$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d4a0852e-de74-312e-9a78-d07763f519c2.roa File: d4a0852e-de74-312e-9a78-d07763f519c2.roa (raw, json) Hash identifier: iPBd0lQc8Xs6iZ3Ol3CQSfa1UpVdPZPl2qmNhXDeFUM= Subject key identifier: 39:FB:75:10:73:A0:6C:C4:52:E2:6A:32:ED:03:93:A0:59:72:A1:CF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA788BF5732ADCA50C6A79EA0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d4a0852e-de74-312e-9a78-d07763f519c2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.33.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:bf:57:32:ad:ca:50:c6:a7:9e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=09a39813-cf89-42f1-a74d-9b87a96c1ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e0:00:4b:a3:6d:89:1d:49:e9:bb:78:b2:b0: 32:a6:a8:b3:6d:66:7a:35:50:ce:9d:db:2b:11:54: 0e:06:4c:60:35:69:7a:48:40:1a:18:6e:12:81:8e: fe:4e:97:93:da:dd:5b:35:21:e6:dd:85:b7:04:fc: b9:31:81:ad:bb:dc:c9:aa:13:2c:99:9e:1d:b1:21: 08:96:94:a8:ff:d2:92:b0:7e:8d:b7:8f:aa:80:1c: 30:43:eb:71:85:1a:c3:56:08:21:06:76:a5:58:3d: c3:55:e0:d6:a7:97:a9:10:0a:3f:e7:3d:ed:75:db: b0:e1:81:b4:4d:6f:63:6d:64:9d:3b:46:b5:fd:3c: 4b:5c:81:25:c8:2c:c5:63:f1:ab:0d:2e:f3:dc:a3: 06:b5:f5:ee:09:4e:47:a9:30:2c:f8:7e:cd:7a:65: 99:ad:5f:0b:43:c8:1a:a1:ce:67:71:d9:cc:98:6f: 75:31:0e:ac:1a:57:72:94:18:6c:62:29:38:0d:75: a9:75:e7:3d:ec:6a:5e:4b:06:82:b0:d8:20:b1:82: 81:67:8f:9a:73:1d:db:d4:31:59:cf:c3:b7:2c:48: 59:28:e8:5c:08:4b:f8:44:0e:2b:6b:b8:c6:c7:99: 3b:be:99:58:b8:7a:50:9a:29:fb:56:f3:03:47:95: a1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FB:75:10:73:A0:6C:C4:52:E2:6A:32:ED:03:93:A0:59:72:A1:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d4a0852e-de74-312e-9a78-d07763f519c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:d3:c0:19:95:19:81:7b:21:b3:43:d6:e6:2a:b4:db:01:88: 60:06:5b:f5:b0:19:a1:c8:37:62:82:1d:1f:26:e1:e1:91:cd: dd:67:67:a9:66:49:0e:1d:8c:0d:a7:b6:8d:e2:6b:33:b5:de: b7:3c:3e:7b:7b:73:2d:a7:96:de:9b:b0:96:74:26:3e:77:dd: 75:51:de:57:0d:76:92:70:c3:3f:11:1f:f2:0a:ed:1c:e0:02: 07:28:b3:52:e1:af:1d:6a:d4:83:0a:34:9e:a4:1a:ed:1f:bc: df:76:3a:42:35:dc:19:01:a7:d3:28:f6:84:99:61:56:33:18: e9:1d:34:68:e5:a6:01:f2:0b:a0:a2:6e:da:c4:9e:d6:31:44: 1c:66:39:51:21:67:9c:ee:9a:fd:8c:eb:ed:db:d0:b0:77:f7: 34:f6:b1:dc:22:8b:cb:29:03:cc:02:7d:06:e3:27:b3:23:7d: 4a:f7:8c:61:c7:b1:2e:44:7a:ec:cf:52:08:40:de:9c:dd:43: b8:9e:b7:ce:77:10:78:a3:87:1c:07:e7:27:e1:e7:11:ab:fa: 91:2d:15:47:68:1b:ac:df:03:f6:cc:c3:05:9c:d7:b8:2c:c5: b9:10:88:66:a3:7a:d0:76:cd:63:2a:b9:40:72:03:2f:4f:a4: 8c:51:16:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niL9XMq3KUMannqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDlhMzk4MTMtY2Y4OS00MmYxLWE3NGQtOWI4N2E5NmMxYWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOAAS6NtiR1J6bt4srAypqizbWZ6NVDOndsr EVQOBkxgNWl6SEAaGG4SgY7+TpeT2t1bNSHm3YW3BPy5MYGtu9zJqhMsmZ4dsSEI lpSo/9KSsH6Nt4+qgBwwQ+txhRrDVgghBnalWD3DVeDWp5epEAo/5z3tdduw4YG0 TW9jbWSdO0a1/TxLXIElyCzFY/GrDS7z3KMGtfXuCU5HqTAs+H7NemWZrV8LQ8ga oc5ncdnMmG91MQ6sGldylBhsYik4DXWpdec97GpeSwaCsNggsYKBZ4+acx3b1DFZ z8O3LEhZKOhcCEv4RA4ra7jGx5k7vplYuHpQmin7VvMDR5WhTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDn7dRBzoGzEUuJqMu0Dk6BZcqHPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDRhMDg1MmUtZGU3NC0z MTJlLTlhNzgtZDA3NzYzZjUxOWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbTwBmVGYF7IbND1uYqtNsBiGAGW/WwGaHIN2KCHR8m4eGRzd1nZ6lm SQ4djA2nto3iazO13rc8Pnt7cy2nlt6bsJZ0Jj533XVR3lcNdpJwwz8RH/IK7Rzg Agcos1Lhrx1q1IMKNJ6kGu0fvN92OkI13BkBp9Mo9oSZYVYzGOkdNGjlpgHyC6Ci btrEntYxRBxmOVEhZ5zumv2M6+3b0LB39zT2sdwii8spA8wCfQbjJ7MjfUr3jGHH sS5EeuzPUghA3pzdQ7iet853EHijhxwH5yfh5xGr+pEtFUdoG6zfA/bMwwWc17gs xbkQiGajetB2zWMquUByAy9PpIxRFuA= -----END CERTIFICATE-----Generated at Wed Jul 29 03:59:40 2026 by rpki-client