$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7ef2643f-2ef0-3242-9320-0ac22ae783f3.roa File: 7ef2643f-2ef0-3242-9320-0ac22ae783f3.roa (raw, json) Hash identifier: xrN5f56xuOVJmbbTvmj9w+cZLaD9WZ9kfO3buLBfpLw= Subject key identifier: 5D:F1:5D:A3:F6:B0:43:2A:5B:44:F4:1B:A8:01:D8:B5:52:59:72:9D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA7966A20FC11DB93A59B3D80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7ef2643f-2ef0-3242-9320-0ac22ae783f3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.33.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:6a:20:fc:11:db:93:a5:9b:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b20a076d-4cb7-4520-bc58-7b9daff07268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:47:bd:fe:64:3d:78:25:6b:44:02:7b:52:2b: 13:ce:98:ff:f5:11:77:31:95:44:89:af:aa:9a:d7: 0a:bd:3f:8d:a9:52:d9:c1:25:80:be:7d:37:b9:a9: 29:1c:85:f0:df:11:74:48:1d:3c:9f:5c:8a:6f:f7: 54:64:39:fd:d2:b4:f3:11:fc:98:8c:41:55:47:ee: 5a:c5:44:f4:2b:87:1c:d3:fc:83:dd:da:fb:17:34: 2f:37:5d:d3:31:95:be:b2:ba:8c:94:fe:13:e9:e2: 8c:e3:aa:50:86:bf:fd:4b:8b:a7:75:33:53:40:4b: 1f:83:4b:a5:66:aa:b7:0d:ed:cc:f3:57:3e:ed:b4: 7c:8d:ff:7d:49:22:09:42:cb:4e:2c:bd:94:71:b5: 2d:fc:16:7f:80:71:37:6a:42:bc:28:ba:ab:74:e9: 81:39:a4:8e:19:6a:33:03:62:1f:8e:08:81:e3:33: a5:db:49:81:e1:a2:f9:49:db:72:40:35:d7:81:fc: 5e:1a:97:a6:d6:4a:be:24:37:9b:e4:b9:3f:70:68: b8:ab:bb:a2:fc:7f:30:c5:1d:e9:50:6b:e3:9f:9f: 1a:55:bc:42:77:d8:7c:7e:8e:36:b0:c6:e0:83:bf: ac:ea:5f:72:ad:18:38:01:6b:f9:38:03:51:6c:25: a6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F1:5D:A3:F6:B0:43:2A:5B:44:F4:1B:A8:01:D8:B5:52:59:72:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7ef2643f-2ef0-3242-9320-0ac22ae783f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:01:1c:fd:5c:65:25:53:77:5c:31:72:11:15:ab:9f:4e:c4: c9:72:39:19:c3:31:1e:60:33:04:87:31:b6:55:2e:55:71:a8: 9e:98:ff:04:ca:0e:8a:79:cb:9e:8c:85:02:fa:69:55:b7:d4: a7:35:a6:65:dc:50:d2:73:ca:96:30:57:ed:fa:d5:7f:50:52: 8a:51:c3:25:d9:1b:aa:81:cf:83:d0:2a:a8:00:ee:50:ef:19: f8:67:f7:34:cd:ea:8f:75:7d:ed:3d:f3:60:fb:c8:d5:68:f4: a7:84:8a:b7:71:bc:b4:d7:87:6e:be:5c:8d:dd:05:83:05:5f: a0:ad:7d:85:c9:31:ab:c4:96:9d:43:df:3e:53:77:87:ee:c2: 8e:4e:82:3c:22:d2:5e:51:7b:74:a3:9b:21:60:dd:21:e4:41: 16:2a:19:82:24:a9:a9:99:6c:3a:29:3e:25:c2:ad:2d:a8:51: 03:ae:da:b2:2f:f3:cc:22:4e:56:a6:d4:02:87:ed:0a:9e:82: e3:36:b9:1b:92:0e:63:24:de:62:47:28:8f:86:78:94:62:75: 58:54:30:87:39:8f:c1:c3:09:79:a3:c4:b4:64:32:4c:b9:12: 9e:2c:42:84:8e:2a:9d:96:b4:22:fa:95:15:ea:1e:6b:cc:ea: 2c:f8:f8:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlmog/BHbk6WbPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjIwYTA3NmQtNGNiNy00NTIwLWJjNTgtN2I5ZGFmZjA3MjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEe9/mQ9eCVrRAJ7UisTzpj/9RF3MZVEia+q mtcKvT+NqVLZwSWAvn03uakpHIXw3xF0SB08n1yKb/dUZDn90rTzEfyYjEFVR+5a xUT0K4cc0/yD3dr7FzQvN13TMZW+srqMlP4T6eKM46pQhr/9S4undTNTQEsfg0ul Zqq3De3M81c+7bR8jf99SSIJQstOLL2UcbUt/BZ/gHE3akK8KLqrdOmBOaSOGWoz A2IfjgiB4zOl20mB4aL5SdtyQDXXgfxeGpem1kq+JDeb5Lk/cGi4q7ui/H8wxR3p UGvjn58aVbxCd9h8fo42sMbgg7+s6l9yrRg4AWv5OANRbCWm6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3xXaP2sEMqW0T0G6gB2LVSWXKdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2VmMjY0M2YtMmVmMC0z MjQyLTkzMjAtMGFjMjJhZTc4M2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKABHP1cZSVTd1wxchEVq59OxMlyORnDMR5gMwSHMbZVLlVxqJ6Y/wTK Dop5y56MhQL6aVW31Kc1pmXcUNJzypYwV+361X9QUopRwyXZG6qBz4PQKqgA7lDv Gfhn9zTN6o91fe0982D7yNVo9KeEirdxvLTXh26+XI3dBYMFX6CtfYXJMavElp1D 3z5Td4fuwo5Ogjwi0l5Re3SjmyFg3SHkQRYqGYIkqamZbDopPiXCrS2oUQOu2rIv 88wiTlam1AKH7QqeguM2uRuSDmMk3mJHKI+GeJRidVhUMIc5j8HDCXmjxLRkMky5 Ep4sQoSOKp2WtCL6lRXqHmvM6iz4+JE= -----END CERTIFICATE-----Generated at Wed Jul 29 04:04:01 2026 by rpki-client