$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d6208af-a9bf-3bf7-bd20-7dd74ebd03c4.roa File: 7d6208af-a9bf-3bf7-bd20-7dd74ebd03c4.roa (raw, json) Hash identifier: towoTCa4580II6OiPL4QVN2GeUThmvIA9/D+AkVjJKQ= Subject key identifier: E0:54:9D:3F:38:BB:54:50:DA:71:3D:84:A7:FB:3C:3A:F5:AB:C0:D2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA788BF6C5BEF1A9EB35DE540 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d6208af-a9bf-3bf7-bd20-7dd74ebd03c4.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.33.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:bf:6c:5b:ef:1a:9e:b3:5d:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=34e83952-9874-4fbb-8df3-3601fde8a5de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:29:0f:81:df:3e:92:b7:d7:f7:b6:24:e8:99: bc:db:ee:c1:4d:a5:dc:26:5e:bf:21:86:d8:0e:34: 65:69:15:14:8d:79:22:b5:89:3b:24:35:54:b7:a4: f1:cd:dc:0d:a1:a0:74:f3:db:0b:12:8b:e9:d6:90: d8:cb:31:26:5b:64:ab:22:2d:b6:82:62:bf:a3:5d: 77:55:b5:e0:9a:1b:ff:9f:f7:11:90:a5:92:b0:59: a9:e8:d9:a8:5b:72:35:e3:69:1e:39:28:43:7f:bb: e8:9b:c5:28:4d:2b:02:e5:7b:2f:fe:2c:51:45:ba: b1:ec:6d:78:2b:7b:1d:67:60:66:2e:51:1f:5e:c3: ea:fb:81:02:63:0f:33:68:c3:ed:95:14:cf:d1:a6: 25:57:2a:06:d5:d5:ba:f6:94:b4:92:f8:f8:18:52: 53:cb:ff:9c:7d:56:35:88:a2:0b:e3:11:0c:4a:40: 9f:90:25:50:7c:ea:de:e2:1e:f6:9f:19:da:c8:e4: 12:af:ce:c6:a7:3e:d6:4e:02:a3:e2:f6:7c:32:1c: 61:c7:71:2e:84:d7:82:6a:39:22:d5:15:fd:47:6a: 7b:52:2a:cc:7f:a6:fc:62:aa:47:e2:6d:47:19:51: 90:a3:40:1d:57:1d:79:b2:fe:da:1c:02:39:41:66: 88:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:54:9D:3F:38:BB:54:50:DA:71:3D:84:A7:FB:3C:3A:F5:AB:C0:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d6208af-a9bf-3bf7-bd20-7dd74ebd03c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:7e:3b:e8:e2:ec:b1:f3:cd:f2:09:1c:48:bc:b9:fd:09:03: c2:4e:7c:62:94:e6:ea:e4:bb:f1:cd:cc:f8:eb:b1:99:ac:bb: 9e:5f:62:33:c1:70:43:9b:07:b2:77:eb:8a:5c:0f:b9:d1:18: 17:e6:28:e8:86:10:4e:c7:b6:cc:25:73:c5:9a:b7:e9:81:20: 94:05:2f:1c:1c:57:f0:78:ca:e5:e4:cd:db:0b:13:24:91:76: f2:1f:5a:2e:8c:63:3d:c0:18:f4:04:9c:aa:d4:05:e2:ea:a6: c6:43:65:d9:e0:be:a1:bd:c4:d0:b8:36:37:7f:db:0a:80:fd: 3e:4a:37:04:c9:e6:86:96:45:b4:11:01:d8:21:8c:a9:e9:af: fc:d4:ab:4a:f1:99:80:ab:ea:fe:7a:6d:a8:25:76:fd:a8:29: 8f:83:51:4c:91:7c:40:c3:b2:3c:73:b3:74:99:b2:10:16:cd: 04:b2:30:6b:e2:dc:39:55:e1:2c:8d:1a:3c:f7:5c:c2:2b:f4: 19:38:7c:34:ad:cf:1a:fa:2a:7c:0b:5f:7b:71:59:3e:c6:c1: 33:ee:0d:b7:5a:bc:63:4c:48:a9:8a:16:a7:7b:80:d7:bd:a9: 22:83:a5:39:ef:97:5b:4a:00:a9:c5:fc:6d:89:00:c0:e7:50: d5:eb:54:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niL9sW+8anrNd5UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzRlODM5NTItOTg3NC00ZmJiLThkZjMtMzYwMWZkZThhNWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsykPgd8+krfX97Yk6Jm82+7BTaXcJl6/IYbY DjRlaRUUjXkitYk7JDVUt6TxzdwNoaB089sLEovp1pDYyzEmW2SrIi22gmK/o113 VbXgmhv/n/cRkKWSsFmp6NmoW3I142keOShDf7vom8UoTSsC5Xsv/ixRRbqx7G14 K3sdZ2BmLlEfXsPq+4ECYw8zaMPtlRTP0aYlVyoG1dW69pS0kvj4GFJTy/+cfVY1 iKIL4xEMSkCfkCVQfOre4h72nxnayOQSr87Gpz7WTgKj4vZ8Mhxhx3EuhNeCajki 1RX9R2p7UirMf6b8YqpH4m1HGVGQo0AdVx15sv7aHAI5QWaIPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBUnT84u1RQ2nE9hKf7PDr1q8DSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2Q2MjA4YWYtYTliZi0z YmY3LWJkMjAtN2RkNzRlYmQwM2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADB+O+ji7LHzzfIJHEi8uf0JA8JOfGKU5urku/HNzPjrsZmsu55fYjPB cEObB7J364pcD7nRGBfmKOiGEE7Htswlc8Wat+mBIJQFLxwcV/B4yuXkzdsLEySR dvIfWi6MYz3AGPQEnKrUBeLqpsZDZdngvqG9xNC4Njd/2wqA/T5KNwTJ5oaWRbQR AdghjKnpr/zUq0rxmYCr6v56bagldv2oKY+DUUyRfEDDsjxzs3SZshAWzQSyMGvi 3DlV4SyNGjz3XMIr9Bk4fDStzxr6KnwLX3txWT7GwTPuDbdavGNMSKmKFqd7gNe9 qSKDpTnvl1tKAKnF/G2JAMDnUNXrVFI= -----END CERTIFICATE-----Generated at Wed Jul 29 03:56:26 2026 by rpki-client