$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/980bd9a5-a720-3958-9261-a727982ef901.roa File: 980bd9a5-a720-3958-9261-a727982ef901.roa (raw, json) Hash identifier: 0JADJXmlc9wGE9ZGFEqaEVmzv73TdVUagDRI8y38x3A= Subject key identifier: C9:98:38:D2:80:6D:A6:29:E4:C4:3B:E0:99:BB:BE:C8:36:27:B0:34 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E9D4A76CFAED7A20FFD7DC480 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/980bd9a5-a720-3958-9261-a727982ef901.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 8069 IP address blocks: 20.33.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:76:cf:ae:d7:a2:0f:fd:7d:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=a32c9fb7-2b23-4e15-a80e-247914bbba3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c6:ae:41:ee:53:9b:fd:3c:dd:77:ab:3d:ba: 4b:79:bc:a2:17:a1:e8:e8:af:ce:99:ba:62:ea:ad: a1:11:a0:c3:b6:ec:74:2d:ba:10:f4:84:c6:92:3a: 1b:16:9d:bc:3d:ac:78:d6:84:37:7d:02:0f:f4:a3: 48:16:cc:58:da:9c:ee:da:a2:26:0a:d7:67:84:86: f7:37:43:bd:45:b7:ae:5d:ef:b8:12:8f:e1:88:d0: cf:55:c8:47:7a:34:59:27:d3:44:90:4e:2b:83:24: 36:f6:ae:2b:c2:2d:df:2a:a9:60:2b:7e:0e:27:59: 33:05:64:2e:ec:0b:17:45:66:e4:f9:7f:a1:9a:a3: e0:e5:49:9a:84:c1:4d:e5:97:93:03:7c:52:0c:3b: 7d:49:4f:15:da:cf:c1:0e:fc:64:0f:48:28:4f:8c: a9:7e:6d:dc:fe:bd:82:af:7b:ed:27:41:e8:cc:f2: bd:9d:78:d3:5b:a3:b1:da:c6:70:f0:fb:5b:a9:af: 47:d1:33:d0:8f:c2:56:97:6a:95:aa:f6:95:a2:0e: ac:9c:17:75:7d:45:df:af:ed:85:d0:db:65:0f:1c: f5:ea:c1:56:58:2e:44:70:a2:4f:a9:3a:74:97:e9: 75:a9:11:b5:46:46:91:d5:60:09:59:6a:09:57:15: a0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:98:38:D2:80:6D:A6:29:E4:C4:3B:E0:99:BB:BE:C8:36:27:B0:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/980bd9a5-a720-3958-9261-a727982ef901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:93:ce:07:6d:21:8a:6d:25:99:df:0d:1c:74:98:40:86:34: 14:62:1a:e0:3f:ac:d9:b2:26:c4:00:c1:07:c3:95:bc:d7:5e: 8d:b0:7d:20:9e:0e:30:dc:bb:db:fe:55:c8:55:ca:16:8e:33: f1:7c:93:1f:67:f3:36:b0:1c:5f:33:f5:6c:38:7b:75:9a:66: 1f:bb:de:cd:6e:22:a5:18:59:41:d5:3a:76:6d:01:c2:28:b5: b4:23:db:25:c2:fe:ab:ac:f8:ab:e9:48:a9:c3:27:b3:54:17: be:76:13:4c:d4:4d:47:37:93:d6:0e:60:e7:25:f4:ca:4f:16: 9e:9f:37:bb:8d:f8:69:61:29:e9:47:51:f7:e0:43:b4:28:0f: 46:72:a7:d4:44:9d:d0:d7:5d:79:24:93:da:bf:59:a6:32:b8: 55:1e:17:c9:d3:f3:22:e7:c1:2d:f3:5b:4e:2f:c6:75:fa:49: 1b:e1:89:f4:04:5a:e3:e4:b7:26:75:6e:e8:d5:73:ad:98:ec: 45:31:f9:cc:f4:ab:bc:85:da:a7:0b:45:c0:34:ce:ac:a1:45: cd:8d:87:d5:63:a1:46:89:84:37:18:25:1a:1d:4a:d0:93:ad: 18:92:89:b4:c0:4d:a9:18:7a:c1:81:ce:9b:a3:8f:41:d6:d7: 65:41:78:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSnbPrteiD/19xIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk YTMyYzlmYjctMmIyMy00ZTE1LWE4MGUtMjQ3OTE0YmJiYTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMauQe5Tm/083XerPbpLebyiF6Ho6K/Ombpi 6q2hEaDDtux0LboQ9ITGkjobFp28Pax41oQ3fQIP9KNIFsxY2pzu2qImCtdnhIb3 N0O9RbeuXe+4Eo/hiNDPVchHejRZJ9NEkE4rgyQ29q4rwi3fKqlgK34OJ1kzBWQu 7AsXRWbk+X+hmqPg5UmahMFN5ZeTA3xSDDt9SU8V2s/BDvxkD0goT4ypfm3c/r2C r3vtJ0HozPK9nXjTW6Ox2sZw8Ptbqa9H0TPQj8JWl2qVqvaVog6snBd1fUXfr+2F 0NtlDxz16sFWWC5EcKJPqTp0l+l1qRG1RkaR1WAJWWoJVxWgbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmYONKAbaYp5MQ74Jm7vsg2J7A0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTgwYmQ5YTUtYTcyMC0z OTU4LTkyNjEtYTcyNzk4MmVmOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2TzgdtIYptJZnfDRx0mECGNBRiGuA/rNmyJsQAwQfDlbzXXo2wfSCe DjDcu9v+VchVyhaOM/F8kx9n8zawHF8z9Ww4e3WaZh+73s1uIqUYWUHVOnZtAcIo tbQj2yXC/qus+KvpSKnDJ7NUF752E0zUTUc3k9YOYOcl9MpPFp6fN7uN+GlhKelH UffgQ7QoD0Zyp9REndDXXXkkk9q/WaYyuFUeF8nT8yLnwS3zW04vxnX6SRvhifQE WuPktyZ1bujVc62Y7EUx+cz0q7yF2qcLRcA0zqyhRc2Nh9VjoUaJhDcYJRodStCT rRiSibTATakYesGBzpujj0HW12VBeHQ= -----END CERTIFICATE-----Generated at Wed Jul 29 10:38:06 2026 by rpki-client