec:39:1b:9d:56:37:70:6a:13:9e:f6:b9:65:f3:65:fc:db: d8:29:1b:2d:a7:01:cc:e6:3e:b1:23:bd:87:70:0c:36:10:2d: 5c:f6:1d:f2:4c:11:27:71:23:ea:e0:9e:3a:b5:dc:40:5e:ac: ff:6d:4b:89:a6:05:2b:f8:b3:67:91:f8:35:ba:e9:e2:4b:6a: b6:ab:b9:04:23:4a:2b:86:af:6f:ae:9e:15:71:a4:f6:aa:ac: 3d:fc:95:2a:b3:1a:ff:60:1b:e7:71:60:fb:32:c3:ad:8c:8d: 79:ce:6b:88:e7:60:c2:9e:d5:ac:42:7c:3f:20:9c:a7:53:5f: 88:10:b8:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkou2WEFWwEGJJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWFlNWVkYTctMWNhMS00MGEzLTlmMTUtZGQxMjg5ZmFlNjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7nLGjYooMSzTzbfP8OTO7TXfxMtIiTA6J/6 GbVYpRcpCJEmitjZp42u8hSxG7hblGJfSlEuLJ080ymk7jYpKaaNqPaBrOS5QnHu X7wh3sMFBhpfU6wQ4++TvFCnjd30NbCrSQ+C77F95zdHbJ3ANJRmZqKM+TBkrggp xfZ/SRp3O4/3EmfVWYx/AfGTYc/qPxz0zoShbYRB+XKqldSvyCRMYVgmS4Jz9vai ZQWZ6ImIsKs5dGW/j2xqmPIw0NIuVBpMEnQva1PLEAOnn+lR0L109VNVX6pAcRs8 QgoKUlWyPWjAuoR/ujj8iyKijIveO3cCoBsY7eGIRb1c1PSZBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEElXP8x6cbZT1QTpBprScM4ExagMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjUwNTQyYzQtZDI5Ni0z NmM1LTg5ZGQtNTU4NmU5ZjEzMjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGE3IgzvF7wrX3kSYjx68hE1sgIZ3ZpvlPihKiiX5dO3aCSst0SmzbKS LbQ+J4mY51mZZLZ5luzBQotsZnbxM5Px5vvaUkPBDW/gzjPGVY3VIGH6W5NBEBDb imTKrsvTTIM75IFHgTkk/3W0QaSGjZWSCRgwgs+h1a5lOCO2TQbsORudVjdwahOe 9rll82X829gpGy2nAczmPrEjvYdwDDYQLVz2HfJMESdxI+rgnjq13EBerP9tS4mm BSv4s2eR+DW66eJLararuQQjSiuGr2+unhVxpPaqrD38lSqzGv9gG+dxYPsyw62M jXnOa4jnYMKe1axCfD8gnKdTX4gQuEg= -----END CERTIFICATE-----Generated at Wed Jul 29 10:37:57 2026 by rpki-client