$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/38a16a71-c9e4-362c-96c8-1339370d9d6e.roa File: 38a16a71-c9e4-362c-96c8-1339370d9d6e.roa (raw, json) Hash identifier: 0WA6htWkHUf00gUqvZe2eVxzM67PFOOYGhFEnOk63N4= Subject key identifier: A2:CA:60:79:CB:93:1B:2A:D2:22:B8:4B:C5:36:23:68:3A:80:CC:A3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E9D4A76E789E77312289F0A00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/38a16a71-c9e4-362c-96c8-1339370d9d6e.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 8069 IP address blocks: 20.33.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:76:e7:89:e7:73:12:28:9f:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=a58e52bd-39e4-4a86-a434-46ea233f9455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:28:34:27:a2:bb:18:03:0e:30:d4:22:13:71: af:b3:3c:9a:23:15:f5:2c:d9:fe:8e:05:b3:02:be: 5e:dc:ad:44:de:23:60:9c:34:90:ac:d3:79:0f:b6: 92:6b:72:92:7b:35:09:fe:e8:3c:0c:da:9c:57:d0: 98:00:3a:d3:f0:f1:89:74:02:40:1a:ee:64:c0:ac: 07:f4:7f:48:1c:07:e9:5c:4f:25:36:a0:a7:6d:49: 85:76:dd:d5:44:01:fc:4a:b2:94:b2:6e:0d:d9:43: 2f:5b:d3:87:1b:4b:7c:97:fe:ad:ce:29:d4:33:1f: d2:ed:c7:8b:87:c7:2f:86:d3:e2:63:e4:dc:08:04: 92:ed:ca:74:7e:f0:02:72:3c:88:12:a6:b2:3e:1d: cd:24:25:5a:4c:2e:7c:20:b9:58:07:2c:27:56:0d: c6:6a:eb:78:77:2b:12:1b:f2:a6:9f:7c:8b:e2:64: cf:fa:e5:d4:ca:8f:cb:d7:e5:d6:33:1e:92:af:d5: 84:e5:a1:eb:4e:92:ad:4e:fa:af:3e:90:7c:83:01: 8f:8d:02:5a:a1:fe:a7:cd:10:c4:89:64:ce:02:14: 18:93:2d:d3:11:91:db:83:23:bf:12:78:dd:71:f1: 7e:35:99:a8:c3:cb:d4:20:47:a6:45:7d:46:a7:d2: a1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CA:60:79:CB:93:1B:2A:D2:22:B8:4B:C5:36:23:68:3A:80:CC:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/38a16a71-c9e4-362c-96c8-1339370d9d6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:b9:d7:f1:67:55:4f:b2:c0:73:24:9b:ba:96:82:57:5a:0a: 52:65:a9:6b:13:1d:b9:0a:ee:ab:8a:3b:ef:9d:36:cc:d9:62: ec:3e:1e:cc:13:c4:f7:f5:70:2b:77:40:4e:63:13:27:e9:d3: fd:13:bd:b6:17:10:ab:40:f5:7e:be:15:e7:bb:d9:7f:77:42: 65:f4:8c:39:35:0b:20:21:dc:bf:61:7b:f4:32:6f:80:6a:28: ee:28:ca:5a:7c:3c:00:7e:fb:c6:6d:05:01:a3:c1:c1:89:56: 2d:99:f3:db:57:4a:0a:d6:66:72:06:4c:b9:28:cd:d9:1d:b5: e9:23:3a:ab:ae:a3:fe:6c:48:41:34:08:53:a4:98:b3:14:be: 09:20:89:87:34:b6:3e:45:c8:67:a4:ef:15:85:24:94:97:21: 41:de:ca:c4:71:89:a6:53:6d:b5:a4:4b:20:74:06:ef:fc:5f: 8f:be:76:1d:bb:8b:61:f4:c7:d7:cb:80:88:13:e9:9a:c8:5f: 16:31:63:c2:ad:60:83:9d:86:21:56:0a:f8:c8:9d:0a:73:23: ef:67:2c:5e:89:53:9a:da:7a:ee:49:e4:58:88:71:c0:1d:79: 3d:21:d8:a1:14:11:f5:10:57:f9:6f:c5:34:80:ff:f1:c0:8a: 41:30:63:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSnbniedzEiifCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk YTU4ZTUyYmQtMzllNC00YTg2LWE0MzQtNDZlYTIzM2Y5NDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyg0J6K7GAMOMNQiE3GvszyaIxX1LNn+jgWz Ar5e3K1E3iNgnDSQrNN5D7aSa3KSezUJ/ug8DNqcV9CYADrT8PGJdAJAGu5kwKwH 9H9IHAfpXE8lNqCnbUmFdt3VRAH8SrKUsm4N2UMvW9OHG0t8l/6tzinUMx/S7ceL h8cvhtPiY+TcCASS7cp0fvACcjyIEqayPh3NJCVaTC58ILlYBywnVg3Gaut4dysS G/Kmn3yL4mTP+uXUyo/L1+XWMx6Sr9WE5aHrTpKtTvqvPpB8gwGPjQJaof6nzRDE iWTOAhQYky3TEZHbgyO/EnjdcfF+NZmow8vUIEemRX1Gp9KhiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLKYHnLkxsq0iK4S8U2I2g6gMyjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzhhMTZhNzEtYzllNC0z NjJjLTk2YzgtMTMzOTM3MGQ5ZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADa51/FnVU+ywHMkm7qWgldaClJlqWsTHbkK7quKO++dNszZYuw+HswT xPf1cCt3QE5jEyfp0/0TvbYXEKtA9X6+Fee72X93QmX0jDk1CyAh3L9he/Qyb4Bq KO4oylp8PAB++8ZtBQGjwcGJVi2Z89tXSgrWZnIGTLkozdkdtekjOquuo/5sSEE0 CFOkmLMUvgkgiYc0tj5FyGek7xWFJJSXIUHeysRxiaZTbbWkSyB0Bu/8X4++dh27 i2H0x9fLgIgT6ZrIXxYxY8KtYIOdhiFWCvjInQpzI+9nLF6JU5raeu5J5FiIccAd eT0h2KEUEfUQV/lvxTSA//HAikEwYy4= -----END CERTIFICATE-----Generated at Wed Jul 29 04:03:42 2026 by rpki-client