$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/871537b1-1a3c-3d03-9ef9-2a8e3f5aa9e9.roa File: 871537b1-1a3c-3d03-9ef9-2a8e3f5aa9e9.roa (raw, json) Hash identifier: BLaVFwJ1HamiBSH1IY4MjDG7Aaz1Uko4KYbJaSg3noQ= Subject key identifier: 71:F4:67:9E:FF:C6:2C:B8:54:8C:97:78:B9:BB:D1:45:60:2D:8D:E2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA7873CFBCAADDB6732C169C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/871537b1-1a3c-3d03-9ef9-2a8e3f5aa9e9.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.33.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:3c:fb:ca:ad:db:67:32:c1:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f39e2ac4-fe4e-43df-bc61-ae8ed57742fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a8:42:24:0a:22:9f:b2:5e:02:b5:94:8c:b1: 75:ea:88:d6:22:bb:8f:e9:ae:96:74:bb:d6:a9:43: 5c:d2:b4:49:72:0b:fa:08:67:94:74:76:f8:74:f6: 4f:22:cf:97:08:25:59:27:34:9f:e4:a0:50:08:7b: 9e:95:d7:5a:12:cb:81:aa:0a:1b:1c:5a:a6:32:12: db:76:ef:a3:d7:16:b5:7b:7e:c3:57:a0:28:d9:22: 1d:f8:e2:b8:8f:55:13:97:e7:43:1d:a4:82:67:d5: 36:c2:30:02:03:3f:fe:40:78:fd:b5:e8:8f:c2:8b: 69:6f:9f:93:0e:b3:46:49:27:64:34:ce:07:3f:ff: 99:07:4d:73:3e:1e:d3:21:26:3b:ef:27:53:dd:ca: 16:dd:4e:69:8a:c4:d0:1d:fa:56:b1:db:c2:64:d1: bc:9e:39:93:d5:70:e6:4c:24:2a:36:1e:4a:46:72: 80:c7:48:fc:5e:de:97:34:80:24:99:44:51:95:6d: 0a:64:23:fc:2e:fc:1f:e2:cc:af:21:d4:28:d0:aa: ec:98:35:d3:1b:7d:d2:aa:5a:b6:72:95:25:b7:c2: 25:b7:d5:61:21:58:11:b7:f3:25:14:a5:2c:d7:df: 05:e3:6a:08:db:91:36:4d:59:0f:93:88:8b:00:93: c2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F4:67:9E:FF:C6:2C:B8:54:8C:97:78:B9:BB:D1:45:60:2D:8D:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/871537b1-1a3c-3d03-9ef9-2a8e3f5aa9e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:c1:23:bf:30:66:9b:cf:e6:64:07:5d:38:f9:73:6a:42:99: 80:93:4d:02:bc:c8:3b:98:cf:e3:da:7f:ab:56:fc:6d:c6:fd: b4:a9:6e:05:5e:38:b5:cd:32:1b:1d:30:49:80:68:0a:0f:cf: 53:d3:63:e5:f1:e1:24:ac:fc:d3:05:82:e3:8b:84:da:e6:a0: 0f:8e:95:cb:0b:94:92:37:c8:17:42:b5:68:d4:48:d3:72:b6: dd:3c:68:cd:05:a0:e2:38:57:3f:37:4b:33:d5:4d:db:73:2b: d2:32:c2:92:87:01:2f:28:7e:dc:f9:93:15:33:a2:5c:72:da: 46:a2:2a:96:c3:a7:a6:2c:e4:85:76:3a:88:fa:09:f1:08:93: 27:bd:bc:ae:d9:cb:fd:29:2d:ea:99:0a:55:0e:84:43:80:a9: 32:8b:16:29:e7:07:f0:30:42:ec:3f:b7:c7:3d:69:98:cd:d7: 9e:37:da:33:98:30:09:8d:2d:66:da:4c:e7:03:20:b9:98:74: 51:bb:b8:80:85:a9:78:11:d0:cc:11:c8:a3:35:da:54:52:b9: ec:07:aa:97:d4:6e:1a:cc:fd:42:17:09:32:95:52:8a:cf:74: cc:e0:4e:1b:f7:9e:16:c8:e3:bc:a0:88:48:39:98:1a:58:c3: da:0d:b5:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhzz7yq3bZzLBacAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZjM5ZTJhYzQtZmU0ZS00M2RmLWJjNjEtYWU4ZWQ1Nzc0MmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6hCJAoin7JeArWUjLF16ojWIruP6a6WdLvW qUNc0rRJcgv6CGeUdHb4dPZPIs+XCCVZJzSf5KBQCHuelddaEsuBqgobHFqmMhLb du+j1xa1e37DV6Ao2SId+OK4j1UTl+dDHaSCZ9U2wjACAz/+QHj9teiPwotpb5+T DrNGSSdkNM4HP/+ZB01zPh7TISY77ydT3coW3U5pisTQHfpWsdvCZNG8njmT1XDm TCQqNh5KRnKAx0j8Xt6XNIAkmURRlW0KZCP8Lvwf4syvIdQo0KrsmDXTG33Sqlq2 cpUlt8Ilt9VhIVgRt/MlFKUs198F42oI25E2TVkPk4iLAJPC/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHH0Z57/xiy4VIyXeLm70UVgLY3iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODcxNTM3YjEtMWEzYy0z ZDAzLTllZjktMmE4ZTNmNWFhOWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjBI78wZpvP5mQHXTj5c2pCmYCTTQK8yDuYz+Paf6tW/G3G/bSpbgVe OLXNMhsdMEmAaAoPz1PTY+Xx4SSs/NMFguOLhNrmoA+OlcsLlJI3yBdCtWjUSNNy tt08aM0FoOI4Vz83SzPVTdtzK9IywpKHAS8oftz5kxUzolxy2kaiKpbDp6Ys5IV2 Ooj6CfEIkye9vK7Zy/0pLeqZClUOhEOAqTKLFinnB/AwQuw/t8c9aZjN15432jOY MAmNLWbaTOcDILmYdFG7uICFqXgR0MwRyKM12lRSuewHqpfUbhrM/UIXCTKVUorP dMzgThv3nhbI47ygiEg5mBpYw9oNtTw= -----END CERTIFICATE-----Generated at Wed Jul 29 05:28:46 2026 by rpki-client