$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce3991cc-6dfe-33db-8152-8d60ebb2897a.roa File: ce3991cc-6dfe-33db-8152-8d60ebb2897a.roa (raw, json) Hash identifier: P620W2+AWcTOms9BrFgtfDwemv/YEo1dcyw5DGRcJ3w= Subject key identifier: A6:EF:8B:3A:E4:CA:2B:29:87:A5:D6:75:2E:6D:0C:AE:B8:72:6B:8B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA788BF2215271420B01E4EC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce3991cc-6dfe-33db-8152-8d60ebb2897a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.33.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:bf:22:15:27:14:20:b0:1e:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e89048f1-b263-4a77-abcc-c54016b271f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b9:17:eb:8b:54:88:3f:77:d3:4a:19:45:74: 03:cb:ba:ae:b5:0d:67:c4:3e:82:6e:11:01:8d:65: 73:88:c9:e9:10:e9:17:e7:de:9d:b6:ac:44:2f:bc: b9:35:60:71:14:97:53:7c:4e:fa:34:fc:66:5b:b5: dc:30:0e:77:eb:d7:90:37:29:b7:fa:6f:4c:77:03: b3:2d:56:cb:80:15:04:cf:3d:1c:d2:f6:53:14:ff: a2:94:98:cd:66:05:93:c2:17:9c:70:ad:0c:6f:c3: bd:88:c7:49:67:15:99:a4:df:e0:bb:6d:af:c5:b5: d6:1a:95:d7:10:a6:1e:e4:7b:68:cd:b7:83:d1:48: 0c:d3:10:66:a1:85:52:fd:be:de:62:3b:41:22:51: 91:3a:26:7d:7d:16:ad:22:89:9a:fa:6e:32:bf:ef: f1:3a:a0:22:c7:46:f5:13:00:cf:bf:0f:56:d6:21: 75:3f:30:59:ad:f5:37:c3:93:ef:14:6f:7c:59:4f: 26:bd:19:f2:9e:4e:43:27:22:4f:d7:50:24:ac:dd: 89:9b:d9:e0:bd:2d:b3:4b:7c:17:4f:33:da:65:5f: 35:84:e4:18:2d:14:61:ab:4e:a2:ff:cd:4a:59:46: 8f:d9:4f:ef:9e:9f:2f:f5:b5:aa:05:a4:97:29:4a: 3f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EF:8B:3A:E4:CA:2B:29:87:A5:D6:75:2E:6D:0C:AE:B8:72:6B:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce3991cc-6dfe-33db-8152-8d60ebb2897a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:41:0a:1a:7c:ad:49:67:3b:cd:43:7f:71:33:2c:2b:41:3f: 2f:7d:d4:79:7d:19:4f:06:de:c4:42:25:ef:af:66:dd:c6:75: 00:db:a1:dc:fa:e2:f3:48:1d:b3:56:73:3f:f9:8a:9a:b3:a8: 95:2a:c6:10:d9:42:9d:59:dd:43:7e:31:31:a4:31:5c:e9:58: 3e:94:d2:83:5d:30:9f:00:1f:0f:72:2a:55:a7:6d:f6:9c:6a: 11:37:53:40:bb:7b:94:dc:52:ca:3b:fc:cb:7b:45:11:a1:6e: 5e:1e:c2:32:ed:59:00:24:50:59:1f:84:10:ea:74:89:de:5b: b1:aa:2a:3e:c4:83:37:1c:2a:2e:10:97:da:92:2c:90:f8:7f: 1e:53:a4:c1:11:3f:8a:52:6f:e9:91:55:a8:89:76:50:c4:31: 44:a4:04:7c:91:ea:f4:eb:67:b9:f0:95:40:76:c9:01:e0:c2: c1:65:67:3c:55:36:dd:33:30:95:ec:99:3c:63:62:8c:32:2c: 56:f3:70:0e:14:9a:40:8a:a7:cb:ec:c4:31:8e:26:b5:39:ff: 06:b7:a8:4c:5b:4a:e0:3c:05:14:8e:67:06:bf:8e:64:88:b3: ba:3a:27:6e:44:dc:1b:28:83:91:6d:e5:43:2f:c2:0e:79:8a: 88:f6:fe:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niL8iFScUILAeTsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTg5MDQ4ZjEtYjI2My00YTc3LWFiY2MtYzU0MDE2YjI3MWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurkX64tUiD9300oZRXQDy7qutQ1nxD6CbhEB jWVziMnpEOkX596dtqxEL7y5NWBxFJdTfE76NPxmW7XcMA5369eQNym3+m9MdwOz LVbLgBUEzz0c0vZTFP+ilJjNZgWTwheccK0Mb8O9iMdJZxWZpN/gu22vxbXWGpXX EKYe5HtozbeD0UgM0xBmoYVS/b7eYjtBIlGROiZ9fRatIoma+m4yv+/xOqAix0b1 EwDPvw9W1iF1PzBZrfU3w5PvFG98WU8mvRnynk5DJyJP11AkrN2Jm9ngvS2zS3wX TzPaZV81hOQYLRRhq06i/81KWUaP2U/vnp8v9bWqBaSXKUo/6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbvizrkyisph6XWdS5tDK64cmuLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2UzOTkxY2MtNmRmZS0z M2RiLTgxNTItOGQ2MGViYjI4OTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFBChp8rUlnO81Df3EzLCtBPy991Hl9GU8G3sRCJe+vZt3GdQDbodz6 4vNIHbNWcz/5ipqzqJUqxhDZQp1Z3UN+MTGkMVzpWD6U0oNdMJ8AHw9yKlWnbfac ahE3U0C7e5TcUso7/Mt7RRGhbl4ewjLtWQAkUFkfhBDqdIneW7GqKj7EgzccKi4Q l9qSLJD4fx5TpMERP4pSb+mRVaiJdlDEMUSkBHyR6vTrZ7nwlUB2yQHgwsFlZzxV Nt0zMJXsmTxjYowyLFbzcA4UmkCKp8vsxDGOJrU5/wa3qExbSuA8BRSOZwa/jmSI s7o6J25E3Bsog5Ft5UMvwg55ioj2/i4= -----END CERTIFICATE-----Generated at Wed Jul 29 07:53:03 2026 by rpki-client