$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/257673b6-c9c1-3a5b-b86e-987bf59a6f9a.roa File: 257673b6-c9c1-3a5b-b86e-987bf59a6f9a.roa (raw, json) Hash identifier: JB5PdSrLAIBnj80uKZ0DMENINQz/CtJ2iJWq4U0zSKA= Subject key identifier: 46:B1:E4:E6:FA:84:D9:1C:02:79:71:94:B6:0F:ED:06:3F:16:2E:5A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA7966949C97E1C55B394BA00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/257673b6-c9c1-3a5b-b86e-987bf59a6f9a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.33.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:69:49:c9:7e:1c:55:b3:94:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d07391f4-e180-428e-8cc5-156281d047db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:70:a3:c5:3d:3d:2e:ee:76:13:48:d3:da:fa: 79:1c:d3:cb:17:1f:68:0a:69:df:19:a4:77:f4:5a: cc:cb:a1:56:80:86:d0:5c:bd:48:1b:03:d4:d9:e2: 52:ae:cc:51:95:83:23:4e:13:f3:05:a7:4c:a9:65: cd:19:c9:0a:65:16:f7:90:1a:da:65:0e:2f:54:13: c2:ad:f3:e9:21:e8:52:66:6d:60:b4:55:5b:78:f4: 12:77:ea:37:8c:ef:39:63:66:13:60:c4:61:75:54: 47:40:69:1a:4e:36:c9:ea:77:bf:4e:09:c7:0f:0d: 5e:51:f9:e3:84:ae:63:5e:07:94:86:98:8a:7d:94: 40:25:e7:35:b6:f5:90:dc:9b:bb:5b:f5:7f:fd:d8: 27:a8:f5:02:96:4b:42:ec:cf:0e:c0:5e:2c:39:39: e8:ab:98:3e:3e:18:00:ae:3c:a5:e9:a2:6a:b2:77: df:92:2c:7e:65:06:e6:02:4c:9c:c5:37:72:9a:0c: ae:bf:c1:f3:52:26:3c:59:9d:ee:40:64:b4:b0:2b: 60:8e:dc:7b:c3:89:2e:bf:c6:d3:f0:92:ca:c8:8d: 8c:97:ca:32:4d:60:5c:19:ea:83:33:6b:11:32:ae: 04:ac:fb:58:f4:b3:9e:d5:d3:9c:de:94:36:84:91: d6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B1:E4:E6:FA:84:D9:1C:02:79:71:94:B6:0F:ED:06:3F:16:2E:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/257673b6-c9c1-3a5b-b86e-987bf59a6f9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:90:c4:3b:95:32:ce:dd:6d:ec:95:b8:59:f7:fe:01:ed:1e: a6:83:78:85:2c:92:c7:31:37:b8:23:09:d8:7f:21:67:99:af: 4f:8c:17:be:a5:21:ca:65:86:ba:02:11:65:c6:10:cd:50:9b: 55:19:60:43:a3:49:c9:e0:80:f7:97:34:ce:d7:5c:6c:39:6e: ba:e6:ea:36:37:ff:5c:f7:00:44:9f:23:42:c7:bf:4a:df:c0: 65:59:eb:ef:a4:f9:0e:6d:5a:20:8e:6b:e6:5d:ce:95:c3:a7: f1:7a:3f:a2:45:a7:00:87:fe:28:b7:25:3e:3c:8a:9c:82:56: dd:17:7d:8d:78:9c:71:51:7c:29:4d:f5:9f:db:cc:18:b9:68: 5b:3f:a0:1b:34:91:3e:80:80:38:eb:4d:bc:67:96:07:74:ed: df:84:dd:79:8e:07:19:26:28:1d:44:f8:47:21:ea:52:ca:7f: 57:c8:69:b1:bd:3d:10:b0:9f:0e:5c:ea:b0:cb:1b:7a:69:7e: b1:b7:ae:e4:45:6e:e9:3f:b1:4f:be:65:2c:a4:86:39:55:d8: 91:9d:90:a2:3c:3b:92:7d:31:8a:00:2b:6e:9a:d0:05:40:5f: a1:db:6c:6a:f6:aa:f2:56:40:3d:f2:bb:15:f3:a3:99:01:36: 08:fe:b1:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlmlJyX4cVbOUugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDA3MzkxZjQtZTE4MC00MjhlLThjYzUtMTU2MjgxZDA0N2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13CjxT09Lu52E0jT2vp5HNPLFx9oCmnfGaR3 9FrMy6FWgIbQXL1IGwPU2eJSrsxRlYMjThPzBadMqWXNGckKZRb3kBraZQ4vVBPC rfPpIehSZm1gtFVbePQSd+o3jO85Y2YTYMRhdVRHQGkaTjbJ6ne/TgnHDw1eUfnj hK5jXgeUhpiKfZRAJec1tvWQ3Ju7W/V//dgnqPUClktC7M8OwF4sOTnoq5g+PhgA rjyl6aJqsnffkix+ZQbmAkycxTdymgyuv8HzUiY8WZ3uQGS0sCtgjtx7w4kuv8bT 8JLKyI2Ml8oyTWBcGeqDM2sRMq4ErPtY9LOe1dOc3pQ2hJHWawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEax5Ob6hNkcAnlxlLYP7QY/Fi5aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjU3NjczYjYtYzljMS0z YTViLWI4NmUtOTg3YmY1OWE2ZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCENMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKQxDuVMs7dbeyVuFn3/gHtHqaDeIUskscxN7gjCdh/IWeZr0+MF76l IcplhroCEWXGEM1Qm1UZYEOjScnggPeXNM7XXGw5brrm6jY3/1z3AESfI0LHv0rf wGVZ6++k+Q5tWiCOa+ZdzpXDp/F6P6JFpwCH/ii3JT48ipyCVt0XfY14nHFRfClN 9Z/bzBi5aFs/oBs0kT6AgDjrTbxnlgd07d+E3XmOBxkmKB1E+Ech6lLKf1fIabG9 PRCwnw5c6rDLG3ppfrG3ruRFbuk/sU++ZSykhjlV2JGdkKI8O5J9MYoAK26a0AVA X6HbbGr2qvJWQD3yuxXzo5kBNgj+sYc= -----END CERTIFICATE-----Generated at Wed Jul 29 04:02:27 2026 by rpki-client