$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c842db2-d012-3551-87ea-7b6b22348b27.roa File: 5c842db2-d012-3551-87ea-7b6b22348b27.roa (raw, json) Hash identifier: 8tKvfW30L+yv8E9/qi0DLYsAe6vGpFwLdXah3Aj8i6o= Subject key identifier: A6:7D:16:95:47:47:47:D4:66:3E:C9:31:2F:62:C7:03:42:E3:5B:4B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA788BF37C233EB103B518CE0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c842db2-d012-3551-87ea-7b6b22348b27.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.33.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:bf:37:c2:33:eb:10:3b:51:8c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1c5906eb-8a47-4bcf-87c9-a3d925e4fe64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2f:f2:1d:b2:de:03:ef:88:62:bf:8a:10:eb: db:99:d6:41:f2:8f:08:b1:48:24:1f:04:32:d7:49: 3f:97:fc:e3:72:92:0f:e0:05:78:58:ef:88:a0:46: ec:fa:c0:ee:a0:1b:58:48:77:13:c7:d0:aa:d2:99: 0a:5b:93:9e:38:58:71:3b:b0:fa:b7:bd:39:93:c9: eb:03:15:46:d8:27:c6:17:a2:a5:6a:07:b0:ed:e2: ab:ba:04:f1:f0:1d:ce:9b:02:67:64:67:22:21:85: 50:2a:a2:cf:e9:b1:1e:c8:c6:91:d4:1a:7a:7f:26: 52:87:4a:80:9c:18:a1:74:5d:9f:95:0b:85:e1:47: 0a:30:8e:7b:e6:c9:33:6b:13:20:8b:12:0d:0b:0c: 41:9d:a9:75:4e:51:f6:37:7f:5b:f4:d1:ad:ca:61: 73:f0:08:6d:75:c4:c4:96:b2:be:d2:d9:bd:a9:dc: 2d:6a:5f:34:1d:95:7b:2b:d6:2d:c4:3a:f6:bd:f0: a1:b9:2e:ee:ea:1c:6c:30:79:2d:e7:4d:67:94:7c: 22:5e:bc:98:64:95:ad:0b:bb:0a:26:a1:29:2e:31: 63:ee:60:b1:26:5f:99:04:42:4d:c5:cb:27:b7:73: 05:46:c6:ff:3a:db:6e:cb:6f:82:45:aa:69:42:6a: 1a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7D:16:95:47:47:47:D4:66:3E:C9:31:2F:62:C7:03:42:E3:5B:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c842db2-d012-3551-87ea-7b6b22348b27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:7d:3d:90:98:b1:c2:82:e2:45:48:4d:5e:5a:70:ab:02:c5: 8c:b9:e2:9a:89:e1:d7:b9:b0:9e:a6:79:2f:cd:ff:06:dd:e9: 26:d1:96:60:24:db:eb:bf:18:3e:46:d0:c4:f3:99:35:32:db: ce:30:4e:3a:c6:e2:f3:b9:1b:c8:d8:d3:50:b8:2f:dc:e8:88: bb:c0:04:25:84:2f:e1:a1:75:6f:c9:95:eb:29:d9:a0:0a:db: f0:4b:2c:75:11:9b:10:26:97:c0:99:33:e2:60:ec:c3:74:77: 9a:ae:bc:b6:9b:01:c0:f6:df:09:b7:62:c4:32:cc:e6:4d:02: 39:4d:65:ad:d6:86:9d:b9:89:43:1f:8a:62:f7:6b:d3:0f:ae: ab:50:9a:09:70:4e:82:e4:e9:6a:8d:80:5b:09:9a:6e:59:fc: 4e:48:07:c4:a2:76:3b:0c:11:ce:7f:15:fc:a2:43:ad:c2:2f: 4f:d0:50:8b:23:11:8e:ae:e8:41:07:2e:e5:e4:2b:e1:01:55: b4:cc:62:4f:2c:97:68:96:18:b4:0a:5f:85:7b:7b:cc:cd:99: 06:1a:25:57:f3:2b:d9:22:b5:f2:8e:98:3a:8e:15:49:b4:aa: 04:63:b6:bb:7e:40:88:88:69:24:81:92:e4:de:df:4b:a7:c1: ec:dc:42:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niL83wjPrEDtRjOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MWM1OTA2ZWItOGE0Ny00YmNmLTg3YzktYTNkOTI1ZTRmZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC/yHbLeA++IYr+KEOvbmdZB8o8IsUgkHwQy 10k/l/zjcpIP4AV4WO+IoEbs+sDuoBtYSHcTx9Cq0pkKW5OeOFhxO7D6t705k8nr AxVG2CfGF6Klagew7eKrugTx8B3OmwJnZGciIYVQKqLP6bEeyMaR1Bp6fyZSh0qA nBihdF2flQuF4UcKMI575skzaxMgixINCwxBnal1TlH2N39b9NGtymFz8AhtdcTE lrK+0tm9qdwtal80HZV7K9YtxDr2vfChuS7u6hxsMHkt501nlHwiXryYZJWtC7sK JqEpLjFj7mCxJl+ZBEJNxcsnt3MFRsb/Ottuy2+CRappQmoajQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZ9FpVHR0fUZj7JMS9ixwNC41tLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWM4NDJkYjItZDAxMi0z NTUxLTg3ZWEtN2I2YjIyMzQ4YjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADh9PZCYscKC4kVITV5acKsCxYy54pqJ4de5sJ6meS/N/wbd6SbRlmAk 2+u/GD5G0MTzmTUy284wTjrG4vO5G8jY01C4L9zoiLvABCWEL+GhdW/Jlesp2aAK 2/BLLHURmxAml8CZM+Jg7MN0d5quvLabAcD23wm3YsQyzOZNAjlNZa3Whp25iUMf imL3a9MPrqtQmglwToLk6WqNgFsJmm5Z/E5IB8SidjsMEc5/FfyiQ63CL0/QUIsj EY6u6EEHLuXkK+EBVbTMYk8sl2iWGLQKX4V7e8zNmQYaJVfzK9kitfKOmDqOFUm0 qgRjtrt+QIiIaSSBkuTe30unwezcQh0= -----END CERTIFICATE-----Generated at Wed Jul 29 07:35:41 2026 by rpki-client