$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfc48a13-8ef5-3e8c-a89e-d0cca5676ba0.roa File: cfc48a13-8ef5-3e8c-a89e-d0cca5676ba0.roa (raw, json) Hash identifier: oykzkFOjIX42Wc/7kidDudxs/47cm84kWELA3ZbTwSg= Subject key identifier: D8:D9:1B:97:88:00:C4:A7:56:2E:72:29:D4:A5:45:B0:BF:21:E5:F1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA788BF8BD2D382C9784BC480 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfc48a13-8ef5-3e8c-a89e-d0cca5676ba0.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.33.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:bf:8b:d2:d3:82:c9:78:4b:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e763ede9-5bed-4128-b6e6-461be8bef724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:56:8a:10:ae:f8:c8:de:a8:92:b9:17:32:de: c5:a9:d3:96:d1:c9:9e:c1:80:2d:18:d1:73:fd:66: d2:bb:99:d1:72:0a:25:bb:53:76:f2:9a:22:4f:8e: f2:57:e6:a1:73:7a:8e:6a:d4:2e:9e:27:9b:5d:29: 7c:5b:8c:50:79:fe:14:be:49:8b:61:42:48:6c:2c: 83:c3:87:58:1c:32:e7:df:ed:41:74:0f:fa:4a:28: 2a:24:5c:9a:68:9b:19:d2:e0:3d:5e:a4:dc:f5:99: b2:fa:47:3f:1c:0d:ef:eb:b7:16:5c:a4:c0:42:28: e7:a5:64:c5:98:e0:d0:1a:2e:7a:99:e4:8b:ea:39: 08:fb:4e:72:a9:19:0a:b9:42:96:1e:1e:e0:ee:f7: 1e:af:19:2c:92:58:27:47:87:04:c5:30:fb:80:33: a7:fa:a3:41:72:f1:6c:db:4f:b8:f3:fd:12:98:d5: fb:0a:7b:9a:ec:42:2e:87:13:84:89:fe:71:1e:34: 48:80:cd:81:a6:77:09:69:77:28:b8:7f:38:b0:b7: bd:81:01:06:62:c3:7d:d7:25:54:b2:f8:83:a3:23: cb:d8:0e:08:70:45:2b:4c:1e:e8:8f:f3:f0:d3:17: 71:4c:d9:34:2a:cd:f1:fc:64:76:a8:32:f3:41:8e: 27:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D9:1B:97:88:00:C4:A7:56:2E:72:29:D4:A5:45:B0:BF:21:E5:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfc48a13-8ef5-3e8c-a89e-d0cca5676ba0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:60:bc:8f:9f:97:e6:4c:a1:45:f7:90:5a:a3:38:88:fc:07: 30:bc:46:5a:b0:57:27:bd:f0:f3:15:8e:7c:67:22:ad:d6:d4: 90:ab:e8:02:79:cd:05:cf:1e:c6:6a:48:54:6b:1d:23:31:f2: 2e:9f:9d:54:03:1e:1c:85:bf:6c:09:ec:a4:75:55:13:fe:5a: 10:cc:ed:27:c4:f7:57:94:f7:3b:88:fb:50:df:61:11:1f:4a: 85:a4:a1:36:bd:46:93:54:c8:54:00:9b:c2:83:86:73:24:8f: f3:68:0a:9b:b6:a8:2c:e1:25:9f:31:ab:b3:43:f4:11:ac:4a: 70:78:d3:3c:43:ef:dd:b8:27:88:cf:b6:30:08:3c:74:2d:7a: 34:fb:f1:8e:e6:2c:c4:5e:02:30:eb:bb:7c:75:6b:9e:42:7d: 2d:2f:8a:c9:a0:b8:51:66:70:8e:15:ef:5a:d1:0c:bb:58:fe: 58:b0:89:b3:20:a7:3c:a0:75:e2:6e:bf:97:e4:f9:98:55:19: 86:74:c0:2e:d9:77:e0:72:e8:b3:b6:04:ea:79:1f:de:59:b2: 08:95:0c:32:12:57:43:6f:12:89:2d:01:82:9c:cf:29:10:21: a9:24:42:d3:07:a9:b5:7f:89:14:39:ac:15:88:1b:b7:9e:c4: fe:3b:5e:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niL+L0tOCyXhLxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTc2M2VkZTktNWJlZC00MTI4LWI2ZTYtNDYxYmU4YmVmNzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1aKEK74yN6okrkXMt7FqdOW0cmewYAtGNFz /WbSu5nRcgolu1N28poiT47yV+ahc3qOatQuniebXSl8W4xQef4UvkmLYUJIbCyD w4dYHDLn3+1BdA/6SigqJFyaaJsZ0uA9XqTc9Zmy+kc/HA3v67cWXKTAQijnpWTF mODQGi56meSL6jkI+05yqRkKuUKWHh7g7vcerxksklgnR4cExTD7gDOn+qNBcvFs 20+48/0SmNX7Cnua7EIuhxOEif5xHjRIgM2BpncJaXcouH84sLe9gQEGYsN91yVU sviDoyPL2A4IcEUrTB7oj/Pw0xdxTNk0Ks3x/GR2qDLzQY4ngwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjZG5eIAMSnVi5yKdSlRbC/IeXxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2ZjNDhhMTMtOGVmNS0z ZThjLWE4OWUtZDBjY2E1Njc2YmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNgvI+fl+ZMoUX3kFqjOIj8BzC8RlqwVye98PMVjnxnIq3W1JCr6AJ5 zQXPHsZqSFRrHSMx8i6fnVQDHhyFv2wJ7KR1VRP+WhDM7SfE91eU9zuI+1DfYREf SoWkoTa9RpNUyFQAm8KDhnMkj/NoCpu2qCzhJZ8xq7ND9BGsSnB40zxD7924J4jP tjAIPHQtejT78Y7mLMReAjDru3x1a55CfS0vismguFFmcI4V71rRDLtY/liwibMg pzygdeJuv5fk+ZhVGYZ0wC7Zd+By6LO2BOp5H95ZsgiVDDISV0NvEoktAYKczykQ IakkQtMHqbV/iRQ5rBWIG7eexP47Xpo= -----END CERTIFICATE-----Generated at Wed Jul 29 03:56:25 2026 by rpki-client