$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b98b3835-cb67-3eb6-9902-27ecb2f277ce.roa File: b98b3835-cb67-3eb6-9902-27ecb2f277ce.roa (raw, json) Hash identifier: BGlkBjsqy+2rLz8HP4qkw+Z4CUdaPjDWxH6fwbVmH70= Subject key identifier: A4:E9:E2:12:0F:2D:B6:4D:3D:EA:39:78:1B:48:D3:9F:29:0C:55:FD Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA44518FC49AE6CB5A6309E00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b98b3835-cb67-3eb6-9902-27ecb2f277ce.roa Signing time: Mon 27 Jul 2026 21:00:11 +0000 ROA not before: Mon 27 Jul 2026 21:00:11 +0000 ROA not after: Sun 25 Oct 2026 21:00:11 +0000 asID: 8069 IP address blocks: 20.33.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a4:45:18:fc:49:ae:6c:b5:a6:30:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 27 21:00:11 2026 GMT Not After : Oct 25 21:00:11 2026 GMT Subject: CN=af55b98d-42cd-46ad-ad8f-f7992c46bde1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b8:2c:a0:e3:e9:13:f5:73:e6:3e:3e:25:51: 4b:02:c7:a2:90:67:46:4f:96:80:86:7c:8f:5c:c0: 8d:cd:69:14:ed:4b:69:22:27:1f:c8:36:46:ba:c7: ab:e0:84:9a:61:97:a3:3a:db:78:3c:f7:b8:f9:17: a4:f5:08:67:51:5c:96:fa:d9:66:79:44:a9:b6:ce: 5a:ec:ea:27:67:b9:6a:ec:07:b3:c4:56:a9:a4:e4: df:b1:93:98:2d:15:4b:5c:57:2f:17:03:05:d1:56: 9d:7f:e8:4a:f9:57:3b:ab:1b:e0:b5:80:ab:8e:7b: 44:97:ad:1a:c8:2f:61:97:33:73:59:67:4e:81:c8: f6:7b:12:51:8b:a0:58:1d:4e:ec:1d:84:f6:2c:c2: cb:fa:c3:f5:e4:1e:c6:40:58:b7:5b:40:16:ea:8f: 73:c6:65:66:b9:3a:6e:ed:d5:f5:c3:26:b2:d9:86: 09:59:ba:77:9f:61:ed:1a:ec:f9:2b:db:cf:b7:b1: 67:f0:e7:c8:dc:a7:22:57:40:da:38:98:09:82:03: d9:2b:b4:a0:b0:b7:78:d5:68:4f:de:0d:b0:d6:c8: 68:d6:30:66:8a:8c:e8:5b:52:5b:a8:9e:cb:a8:e1: 21:10:81:6d:b5:3a:75:9a:5b:0c:77:ec:bc:89:10: 1c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E9:E2:12:0F:2D:B6:4D:3D:EA:39:78:1B:48:D3:9F:29:0C:55:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b98b3835-cb67-3eb6-9902-27ecb2f277ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:5c:8d:3a:16:c7:a1:7e:43:1b:f3:e4:d6:c9:3c:a0:87:01: 78:46:aa:80:74:82:cd:d2:69:b5:8d:12:5f:44:1f:71:bc:f7: 46:5c:af:16:41:26:d1:06:98:4d:f0:3a:9e:d3:5f:e2:f4:7e: 7d:a9:16:92:8d:79:f6:71:2d:fe:08:df:62:8f:63:28:c9:b3: 4a:e9:52:0a:db:07:a6:75:c9:e1:10:f7:57:33:70:fc:34:10: 18:7a:17:7e:c3:bd:d9:b9:87:4b:23:c7:0e:18:f0:d5:0a:9e: 7f:18:41:2f:6c:31:84:d3:ab:e5:d1:de:c1:92:12:c4:51:0e: 10:25:cf:d8:94:b6:ee:8e:91:16:43:0b:da:f6:d6:06:e0:ae: a3:a3:7a:b4:cd:52:56:12:76:d8:a7:8d:39:6f:70:79:1a:da: 7d:8e:ff:f1:a3:57:ee:98:33:42:1c:2f:b5:86:2f:08:62:b1: 58:f8:76:f9:f4:7a:a7:33:90:72:4a:8f:2c:2c:8c:7f:5c:96: a2:27:98:28:05:f7:f8:25:fc:fb:55:bb:8f:29:8a:b3:31:38: ba:ff:c5:9a:07:b7:87:77:43:57:e4:67:b5:69:99:9b:d2:06: 20:2a:e9:33:7a:ed:14:ab:6b:2b:d5:49:d4:70:72:6b:28:3a: d4:37:67:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6kRRj8Sa5staYwngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyNzIxMDAxMVoXDTI2MTAyNTIxMDAxMVowLzEtMCsGA1UEAxMk YWY1NWI5OGQtNDJjZC00NmFkLWFkOGYtZjc5OTJjNDZiZGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrgsoOPpE/Vz5j4+JVFLAseikGdGT5aAhnyP XMCNzWkU7UtpIicfyDZGuser4ISaYZejOtt4PPe4+Rek9QhnUVyW+tlmeUSpts5a 7OonZ7lq7AezxFappOTfsZOYLRVLXFcvFwMF0Vadf+hK+Vc7qxvgtYCrjntEl60a yC9hlzNzWWdOgcj2exJRi6BYHU7sHYT2LMLL+sP15B7GQFi3W0AW6o9zxmVmuTpu 7dX1wyay2YYJWbp3n2HtGuz5K9vPt7Fn8OfI3KciV0DaOJgJggPZK7SgsLd41WhP 3g2w1sho1jBmiozoW1JbqJ7LqOEhEIFttTp1mlsMd+y8iRAcVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTp4hIPLbZNPeo5eBtI058pDFX9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjk4YjM4MzUtY2I2Ny0z ZWI2LTk5MDItMjdlY2IyZjI3N2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxcjToWx6F+Qxvz5NbJPKCHAXhGqoB0gs3SabWNEl9EH3G890ZcrxZB JtEGmE3wOp7TX+L0fn2pFpKNefZxLf4I32KPYyjJs0rpUgrbB6Z1yeEQ91czcPw0 EBh6F37Dvdm5h0sjxw4Y8NUKnn8YQS9sMYTTq+XR3sGSEsRRDhAlz9iUtu6OkRZD C9r21gbgrqOjerTNUlYSdtinjTlvcHka2n2O//GjV+6YM0IcL7WGLwhisVj4dvn0 eqczkHJKjywsjH9clqInmCgF9/gl/PtVu48pirMxOLr/xZoHt4d3Q1fkZ7VpmZvS BiAq6TN67RSrayvVSdRwcmsoOtQ3Z2A= -----END CERTIFICATE-----Generated at Wed Jul 29 08:36:23 2026 by rpki-client