$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e569e8-37ad-3469-895e-315f10771e8c.roa File: f5e569e8-37ad-3469-895e-315f10771e8c.roa (raw, json) Hash identifier: jO3gGGyLlYREaX/FlCGF0V7OyCV2wGFVezXTazraEOs= Subject key identifier: 32:16:A3:A9:B3:A0:DB:1D:3C:E3:15:D3:91:D0:73:8E:31:2B:21:50 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA7928A45B3020A5272323740 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e569e8-37ad-3469-895e-315f10771e8c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.33.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:8a:45:b3:02:0a:52:72:32:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3f574e52-9d74-423f-b53f-eae9de4b4300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c6:dd:a5:93:37:52:6d:59:72:18:be:91:a6: 49:e6:c2:e3:7a:a7:c9:23:40:e4:df:b7:c9:dc:70: f3:90:c0:6c:69:7b:7d:6f:9e:df:aa:9d:91:e4:c6: 6c:9a:76:89:12:d7:54:61:d0:80:3f:e7:a6:f4:f4: 87:15:8f:23:ae:5b:b7:3f:b0:ab:13:6b:c9:a4:b3: 66:b8:44:1f:a1:3b:6e:e0:bf:05:83:7d:2a:a8:4c: 84:e4:c9:14:81:28:2e:1d:62:92:bc:19:29:9c:bf: 57:05:c0:db:25:3a:30:6b:d8:ab:85:ac:73:a6:db: 54:b4:dc:c3:93:13:65:74:0f:84:14:28:1f:0c:68: 19:04:b8:77:99:cf:ff:13:2f:22:7c:99:41:19:59: b5:ce:d5:d3:fe:85:2e:97:58:07:d2:6f:33:6f:6b: 39:2d:04:da:25:1b:93:c5:31:f7:74:3f:3c:c6:c6: c9:5b:1b:d8:8c:9d:a5:9e:59:cc:a5:43:8b:d3:7a: 33:a4:7d:2c:c3:9f:01:f7:91:e9:2f:ec:25:77:a9: 91:bf:8e:82:0c:7b:96:6d:ca:cd:95:d9:03:0a:cd: 62:25:a4:98:4f:e9:6a:ef:a2:51:25:15:9e:38:b1: 18:1e:56:f3:aa:a5:ca:45:c6:c9:80:8d:21:81:91: 74:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:16:A3:A9:B3:A0:DB:1D:3C:E3:15:D3:91:D0:73:8E:31:2B:21:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e569e8-37ad-3469-895e-315f10771e8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:3c:9c:4b:24:5c:32:fd:8a:20:12:73:33:82:b3:2f:77:27: 06:17:27:24:5e:81:4b:0d:0b:d8:78:93:d6:26:16:f7:ea:eb: 2a:da:3e:69:68:3a:48:75:f8:20:55:7b:57:b9:91:46:c6:e9: d5:10:bf:de:e0:a8:e4:33:39:7c:50:55:b9:d7:95:40:0e:a2: 63:cc:48:42:f7:2f:26:b2:7f:c4:52:52:0b:40:5f:32:3a:25: 92:47:a3:ba:1c:bb:cf:68:41:0b:a5:89:18:98:28:41:20:62: 97:dd:d8:14:43:3a:4d:24:df:5d:96:42:5a:e9:a2:88:14:07: 38:a5:82:c8:99:8a:32:1d:78:0d:d7:8a:3a:c7:86:dc:f1:5c: b8:54:b1:db:05:15:96:35:45:cd:59:00:cc:eb:ea:cb:5e:68: c6:5b:fd:6f:e0:d5:8e:87:a2:08:15:44:16:f3:0a:0c:34:47: 9f:dd:1b:c4:2c:4e:f4:dc:42:02:ae:9b:be:22:b1:3b:11:6a: 9d:2b:33:a1:01:1d:72:0c:26:b9:69:30:a4:e8:da:7e:7b:cc: 2f:98:26:ca:bf:90:9f:2e:69:4a:6b:3f:d6:38:ae:00:47:58: 03:9a:ba:5a:15:57:14:3f:9e:d1:00:2b:c5:bb:08:30:75:f8: 5f:4e:e9:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkopFswIKUnIyN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2Y1NzRlNTItOWQ3NC00MjNmLWI1M2YtZWFlOWRlNGI0MzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8bdpZM3Um1Zchi+kaZJ5sLjeqfJI0Dk37fJ 3HDzkMBsaXt9b57fqp2R5MZsmnaJEtdUYdCAP+em9PSHFY8jrlu3P7CrE2vJpLNm uEQfoTtu4L8Fg30qqEyE5MkUgSguHWKSvBkpnL9XBcDbJTowa9irhaxzpttUtNzD kxNldA+EFCgfDGgZBLh3mc//Ey8ifJlBGVm1ztXT/oUul1gH0m8zb2s5LQTaJRuT xTH3dD88xsbJWxvYjJ2lnlnMpUOL03ozpH0sw58B95HpL+wld6mRv46CDHuWbcrN ldkDCs1iJaSYT+lq76JRJRWeOLEYHlbzqqXKRcbJgI0hgZF0UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIWo6mzoNsdPOMV05HQc44xKyFQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjVlNTY5ZTgtMzdhZC0z NDY5LTg5NWUtMzE1ZjEwNzcxZThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKo8nEskXDL9iiASczOCsy93JwYXJyRegUsNC9h4k9YmFvfq6yraPmlo Okh1+CBVe1e5kUbG6dUQv97gqOQzOXxQVbnXlUAOomPMSEL3Lyayf8RSUgtAXzI6 JZJHo7ocu89oQQuliRiYKEEgYpfd2BRDOk0k312WQlrpoogUBzilgsiZijIdeA3X ijrHhtzxXLhUsdsFFZY1Rc1ZAMzr6steaMZb/W/g1Y6HoggVRBbzCgw0R5/dG8Qs TvTcQgKum74isTsRap0rM6EBHXIMJrlpMKTo2n57zC+YJsq/kJ8uaUprP9Y4rgBH WAOauloVVxQ/ntEAK8W7CDB1+F9O6T0= -----END CERTIFICATE-----Generated at Wed Jul 29 05:16:48 2026 by rpki-client