$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/735f96b3-047e-360f-bb8a-41e8e0af2ace.roa File: 735f96b3-047e-360f-bb8a-41e8e0af2ace.roa (raw, json) Hash identifier: Tj3kSiHBHzkE60dWlT9pCqfEXiNnlYpNJ8VdTEuZreU= Subject key identifier: EB:EE:B9:51:EB:CA:D6:C9:A0:5E:B4:20:C3:11:73:38:E2:75:EE:9B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA788C029894EC8FAD5E3DBA0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/735f96b3-047e-360f-bb8a-41e8e0af2ace.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.33.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:c0:29:89:4e:c8:fa:d5:e3:db:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=bd7a2c3b-5181-4a74-9927-44212eeb0bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a6:22:ce:97:a0:87:7f:11:bf:c8:85:08:fc: 5e:65:38:6a:78:70:25:2e:7c:de:0d:ab:da:e4:7b: 35:30:e0:ee:6d:f1:0a:6a:8b:a9:36:dd:4a:9a:85: b4:1a:0d:35:91:fc:bd:98:db:9c:72:c9:76:60:00: 9c:55:6c:1e:2e:02:21:a4:5e:87:91:08:1c:53:84: 90:88:3b:2f:92:83:0f:03:f1:a1:09:38:2a:05:6f: 14:78:8b:20:87:f6:9d:0a:58:82:a6:90:ed:3a:a1: d9:24:95:11:19:35:66:9d:22:37:73:e6:dc:0e:c6: 10:7b:31:b6:1e:54:1a:a4:a9:d2:52:64:4b:c4:0b: 14:4f:01:59:6f:54:69:89:af:b4:c3:52:16:ca:a0: be:b6:c7:31:60:d3:e6:89:9f:b5:e9:43:aa:7f:a5: 0c:c2:a6:1c:e0:5e:70:17:9a:c8:43:5d:98:f8:c5: 8d:ae:e4:69:9c:82:f9:f9:7f:6b:46:e4:21:96:7f: ca:7c:de:6e:3a:f7:4e:a7:d2:ec:33:55:c0:24:1f: 8a:e5:a4:4c:27:d2:ca:f9:a5:28:26:05:ee:32:83: 5b:0b:2f:a4:e9:96:e4:37:b8:f4:f6:7e:83:4c:00: ef:46:34:48:4e:ab:b6:93:0f:77:bb:29:b6:41:16: 43:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:EE:B9:51:EB:CA:D6:C9:A0:5E:B4:20:C3:11:73:38:E2:75:EE:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/735f96b3-047e-360f-bb8a-41e8e0af2ace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:cb:6f:f8:bb:12:78:64:80:8b:e7:6b:51:5f:43:86:ae:d3: 1f:47:2d:9d:d7:4c:a5:d7:bf:3a:e1:72:ce:9d:7a:cf:3e:93: dc:b7:f3:cd:6b:22:8a:52:76:c1:66:05:36:ca:80:16:59:3f: 70:29:61:0b:ee:57:79:b1:0e:be:a3:f0:1b:a2:4b:f3:5d:e2: 4b:b8:19:5a:90:f6:4a:ce:e0:04:36:c7:52:f2:99:68:11:73: 27:29:e9:bf:94:8a:ed:e7:2b:f9:00:2d:65:92:08:6c:82:f5: 27:42:e1:72:07:e6:35:c0:b1:9c:e7:e9:e4:d6:38:c7:cb:a0: f3:02:bc:84:e3:40:90:72:ee:a6:56:dc:b8:4b:c6:86:fb:1c: 26:92:95:ba:f1:07:0a:5b:12:62:a6:b4:73:c6:12:af:d4:68: 2d:df:8b:da:1c:65:aa:70:de:d9:f5:21:24:97:4d:c5:22:fc: cf:ba:48:df:b8:e7:f8:34:f7:4e:4c:5e:38:a4:67:7b:2c:ca: 46:ca:93:2d:4c:da:8f:d9:0a:03:47:27:df:21:1d:8c:23:6f: cb:2d:64:74:6c:60:f2:cc:ac:a9:35:39:14:8a:68:ab:40:77: 25:a0:2f:a1:f4:83:79:57:9c:d6:a4:fe:d1:2e:de:86:d6:26: 45:e2:45:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niMApiU7I+tXj26AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YmQ3YTJjM2ItNTE4MS00YTc0LTk5MjctNDQyMTJlZWIwYmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aYizpegh38Rv8iFCPxeZThqeHAlLnzeDava 5Hs1MODubfEKaoupNt1KmoW0Gg01kfy9mNuccsl2YACcVWweLgIhpF6HkQgcU4SQ iDsvkoMPA/GhCTgqBW8UeIsgh/adCliCppDtOqHZJJURGTVmnSI3c+bcDsYQezG2 HlQapKnSUmRLxAsUTwFZb1Rpia+0w1IWyqC+tscxYNPmiZ+16UOqf6UMwqYc4F5w F5rIQ12Y+MWNruRpnIL5+X9rRuQhln/KfN5uOvdOp9LsM1XAJB+K5aRMJ9LK+aUo JgXuMoNbCy+k6ZbkN7j09n6DTADvRjRITqu2kw93uym2QRZDVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvuuVHrytbJoF60IMMRczjide6bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzM1Zjk2YjMtMDQ3ZS0z NjBmLWJiOGEtNDFlOGUwYWYyYWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATLb/i7EnhkgIvna1FfQ4au0x9HLZ3XTKXXvzrhcs6des8+k9y3881r IopSdsFmBTbKgBZZP3ApYQvuV3mxDr6j8BuiS/Nd4ku4GVqQ9krO4AQ2x1LymWgR cycp6b+Uiu3nK/kALWWSCGyC9SdC4XIH5jXAsZzn6eTWOMfLoPMCvITjQJBy7qZW 3LhLxob7HCaSlbrxBwpbEmKmtHPGEq/UaC3fi9ocZapw3tn1ISSXTcUi/M+6SN+4 5/g0905MXjikZ3ssykbKky1M2o/ZCgNHJ98hHYwjb8stZHRsYPLMrKk1ORSKaKtA dyWgL6H0g3lXnNak/tEu3obWJkXiRaU= -----END CERTIFICATE-----Generated at Wed Jul 29 06:46:29 2026 by rpki-client