$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4d7491f4-0aa6-30a3-8f39-c09ded9b4443.roa File: 4d7491f4-0aa6-30a3-8f39-c09ded9b4443.roa (raw, json) Hash identifier: ggcP/pq2jILO+OJhTjMXdxwuXsxcWTwJ+rnLc7D/1jQ= Subject key identifier: A0:A1:3F:EB:82:6C:7D:8F:D6:09:6B:04:E7:AB:A2:EF:C5:2A:BE:FA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA7928ACCB9C68BC2617DBC80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4d7491f4-0aa6-30a3-8f39-c09ded9b4443.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.33.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:8a:cc:b9:c6:8b:c2:61:7d:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=302a548a-be6f-4613-9127-b8210cf86c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a5:0c:81:da:e9:69:81:a0:6d:db:36:fd:3d: 9a:7a:41:76:13:c0:3c:fb:4a:f1:da:87:dd:c1:46: 43:f0:12:5b:ce:6a:a6:ad:59:73:7f:0d:ac:43:8e: 98:62:d4:9d:a1:93:e5:ab:55:a6:64:5e:95:0e:16: 13:78:cb:84:39:ad:64:54:ea:7c:41:0d:31:70:31: f3:ee:61:67:38:20:94:cd:10:a6:7c:9f:f8:d0:2e: 03:cb:fb:82:18:94:e4:f6:38:a4:12:4a:6e:a6:0d: d0:35:8b:63:8b:01:be:9b:a9:5e:71:dd:da:ae:ed: 4c:ff:f9:92:5f:da:75:e6:15:a1:b2:8b:5d:6d:4c: 6f:55:15:fc:10:d9:c2:f3:1a:cb:c5:52:72:1f:82: 8d:d4:38:80:69:25:c4:26:3d:d5:70:58:96:6d:c0: d6:4d:61:ae:84:5f:68:7f:8a:55:ed:b1:54:fe:c8: a1:51:69:c2:eb:01:4b:10:4a:f7:b3:5b:5f:ca:a3: 1d:b1:7e:b7:f5:0a:71:c1:7c:bb:f3:40:78:e6:bc: c0:82:e6:f1:26:51:4d:23:2e:a0:19:fb:db:c7:26: 2f:43:cd:ce:8d:70:35:2f:d8:37:81:0b:f1:26:61: 0d:38:4f:f9:0c:b5:95:e8:3a:bc:8a:56:a4:a1:6d: c0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A1:3F:EB:82:6C:7D:8F:D6:09:6B:04:E7:AB:A2:EF:C5:2A:BE:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4d7491f4-0aa6-30a3-8f39-c09ded9b4443.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:28:0a:e7:a2:24:b2:c1:78:14:29:58:c2:c3:5f:f8:1b:30: 3b:62:3e:9c:05:a7:13:2e:01:18:66:0f:48:49:5c:59:e8:45: 7d:ce:77:df:da:0d:6d:b0:3e:3e:7e:c4:9a:f7:fd:09:d9:c4: cb:9f:e2:36:87:c3:95:18:2f:1f:2e:99:1b:ff:b4:f2:80:83: 32:a0:d7:c6:cd:40:15:13:98:5c:b8:37:2c:2a:7a:a9:5c:4b: 76:3c:0e:21:8a:cb:3b:fa:81:a2:9c:9f:48:80:98:7c:60:8c: 05:da:cc:47:61:c8:3d:de:e2:20:78:73:b1:a1:47:d3:e9:42: d2:60:fb:61:35:ec:6c:55:54:11:f1:fc:3c:dd:8b:d3:b2:6e: a1:2b:80:15:52:b5:df:48:f3:3b:9b:a9:02:0c:97:b7:1e:eb: 83:01:f5:8d:cf:78:08:b6:82:ea:43:57:85:1e:e7:93:10:69: 73:f6:0f:8b:d4:3f:63:46:bb:77:72:13:7f:c9:ea:d9:fa:5c: 74:38:b7:a3:bd:b6:87:28:91:5e:59:09:8d:bc:e4:11:11:b5: 18:fb:d7:14:fe:0c:84:5b:94:15:79:36:77:64:ea:99:9e:f0: 67:c1:d4:45:07:5c:5d:1e:35:a0:46:8b:aa:e9:69:9c:63:65: a2:d1:04:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkorMucaLwmF9vIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzAyYTU0OGEtYmU2Zi00NjEzLTkxMjctYjgyMTBjZjg2YzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6UMgdrpaYGgbds2/T2aekF2E8A8+0rx2ofd wUZD8BJbzmqmrVlzfw2sQ46YYtSdoZPlq1WmZF6VDhYTeMuEOa1kVOp8QQ0xcDHz 7mFnOCCUzRCmfJ/40C4Dy/uCGJTk9jikEkpupg3QNYtjiwG+m6lecd3aru1M//mS X9p15hWhsotdbUxvVRX8ENnC8xrLxVJyH4KN1DiAaSXEJj3VcFiWbcDWTWGuhF9o f4pV7bFU/sihUWnC6wFLEEr3s1tfyqMdsX639QpxwXy780B45rzAgubxJlFNIy6g GfvbxyYvQ83OjXA1L9g3gQvxJmENOE/5DLWV6Dq8ilakoW3A4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKChP+uCbH2P1glrBOerou/FKr76MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGQ3NDkxZjQtMGFhNi0z MGEzLThmMzktYzA5ZGVkOWI0NDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0oCueiJLLBeBQpWMLDX/gbMDtiPpwFpxMuARhmD0hJXFnoRX3Od9/a DW2wPj5+xJr3/QnZxMuf4jaHw5UYLx8umRv/tPKAgzKg18bNQBUTmFy4Nywqeqlc S3Y8DiGKyzv6gaKcn0iAmHxgjAXazEdhyD3e4iB4c7GhR9PpQtJg+2E17GxVVBHx /Dzdi9OybqErgBVStd9I8zubqQIMl7ce64MB9Y3PeAi2gupDV4Ue55MQaXP2D4vU P2NGu3dyE3/J6tn6XHQ4t6O9tocokV5ZCY285BERtRj71xT+DIRblBV5Nndk6pme 8GfB1EUHXF0eNaBGi6rpaZxjZaLRBA4= -----END CERTIFICATE-----Generated at Wed Jul 29 06:28:30 2026 by rpki-client