$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b8dfed92-9681-3c25-8cdc-e320f158c88a.roa File: b8dfed92-9681-3c25-8cdc-e320f158c88a.roa (raw, json) Hash identifier: +/Eft9T11HD3i4UA/tEk4Bel8jdO0j/xSXeks4QQRTk= Subject key identifier: 08:AA:FC:8D:51:F6:61:F9:E8:C9:F3:6A:D1:3C:89:53:D5:73:B8:83 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA7873D12035C9D1B350FF680 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b8dfed92-9681-3c25-8cdc-e320f158c88a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.33.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:3d:12:03:5c:9d:1b:35:0f:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5846ef71-6d72-40d2-9bdf-8b831b24d854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d5:9e:23:31:fd:58:db:ac:e4:c9:e9:1a:99: 70:e2:d6:db:e0:bc:a3:09:2f:96:52:26:d1:b3:2a: c0:32:6a:0c:53:2b:49:94:b9:20:5d:38:a7:a1:87: 18:fa:ff:b7:f4:91:73:ef:22:e2:f8:4c:86:b5:91: 7f:05:fb:ed:1c:d7:af:0b:2e:19:03:bf:23:e3:e4: ee:ca:f5:20:1d:fc:b9:ac:c7:db:bb:82:6a:2f:83: c2:9f:b7:8c:89:12:85:a4:71:07:a7:fb:dc:24:a1: c6:31:81:3e:8e:3d:07:5e:84:8f:1b:19:06:44:bb: 0b:3b:87:46:86:f1:88:1f:fd:a9:95:fc:e9:a6:8c: 1e:9f:77:60:da:6a:b6:1f:f5:15:31:07:39:af:47: a6:b8:ee:76:85:a3:4c:e2:78:97:87:53:18:a0:8a: e2:ed:1d:f7:90:5b:5b:39:79:6d:c7:e2:9c:73:1a: cb:c3:ed:c5:16:b2:00:be:a7:5d:12:c3:b6:cf:ea: 11:16:31:3a:31:9d:b8:59:15:dd:90:ab:94:08:13: f4:af:1e:72:87:fd:8f:4b:70:d0:01:b9:5d:38:f7: 3f:07:cf:dd:d1:df:19:e7:d6:35:b9:ec:1d:03:ed: 1e:c5:b2:8e:70:1a:4c:4c:c7:bb:78:0b:50:af:6a: a5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AA:FC:8D:51:F6:61:F9:E8:C9:F3:6A:D1:3C:89:53:D5:73:B8:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b8dfed92-9681-3c25-8cdc-e320f158c88a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:d6:8e:f5:8c:65:e0:50:aa:21:76:ff:0c:d9:fe:0a:11:93: 46:33:b4:b4:29:5c:61:17:e4:c3:a5:90:1b:d7:07:6a:10:35: 15:66:5c:8f:7a:b7:60:1b:25:15:bb:a4:96:d4:4b:22:8e:7f: d7:59:82:e8:ce:5a:55:5c:72:a4:c4:d1:52:e5:1c:a1:db:2a: ed:66:6f:27:2d:e5:6a:4e:f9:54:f1:36:b6:62:be:f4:53:97: 18:d0:f7:d1:da:d7:cc:46:32:f9:7f:a2:7b:9c:b6:cf:28:d5: b4:c3:d5:0e:5b:47:d1:c9:d9:09:63:dd:76:63:96:b3:ea:ee: c6:12:5c:a2:6e:62:de:ca:e7:2a:94:96:7c:48:2d:dc:e2:93: 12:c3:af:95:33:cf:61:bb:2f:e5:b8:17:cd:d1:ab:b9:4a:63: d3:7f:1e:ce:20:c4:14:2f:f7:f5:1f:5a:56:0b:55:47:d4:ad: 85:25:86:ef:f1:dd:b0:af:42:68:51:f0:9d:5c:2c:27:c0:12: 1f:f0:a6:13:fc:8b:62:d5:f3:9b:d2:1e:5b:32:c9:50:b5:ea: cf:e7:cd:d9:46:15:55:52:f7:c8:1e:0c:3e:df:c6:f4:09:ee: 06:72:c4:13:32:1d:9f:85:e1:05:09:bb:f6:1c:db:a4:16:6d: 04:1b:ef:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhz0SA1ydGzUP9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTg0NmVmNzEtNmQ3Mi00MGQyLTliZGYtOGI4MzFiMjRkODU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNWeIzH9WNus5MnpGplw4tbb4LyjCS+WUibR syrAMmoMUytJlLkgXTinoYcY+v+39JFz7yLi+EyGtZF/BfvtHNevCy4ZA78j4+Tu yvUgHfy5rMfbu4JqL4PCn7eMiRKFpHEHp/vcJKHGMYE+jj0HXoSPGxkGRLsLO4dG hvGIH/2plfzppowen3dg2mq2H/UVMQc5r0emuO52haNM4niXh1MYoIri7R33kFtb OXltx+KccxrLw+3FFrIAvqddEsO2z+oRFjE6MZ24WRXdkKuUCBP0rx5yh/2PS3DQ AbldOPc/B8/d0d8Z59Y1uewdA+0exbKOcBpMTMe7eAtQr2qlrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAiq/I1R9mH56MnzatE8iVPVc7iDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjhkZmVkOTItOTY4MS0z YzI1LThjZGMtZTMyMGYxNThjODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPWjvWMZeBQqiF2/wzZ/goRk0YztLQpXGEX5MOlkBvXB2oQNRVmXI96 t2AbJRW7pJbUSyKOf9dZgujOWlVccqTE0VLlHKHbKu1mbyct5WpO+VTxNrZivvRT lxjQ99Ha18xGMvl/onucts8o1bTD1Q5bR9HJ2Qlj3XZjlrPq7sYSXKJuYt7K5yqU lnxILdzikxLDr5Uzz2G7L+W4F83Rq7lKY9N/Hs4gxBQv9/UfWlYLVUfUrYUlhu/x 3bCvQmhR8J1cLCfAEh/wphP8i2LV85vSHlsyyVC16s/nzdlGFVVS98geDD7fxvQJ 7gZyxBMyHZ+F4QUJu/Yc26QWbQQb70E= -----END CERTIFICATE-----Generated at Wed Jul 29 06:46:30 2026 by rpki-client