$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2c93a2fe-59c9-3004-aace-53a40166520d.roa File: 2c93a2fe-59c9-3004-aace-53a40166520d.roa (raw, json) Hash identifier: SipGxQ1kinerGh+mAxNRbBy8Kl4ZlrhbYR2oM+Bf6OI= Subject key identifier: AC:B1:BB:EB:57:40:C8:43:CD:7F:F6:68:87:36:34:6C:0A:39:2C:52 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA788BF81805BB2CD5A7F8440 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2c93a2fe-59c9-3004-aace-53a40166520d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.33.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:bf:81:80:5b:b2:cd:5a:7f:84:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f6aa2ce8-9eb3-4a9c-a3a0-f8afb84ad13e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:45:8a:7b:bb:92:02:e4:33:b1:67:13:73:20: fc:00:8c:23:e6:59:62:47:b1:64:2b:87:95:a4:6d: 8c:26:86:01:fa:31:32:0c:77:4d:00:96:ee:c9:8f: 72:32:f5:e1:9b:cf:71:a9:64:bb:4a:66:15:a1:13: 54:64:ee:4a:9c:83:1d:c3:b3:76:49:8c:5f:64:b3: 4a:c8:27:13:ff:e5:da:a7:e7:16:4c:1b:ee:53:04: 9a:ee:4b:27:36:1e:c5:bf:9c:e9:80:9f:48:5d:45: 89:36:81:a1:f7:27:50:9d:5c:14:b5:f6:99:1c:14: 73:01:50:0c:51:77:c6:2c:3b:e4:30:e9:4f:9c:02: db:7a:20:4b:58:33:da:14:26:46:30:b2:ae:c5:3e: db:de:45:46:ef:f0:40:1d:10:85:59:4c:18:54:05: be:97:73:ec:9e:f2:50:2a:ce:85:24:81:8a:e5:30: fa:36:6c:e6:43:88:35:53:b0:23:f7:90:b9:7a:e1: a8:fe:63:09:34:c4:12:a0:63:3b:cb:60:e4:b6:9c: 69:a3:1f:ca:1a:ab:fa:d2:e2:50:9e:93:4b:d5:ac: db:fb:27:54:52:88:76:76:40:af:2d:ca:a9:c0:90: 1b:59:6c:bf:e5:2f:42:dc:fe:c0:5a:47:36:7e:08: 19:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B1:BB:EB:57:40:C8:43:CD:7F:F6:68:87:36:34:6C:0A:39:2C:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2c93a2fe-59c9-3004-aace-53a40166520d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:3f:87:b1:62:39:5e:d5:df:38:c6:ea:9f:fb:5e:eb:0e:23: 35:dd:33:78:d2:a5:bb:58:75:28:77:9c:3f:4c:23:c5:2f:13: 46:e8:00:10:0f:9b:42:ff:49:f2:ee:d3:c3:b6:70:29:32:e0: e9:7d:8b:13:c9:a0:b2:14:8d:a3:75:f2:1d:7c:74:3f:17:00: 78:77:2e:10:f9:c0:14:be:4c:be:ce:2a:38:21:c5:a0:a1:54: 51:44:67:92:20:20:97:b9:1f:51:71:e0:f2:39:2a:e9:25:ba: 67:1c:c3:07:d1:dc:8a:22:0c:6d:d4:1f:ae:42:3e:de:f1:bd: f0:54:c4:99:d6:72:e3:45:54:80:01:66:06:87:eb:de:8f:1f: 58:84:16:1c:c0:ec:a9:cc:20:b5:9c:d7:6e:7c:5a:4c:22:9b: cc:de:98:a3:38:28:a2:cc:1d:31:5f:9a:94:86:ea:58:2e:fd: a5:16:df:fc:6f:b2:35:17:8a:87:21:76:7a:df:86:2c:dc:fc: f7:e8:77:c7:07:88:67:26:e8:af:85:93:f1:9f:95:84:bf:9d: b0:23:9e:6e:06:54:18:f3:79:f0:f7:1b:7b:42:20:97:5e:99: bb:46:b5:84:39:7c:81:d6:00:09:20:87:f0:87:f4:32:ae:0c: f0:d3:11:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niL+BgFuyzVp/hEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZjZhYTJjZTgtOWViMy00YTljLWEzYTAtZjhhZmI4NGFkMTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEWKe7uSAuQzsWcTcyD8AIwj5lliR7FkK4eV pG2MJoYB+jEyDHdNAJbuyY9yMvXhm89xqWS7SmYVoRNUZO5KnIMdw7N2SYxfZLNK yCcT/+Xap+cWTBvuUwSa7ksnNh7Fv5zpgJ9IXUWJNoGh9ydQnVwUtfaZHBRzAVAM UXfGLDvkMOlPnALbeiBLWDPaFCZGMLKuxT7b3kVG7/BAHRCFWUwYVAW+l3PsnvJQ Ks6FJIGK5TD6NmzmQ4g1U7Aj95C5euGo/mMJNMQSoGM7y2Dktpxpox/KGqv60uJQ npNL1azb+ydUUoh2dkCvLcqpwJAbWWy/5S9C3P7AWkc2fggZjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyxu+tXQMhDzX/2aIc2NGwKOSxSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMmM5M2EyZmUtNTljOS0z MDA0LWFhY2UtNTNhNDAxNjY1MjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8/h7FiOV7V3zjG6p/7XusOIzXdM3jSpbtYdSh3nD9MI8UvE0boABAP m0L/SfLu08O2cCky4Ol9ixPJoLIUjaN18h18dD8XAHh3LhD5wBS+TL7OKjghxaCh VFFEZ5IgIJe5H1Fx4PI5KuklumccwwfR3IoiDG3UH65CPt7xvfBUxJnWcuNFVIAB ZgaH696PH1iEFhzA7KnMILWc1258Wkwim8zemKM4KKLMHTFfmpSG6lgu/aUW3/xv sjUXiochdnrfhizc/Pfod8cHiGcm6K+Fk/GflYS/nbAjnm4GVBjzefD3G3tCIJde mbtGtYQ5fIHWAAkgh/CH9DKuDPDTEdo= -----END CERTIFICATE-----Generated at Wed Jul 29 08:42:38 2026 by rpki-client