$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/969933aa-bc02-357d-875f-85af16f668ef.roa File: 969933aa-bc02-357d-875f-85af16f668ef.roa (raw, json) Hash identifier: IwiKDr1awe4v1xX4E2Y6WgsuOyOGIONny228dFxJ8Vk= Subject key identifier: BE:EF:30:5F:F9:F0:4E:87:A1:9A:3E:B3:16:AA:D6:06:86:D4:8D:06 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA788BFFF3DD0CF0B2EBB9E30 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/969933aa-bc02-357d-875f-85af16f668ef.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.33.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:bf:ff:3d:d0:cf:0b:2e:bb:9e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5a1e169a-c2fc-40c4-a452-0cc8b1f62617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:98:4a:4f:fa:75:96:83:d1:79:10:75:48:7f: 05:b8:2e:4a:7e:46:7d:72:32:d4:a8:0e:0b:3b:17: 3b:22:c7:e6:4e:ec:cd:53:4d:e1:fe:40:cc:1c:b6: 5b:fd:e7:ed:2a:e4:fb:ca:d2:f0:9f:51:50:fc:6a: 7b:3f:95:cd:09:b8:f0:ce:65:ba:91:26:41:b1:28: a8:e6:e7:3c:0e:01:e1:3c:9f:52:26:9b:cd:de:c0: d1:3f:b3:06:14:76:6e:55:4f:a8:aa:7e:67:a9:30: c9:58:99:36:da:59:60:50:09:7b:31:a1:89:92:14: 7c:23:76:4f:0b:7a:e7:dd:55:a4:04:f5:4b:cd:b6: 3c:98:2b:7b:23:1f:3f:90:39:55:1f:b4:ab:5b:01: 4e:ea:26:eb:e9:9b:6f:0b:b2:d6:ec:ff:b1:37:23: 5d:7a:c1:ea:64:ec:21:45:da:da:f1:45:bf:89:8c: d8:5a:49:3f:eb:52:66:1b:0b:70:1d:f3:ed:c5:f4: 1f:ec:e7:c0:29:4b:8e:77:9c:56:b3:d0:be:60:be: ef:a4:c8:e8:a0:b6:7b:0a:98:42:1d:4d:71:d7:44: f5:f5:f9:11:c1:0b:e7:79:51:34:89:ec:80:30:2e: 98:de:93:d5:8a:6a:3d:48:0f:f9:aa:dd:8f:5a:af: 53:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:EF:30:5F:F9:F0:4E:87:A1:9A:3E:B3:16:AA:D6:06:86:D4:8D:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/969933aa-bc02-357d-875f-85af16f668ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:42:fa:48:59:ba:69:8e:92:f0:b9:e1:12:94:2a:65:11:20: a6:f5:7c:63:e2:37:9a:0b:cf:0f:b5:a2:47:27:0a:e1:23:44: 82:3b:77:68:b4:4b:49:fc:c0:f7:54:e5:f1:c4:38:35:a8:47: 41:34:d7:86:55:cd:7b:3b:bb:e3:bb:fd:56:29:c4:e8:f9:bc: 31:48:70:db:7f:95:28:63:92:88:fa:6d:bc:b7:76:08:db:04: b3:76:eb:8f:d1:e3:e4:be:e9:d7:3b:31:7a:bc:79:ac:26:b6: a6:1a:27:93:1d:5c:c7:1e:a4:f0:cc:c9:11:85:75:ce:f0:0c: 81:4e:58:c1:97:7f:77:6a:65:a2:54:52:c5:c3:ef:20:72:69: 7b:3f:16:df:71:48:2c:3e:ac:d9:35:35:1f:89:d9:bc:da:df: 62:1d:23:fe:d2:1b:89:6e:95:f2:05:f8:20:33:2f:08:6b:8b: b4:b9:9d:06:b1:1c:04:b4:1d:cd:f0:ce:45:0d:70:80:cc:45: 09:de:6a:14:39:8a:59:35:4b:e7:b9:f8:6e:2c:9e:0c:3a:91: ef:c4:4a:24:40:11:25:a6:0e:61:40:63:c4:9e:c2:11:25:29: 02:8b:43:d0:36:62:d5:4a:fd:d1:3f:a6:21:b1:62:98:4b:9b: f7:13:0f:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niL//PdDPCy67njAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NWExZTE2OWEtYzJmYy00MGM0LWE0NTItMGNjOGIxZjYyNjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5hKT/p1loPReRB1SH8FuC5KfkZ9cjLUqA4L Oxc7IsfmTuzNU03h/kDMHLZb/eftKuT7ytLwn1FQ/Gp7P5XNCbjwzmW6kSZBsSio 5uc8DgHhPJ9SJpvN3sDRP7MGFHZuVU+oqn5nqTDJWJk22llgUAl7MaGJkhR8I3ZP C3rn3VWkBPVLzbY8mCt7Ix8/kDlVH7SrWwFO6ibr6ZtvC7LW7P+xNyNdesHqZOwh Rdra8UW/iYzYWkk/61JmGwtwHfPtxfQf7OfAKUuOd5xWs9C+YL7vpMjooLZ7CphC HU1x10T19fkRwQvneVE0ieyAMC6Y3pPVimo9SA/5qt2PWq9TgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7vMF/58E6HoZo+sxaq1gaG1I0GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTY5OTMzYWEtYmMwMi0z NTdkLTg3NWYtODVhZjE2ZjY2OGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1C+khZummOkvC54RKUKmURIKb1fGPiN5oLzw+1okcnCuEjRII7d2i0 S0n8wPdU5fHEODWoR0E014ZVzXs7u+O7/VYpxOj5vDFIcNt/lShjkoj6bby3dgjb BLN264/R4+S+6dc7MXq8eawmtqYaJ5MdXMcepPDMyRGFdc7wDIFOWMGXf3dqZaJU UsXD7yByaXs/Ft9xSCw+rNk1NR+J2bza32IdI/7SG4lulfIF+CAzLwhri7S5nQax HAS0Hc3wzkUNcIDMRQneahQ5ilk1S+e5+G4sngw6ke/ESiRAESWmDmFAY8SewhEl KQKLQ9A2YtVK/dE/piGxYphLm/cTD8M= -----END CERTIFICATE-----Generated at Wed Jul 29 08:19:20 2026 by rpki-client