$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7cbce0d9-041b-3c5c-87e4-357878aadde8.roa File: 7cbce0d9-041b-3c5c-87e4-357878aadde8.roa (raw, json) Hash identifier: 85Z6Glnii/MWjyTu/5qpF7CFMezRrjvsTYkym6bIiwY= Subject key identifier: 32:A4:7A:03:14:6A:5F:39:05:D5:9B:78:3A:76:21:9F:84:22:9C:E9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E253F0D1AAA33395AEF843100 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7cbce0d9-041b-3c5c-87e4-357878aadde8.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 8069 IP address blocks: 20.33.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3f:0d:1a:aa:33:39:5a:ef:84:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=65fdbfd6-78aa-4a11-b324-0f4e9c513266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fa:2a:0a:20:71:49:b0:6e:57:aa:72:c6:ef: 57:e4:24:8c:43:b0:dd:ba:44:fa:f4:ca:d2:66:8a: 1f:e8:c0:c9:d4:ec:0d:1c:17:e8:93:0c:bb:03:c9: b5:a9:15:a8:0a:6d:b8:a0:44:4c:a3:30:0d:fa:50: 00:13:57:de:d0:35:f1:c0:c4:74:06:20:cc:6b:db: b0:e6:7a:3f:ca:95:d9:cf:87:ba:ea:ee:e0:c0:2c: 57:90:a5:df:d0:fc:aa:62:03:cf:8b:16:a3:f2:55: d6:57:46:5a:e0:78:9a:8a:91:6c:9f:03:3a:1c:b7: 8b:53:b4:aa:c8:39:a1:88:7c:e5:2f:95:85:4e:fc: da:13:e7:ff:d9:c8:9b:32:ea:98:fc:1f:40:56:e8: 71:d8:1f:c9:65:3f:9d:1c:c2:ec:5b:06:f2:0e:82: 44:e5:c4:c9:be:f0:ab:07:ee:85:79:d2:af:f0:08: aa:e1:7c:9d:a5:7c:0d:8f:29:16:71:3a:f7:9d:1a: e4:dc:64:51:9f:f2:a3:d3:ef:55:4d:84:be:7b:e5: a5:19:7e:f5:5f:45:91:d6:4a:19:af:c5:cd:d0:30: 38:e2:10:4c:0e:d8:26:a0:43:21:6a:f0:39:94:d7: 94:a8:68:93:80:89:0a:41:2e:aa:b0:21:f4:d8:90: ba:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A4:7A:03:14:6A:5F:39:05:D5:9B:78:3A:76:21:9F:84:22:9C:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7cbce0d9-041b-3c5c-87e4-357878aadde8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:5a:64:c4:55:56:c5:b6:92:4b:ff:f3:d4:6c:54:bd:e5:db: 46:88:95:d8:19:92:7f:1f:91:ce:68:3a:24:f9:af:7d:d0:5f: fb:00:de:2a:cf:54:f8:24:80:de:70:7c:7a:d9:88:13:6d:c2: 7d:f8:0d:93:0b:00:a1:b9:98:ec:69:f5:7b:09:89:ae:e6:9c: d7:76:02:3a:2b:b9:33:32:ae:42:0c:16:ef:10:8f:cc:5f:c1: 01:6e:62:1e:2c:89:1c:f7:a0:45:d5:3b:b6:32:00:32:13:f8: 87:ee:e4:0e:d2:08:26:a6:dc:30:ae:9c:5f:3c:08:82:e1:2f: 53:18:2b:69:77:ca:9e:57:62:d8:39:77:42:9b:2f:d5:71:bb: 4c:46:80:02:8b:7a:6f:03:be:4d:0b:d3:52:3a:5e:2b:ce:c0: 52:b0:fc:b1:96:5e:9c:19:63:79:b9:f2:fb:4c:e8:bd:3c:1b: 7e:2f:3a:1c:51:66:5d:db:63:c6:e1:74:08:9f:d9:b4:98:d3: 89:a7:06:48:9a:15:8b:3f:3d:7d:24:cb:62:5d:5f:27:0e:30: 41:cd:48:a6:34:99:79:cc:81:b9:28:3a:19:07:f7:2a:d9:43: 57:d6:de:8a:cb:ff:11:b8:46:70:2e:02:af:da:2d:f4:c5:57: 6b:81:cb:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPw0aqjM5Wu+EMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk NjVmZGJmZDYtNzhhYS00YTExLWIzMjQtMGY0ZTljNTEzMjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/oqCiBxSbBuV6pyxu9X5CSMQ7DdukT69MrS Zoof6MDJ1OwNHBfokwy7A8m1qRWoCm24oERMozAN+lAAE1fe0DXxwMR0BiDMa9uw 5no/ypXZz4e66u7gwCxXkKXf0PyqYgPPixaj8lXWV0Za4HiaipFsnwM6HLeLU7Sq yDmhiHzlL5WFTvzaE+f/2cibMuqY/B9AVuhx2B/JZT+dHMLsWwbyDoJE5cTJvvCr B+6FedKv8Aiq4XydpXwNjykWcTr3nRrk3GRRn/Kj0+9VTYS+e+WlGX71X0WR1koZ r8XN0DA44hBMDtgmoEMhavA5lNeUqGiTgIkKQS6qsCH02JC6DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKkegMUal85BdWbeDp2IZ+EIpzpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2NiY2UwZDktMDQxYi0z YzVjLTg3ZTQtMzU3ODc4YWFkZGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlaZMRVVsW2kkv/89RsVL3l20aIldgZkn8fkc5oOiT5r33QX/sA3irP VPgkgN5wfHrZiBNtwn34DZMLAKG5mOxp9XsJia7mnNd2AjoruTMyrkIMFu8Qj8xf wQFuYh4siRz3oEXVO7YyADIT+Ifu5A7SCCam3DCunF88CILhL1MYK2l3yp5XYtg5 d0KbL9Vxu0xGgAKLem8Dvk0L01I6XivOwFKw/LGWXpwZY3m58vtM6L08G34vOhxR Zl3bY8bhdAif2bSY04mnBkiaFYs/PX0ky2JdXycOMEHNSKY0mXnMgbkoOhkH9yrZ Q1fW3orL/xG4RnAuAq/aLfTFV2uBy+A= -----END CERTIFICATE-----Generated at Sat Jun 13 21:15:22 2026 by rpki-client