$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/328f79ee-21f4-3729-8164-161b941e3435.roa File: 328f79ee-21f4-3729-8164-161b941e3435.roa (raw, json) Hash identifier: X6gGm+II5tWfTSYJ+IwaJdPJf3K6NwapRgaei4tW5AU= Subject key identifier: 2B:63:8C:97:3F:CE:45:43:A2:BC:7A:EC:E0:4C:E1:66:16:BB:D7:7C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA7873D9F821745A46752BD00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/328f79ee-21f4-3729-8164-161b941e3435.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.33.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:3d:9f:82:17:45:a4:67:52:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=78bded29-7287-437a-8078-2871ffc9155c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:af:63:9c:38:61:5a:25:11:97:3d:5f:98:43: ab:7c:27:5a:68:38:95:97:e5:29:0a:14:e1:fb:12: 42:80:d1:01:ff:47:2f:5e:09:c4:9d:f6:ef:eb:a8: f5:18:61:f3:7f:1a:22:a0:68:d1:f9:18:44:f5:1e: f4:2b:ea:f9:45:80:6a:28:73:43:1d:92:59:47:a5: ea:e8:04:f9:70:ff:00:b9:bc:88:98:25:2a:dd:af: d2:71:f2:53:93:30:40:36:5b:a7:93:ff:9a:ed:b7: fd:e8:17:7c:a4:83:46:1d:0b:cd:cb:bd:a4:d1:89: 55:ba:ac:e2:41:02:49:81:92:c9:9a:af:07:3d:b9: b1:02:a2:45:4d:f2:1a:3f:e0:99:28:1f:57:0b:9d: 84:f2:4c:14:37:c8:9b:31:70:ab:cb:5d:e4:cf:01: da:e6:32:b1:8c:7a:1e:80:e5:52:e0:74:f7:e1:c0: 15:16:04:f7:b1:a8:9c:48:ae:74:c3:71:35:f8:e1: 8f:a6:98:eb:b6:7c:a2:46:21:53:ef:59:7c:60:05: 4a:9b:5e:32:48:89:fe:a8:86:9d:a1:cc:eb:28:74: ab:2d:cc:fc:63:2e:1a:8d:a0:e1:64:f2:2f:6b:93: eb:74:8e:6f:28:b6:0f:19:ba:9d:07:17:4e:50:a1: 9b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:63:8C:97:3F:CE:45:43:A2:BC:7A:EC:E0:4C:E1:66:16:BB:D7:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/328f79ee-21f4-3729-8164-161b941e3435.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:43:98:08:f8:8f:c4:32:ff:72:40:d6:b5:8b:23:b5:89:97: eb:91:08:f8:dd:5b:1e:10:0c:eb:0f:a7:92:cb:14:0a:48:0c: f5:ec:4a:fc:4c:8b:a5:67:cd:d4:7b:eb:a5:f1:a1:24:c9:92: 9f:74:52:9b:df:1f:71:23:80:0f:9c:e4:d0:0e:02:2b:67:e9: 75:cc:d0:2e:d3:5e:92:49:6f:49:f4:89:9e:3d:f5:ed:7c:49: 51:8c:86:10:47:01:b9:36:44:30:2e:e4:f4:31:b9:77:ac:12: 29:dd:d3:d8:62:20:71:38:82:25:57:71:43:f0:f7:1d:2e:30: a0:93:fd:85:90:0f:9a:90:5d:51:34:c8:e7:86:b2:78:0e:a4: f1:7d:03:bc:47:5b:81:e6:3d:53:74:ea:cd:59:9c:9c:39:7f: f8:84:73:02:01:dc:4e:cb:c9:6d:8e:e0:05:60:7c:09:f9:5d: 45:1f:c6:9d:a7:06:dc:1b:37:60:5f:24:f0:70:34:1e:97:03: 8e:ab:d8:5f:f5:67:45:11:ed:d5:f8:85:dd:35:8f:fe:0a:60: 6e:a7:48:c9:d1:11:16:81:d9:47:38:c6:cd:36:b6:a6:55:56: 94:af:af:36:42:ed:f3:7f:22:49:ee:22:a7:16:88:21:3c:ce: df:e3:a6:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhz2fghdFpGdSvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzhiZGVkMjktNzI4Ny00MzdhLTgwNzgtMjg3MWZmYzkxNTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha9jnDhhWiURlz1fmEOrfCdaaDiVl+UpChTh +xJCgNEB/0cvXgnEnfbv66j1GGHzfxoioGjR+RhE9R70K+r5RYBqKHNDHZJZR6Xq 6AT5cP8AubyImCUq3a/ScfJTkzBANlunk/+a7bf96Bd8pINGHQvNy72k0YlVuqzi QQJJgZLJmq8HPbmxAqJFTfIaP+CZKB9XC52E8kwUN8ibMXCry13kzwHa5jKxjHoe gOVS4HT34cAVFgT3saicSK50w3E1+OGPppjrtnyiRiFT71l8YAVKm14ySIn+qIad oczrKHSrLcz8Yy4ajaDhZPIva5PrdI5vKLYPGbqdBxdOUKGb1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtjjJc/zkVDorx67OBM4WYWu9d8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzI4Zjc5ZWUtMjFmNC0z NzI5LTgxNjQtMTYxYjk0MWUzNDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxDmAj4j8Qy/3JA1rWLI7WJl+uRCPjdWx4QDOsPp5LLFApIDPXsSvxM i6VnzdR766XxoSTJkp90UpvfH3EjgA+c5NAOAitn6XXM0C7TXpJJb0n0iZ499e18 SVGMhhBHAbk2RDAu5PQxuXesEind09hiIHE4giVXcUPw9x0uMKCT/YWQD5qQXVE0 yOeGsngOpPF9A7xHW4HmPVN06s1ZnJw5f/iEcwIB3E7LyW2O4AVgfAn5XUUfxp2n BtwbN2BfJPBwNB6XA46r2F/1Z0UR7dX4hd01j/4KYG6nSMnRERaB2Uc4xs02tqZV VpSvrzZC7fN/IknuIqcWiCE8zt/jpl0= -----END CERTIFICATE-----Generated at Wed Jul 29 10:37:34 2026 by rpki-client