$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c7375d5-e6fa-37b0-aa8e-ab53e4385ead.roa File: 7c7375d5-e6fa-37b0-aa8e-ab53e4385ead.roa (raw, json) Hash identifier: paw+nTSwCEdYZzGLAMHlrbLRoGKmn+fkbjEBMshDrj0= Subject key identifier: 3A:71:D8:4E:80:08:B2:8C:DF:5D:A0:48:54:50:A0:99:F9:CD:BD:4F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E253F0D258441541EB5CE6F00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c7375d5-e6fa-37b0-aa8e-ab53e4385ead.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 8069 IP address blocks: 20.33.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3f:0d:25:84:41:54:1e:b5:ce:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=55da73af-ccbf-4de9-b169-4a2a9df9a6dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c1:fe:c4:f7:3b:62:8e:b7:5e:7d:b3:e0:a6: a7:16:b8:25:17:89:41:78:14:09:41:9a:5e:6c:8f: c8:1d:02:43:b9:7d:87:f6:e2:e7:bc:4a:97:d9:ee: db:d5:07:6d:68:41:43:56:78:75:0b:b0:9c:12:a8: bc:39:04:53:61:71:f7:f4:94:f4:32:2f:65:00:7b: 66:af:ed:34:6a:02:18:6c:44:93:02:a2:5f:e2:36: 0c:10:32:b3:ec:66:6c:6a:9d:cd:af:96:a6:8e:fc: 8f:bd:ce:26:2d:3d:92:3e:ca:8b:a1:4f:ce:29:6f: d5:f7:8f:b9:bd:97:0b:79:67:a5:fa:d3:2a:b4:34: 41:62:12:90:1d:82:e8:57:c9:7c:9f:0a:97:cf:0e: f4:d4:d8:9b:4e:96:31:a6:ba:54:1b:f7:a9:c8:10: 84:ef:ae:28:ec:fe:b0:8f:72:f9:d9:dd:a9:3f:32: e2:33:7e:dc:fb:f7:12:8b:03:9d:dc:8c:6f:c3:be: 8f:df:c9:97:70:05:cb:7a:ea:71:1c:5f:de:af:cb: 56:bf:ae:af:ab:4f:a9:db:3d:a6:06:3b:26:5b:eb: 41:d7:ab:cc:9e:a1:06:95:63:88:ed:1f:af:f2:8d: 2b:8b:40:c6:bb:2e:fd:0d:13:03:38:fe:19:e3:9b: 49:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:71:D8:4E:80:08:B2:8C:DF:5D:A0:48:54:50:A0:99:F9:CD:BD:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c7375d5-e6fa-37b0-aa8e-ab53e4385ead.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:bd:bd:10:a5:64:be:1f:25:6f:ac:5e:49:79:f3:d4:34:4d: 25:78:b2:cc:5c:3f:6f:c8:91:fc:46:e5:2b:a2:0a:82:16:37: c3:76:d9:4c:d2:e5:20:20:fa:a9:15:55:fe:d1:c0:d9:02:6f: 94:79:c7:64:1c:df:78:a6:c5:c9:58:d9:1a:5a:4f:09:5c:f4: 94:e1:dc:e1:a0:88:12:f4:c0:b6:f2:c8:a9:c3:6e:e5:20:0a: a1:d9:a3:00:b7:69:ae:ea:06:86:56:95:c7:bd:b6:59:19:d3: 67:f4:52:cb:1b:df:b6:41:22:3d:a2:57:4b:05:ef:a3:f6:58: 11:c2:a3:40:97:b3:fa:c4:90:fa:ac:e0:ba:c2:9a:90:51:8b: 30:92:24:b0:f9:de:70:40:44:00:97:ee:c4:36:b7:7e:f7:97: 9a:63:b3:5c:81:5a:7b:8c:16:89:5e:c5:64:59:ad:3e:1e:77: ee:ca:c4:11:2f:89:40:55:d3:ac:0c:26:ea:03:a3:6a:b0:8b: 8c:1b:f1:02:2e:aa:b5:21:26:19:0c:6f:e4:41:6e:de:74:d2: e4:9c:88:c5:e8:55:c3:dc:07:62:0c:0a:f4:3f:19:b7:60:b0: 0a:42:b3:aa:af:05:cb:90:92:59:e4:8c:30:7a:1a:4b:8e:a5: b0:ab:89:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPw0lhEFUHrXObwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk NTVkYTczYWYtY2NiZi00ZGU5LWIxNjktNGEyYTlkZjlhNmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18H+xPc7Yo63Xn2z4KanFrglF4lBeBQJQZpe bI/IHQJDuX2H9uLnvEqX2e7b1QdtaEFDVnh1C7CcEqi8OQRTYXH39JT0Mi9lAHtm r+00agIYbESTAqJf4jYMEDKz7GZsap3Nr5amjvyPvc4mLT2SPsqLoU/OKW/V94+5 vZcLeWel+tMqtDRBYhKQHYLoV8l8nwqXzw701NibTpYxprpUG/epyBCE764o7P6w j3L52d2pPzLiM37c+/cSiwOd3Ixvw76P38mXcAXLeupxHF/er8tWv66vq0+p2z2m BjsmW+tB16vMnqEGlWOI7R+v8o0ri0DGuy79DRMDOP4Z45tJUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpx2E6ACLKM312gSFRQoJn5zb1PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2M3Mzc1ZDUtZTZmYS0z N2IwLWFhOGUtYWI1M2U0Mzg1ZWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ69vRClZL4fJW+sXkl589Q0TSV4ssxcP2/IkfxG5SuiCoIWN8N22UzS 5SAg+qkVVf7RwNkCb5R5x2Qc33imxclY2RpaTwlc9JTh3OGgiBL0wLbyyKnDbuUg CqHZowC3aa7qBoZWlce9tlkZ02f0Ussb37ZBIj2iV0sF76P2WBHCo0CXs/rEkPqs 4LrCmpBRizCSJLD53nBARACX7sQ2t373l5pjs1yBWnuMFolexWRZrT4ed+7KxBEv iUBV06wMJuoDo2qwi4wb8QIuqrUhJhkMb+RBbt500uSciMXoVcPcB2IMCvQ/Gbdg sApCs6qvBcuQklnkjDB6GkuOpbCriTA= -----END CERTIFICATE-----Generated at Sat Jun 13 17:19:30 2026 by rpki-client