$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/20052b8d-9195-30ba-9869-f02f78771f7c.roa File: 20052b8d-9195-30ba-9869-f02f78771f7c.roa (raw, json) Hash identifier: WtfI8rcki2Cp0CzcXMBd8ErYCCo+axipydgqC+/V3go= Subject key identifier: 20:4C:DC:C3:C6:23:04:16:1D:91:5E:1D:88:54:00:62:71:B4:A8:70 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E97B50B4B5EFF2CF75DC5E180 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/20052b8d-9195-30ba-9869-f02f78771f7c.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 8069 IP address blocks: 20.33.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:0b:4b:5e:ff:2c:f7:5d:c5:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=a728f350-d88c-4580-a806-b35de6cf574f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:92:74:39:29:97:fa:8a:3a:61:20:d3:41:67: 01:b2:11:5c:b0:59:02:3e:22:11:c6:90:e0:c8:f6: cc:63:1a:4a:2d:f8:28:79:e7:d9:36:20:cd:57:47: 08:d0:e7:b9:79:3e:73:d6:95:a8:79:f5:ab:d7:04: ea:07:f8:53:9e:2a:c4:ff:ff:6e:98:e3:7f:55:55: 3b:27:c9:2e:b2:39:af:53:a5:a3:e6:08:37:f8:47: 4b:d0:2a:62:90:aa:41:a5:89:ea:a2:ec:2d:28:f6: d9:14:8a:6a:e4:d4:61:41:a5:b2:32:23:de:d4:0b: d6:37:2e:70:b2:99:87:94:2b:91:4e:fd:48:7e:de: 90:ec:49:f5:0c:b4:c7:fa:b2:a9:f5:27:e2:5b:06: 10:df:fe:db:bd:66:95:0d:1d:54:39:8c:11:83:fb: 16:c3:13:06:ad:c4:f9:e4:a2:7f:9e:f5:0b:48:45: cb:69:2d:25:64:11:e4:a5:49:e8:63:06:59:63:66: 1c:c8:91:99:3d:70:6b:a8:20:08:a4:d8:7f:b9:93: 9c:f0:cd:00:9e:9f:eb:81:16:7d:3f:f9:e0:69:65: 38:a5:65:99:d5:19:83:0d:48:9a:2b:6e:b1:80:10: 36:6f:e3:75:49:6f:3b:2c:a5:a0:58:47:dd:25:7a: f9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4C:DC:C3:C6:23:04:16:1D:91:5E:1D:88:54:00:62:71:B4:A8:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/20052b8d-9195-30ba-9869-f02f78771f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:04:e8:92:0b:ee:a3:47:2f:be:7d:9f:9b:7e:33:4d:40:7c: c9:99:5f:35:97:51:cc:c4:2a:06:fc:a7:6e:40:44:b7:8a:74: dd:8b:a6:ba:25:6e:81:7c:cf:24:bd:f9:54:48:bf:78:11:5f: f1:25:4d:19:b8:d6:79:ef:c3:c0:f8:a4:18:c2:79:d3:78:a4: b1:dd:b4:cc:1a:a2:1d:88:fa:10:e0:77:86:49:f4:40:1f:d7: c8:d8:0e:22:d4:a5:a9:c1:3d:51:6f:6f:6f:e2:67:2f:38:bd: 45:13:a6:0d:92:28:c2:b8:49:96:e7:0d:31:cb:45:da:40:a3: 09:96:26:1d:36:bd:4d:7b:c7:fd:66:11:36:2e:ee:23:5d:b5: 29:af:01:73:b5:c0:7e:9c:47:4f:1f:4b:2e:b0:b1:f8:fe:10: 05:8b:00:f6:19:d8:01:6f:c5:82:fa:1e:31:d7:00:89:fe:61: 10:f2:ef:0d:87:c1:d3:cd:9f:82:78:b7:fb:6e:bd:85:1e:82: 97:b7:a1:d9:62:c6:70:5c:98:a7:3c:29:97:34:7e:ca:1a:58: 1d:f2:98:11:7d:19:82:9e:00:6d:d3:c1:0c:1f:39:8b:91:1c: 5d:a0:df:71:90:dc:14:e1:73:ba:8b:1c:a0:d5:23:93:1e:0e: 47:1b:52:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtQtLXv8s913F4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk YTcyOGYzNTAtZDg4Yy00NTgwLWE4MDYtYjM1ZGU2Y2Y1NzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pJ0OSmX+oo6YSDTQWcBshFcsFkCPiIRxpDg yPbMYxpKLfgoeefZNiDNV0cI0Oe5eT5z1pWoefWr1wTqB/hTnirE//9umON/VVU7 J8kusjmvU6Wj5gg3+EdL0CpikKpBpYnqouwtKPbZFIpq5NRhQaWyMiPe1AvWNy5w spmHlCuRTv1Ift6Q7En1DLTH+rKp9SfiWwYQ3/7bvWaVDR1UOYwRg/sWwxMGrcT5 5KJ/nvULSEXLaS0lZBHkpUnoYwZZY2YcyJGZPXBrqCAIpNh/uZOc8M0Anp/rgRZ9 P/ngaWU4pWWZ1RmDDUiaK26xgBA2b+N1SW87LKWgWEfdJXr5KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBM3MPGIwQWHZFeHYhUAGJxtKhwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjAwNTJiOGQtOTE5NS0z MGJhLTk4NjktZjAyZjc4NzcxZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQE6JIL7qNHL759n5t+M01AfMmZXzWXUczEKgb8p25ARLeKdN2Lprol boF8zyS9+VRIv3gRX/ElTRm41nnvw8D4pBjCedN4pLHdtMwaoh2I+hDgd4ZJ9EAf 18jYDiLUpanBPVFvb2/iZy84vUUTpg2SKMK4SZbnDTHLRdpAowmWJh02vU17x/1m ETYu7iNdtSmvAXO1wH6cR08fSy6wsfj+EAWLAPYZ2AFvxYL6HjHXAIn+YRDy7w2H wdPNn4J4t/tuvYUegpe3odlixnBcmKc8KZc0fsoaWB3ymBF9GYKeAG3TwQwfOYuR HF2g33GQ3BThc7qLHKDVI5MeDkcbUog= -----END CERTIFICATE-----Generated at Fri Jul 24 14:44:29 2026 by rpki-client