$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01affdc8-cfde-39b2-92d1-54dc8e367c0e.roa File: 01affdc8-cfde-39b2-92d1-54dc8e367c0e.roa (raw, json) Hash identifier: TQc55/N8AqKmZpsr3A+XMPuqhiUv0zF/LcatNdXBsvo= Subject key identifier: 5B:DF:F9:24:2D:E1:77:37:08:B3:A6:84:4F:E9:69:1B:13:C1:2A:C6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EC7A1D94201FE9E5E90C48500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01affdc8-cfde-39b2-92d1-54dc8e367c0e.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:d9:42:01:fe:9e:5e:90:c4:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=c1eaa5cf-2e5b-49ca-ba4b-a60e846c1894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bf:e0:60:eb:fc:1a:2f:95:77:3e:4d:52:7d: d5:84:24:8e:2b:db:ad:12:00:a1:57:78:e1:ec:7c: 75:20:5c:91:14:4e:25:7e:8f:3e:47:3f:6e:76:41: f1:f1:79:8f:5e:71:0b:7c:5f:a7:6c:3b:0f:c2:33: 37:24:b1:c0:46:69:e2:8e:0e:05:c2:65:e0:ac:51: d2:c1:50:eb:4c:9e:94:c0:d0:cb:26:bf:e9:c1:73: 83:4d:0d:65:dc:19:df:6c:b2:fa:8b:12:1b:4a:34: ca:db:68:ed:72:cb:13:b6:87:fe:dd:c0:94:1c:1a: 9f:f7:fe:22:a9:3d:73:88:3a:58:83:ea:d3:d3:5f: f2:8d:f8:e5:da:d7:11:82:5b:8a:0d:f0:4f:1f:95: b4:3b:46:72:db:1d:08:1c:bf:23:ab:af:d9:35:a7: ca:b4:cf:16:ca:34:3d:91:86:2c:10:30:a3:09:f4: 47:2f:8d:45:e8:d8:cd:fc:9c:39:4b:f5:b5:1b:be: 78:6a:1e:48:6c:0a:be:41:3b:d5:8f:88:8b:b7:f2: 06:45:10:5b:71:89:89:27:7e:d0:4e:d8:78:c3:1b: eb:af:68:a4:30:54:ed:a7:c4:26:83:37:fd:3a:dd: 15:ff:e4:48:bd:3b:c5:ee:dc:c7:8a:8d:47:cb:f3: 54:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DF:F9:24:2D:E1:77:37:08:B3:A6:84:4F:E9:69:1B:13:C1:2A:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01affdc8-cfde-39b2-92d1-54dc8e367c0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:a4:94:3c:7c:a1:52:82:8f:f6:b4:b7:2a:4f:b3:44:c1:54: 0e:d5:2e:d7:0b:dc:db:24:11:a4:6c:99:72:22:d3:6f:b3:df: 7b:3d:dc:0c:fd:e0:90:ba:71:e4:1c:c6:54:2b:af:2e:a7:53: 6b:a7:82:3b:af:39:1e:58:4f:89:48:55:bb:7f:a7:25:f8:50: 6d:3e:2e:38:34:f0:fc:11:30:d8:10:30:5e:e3:ae:48:ab:09: 98:a8:ac:4c:0a:7b:7d:89:71:3a:d9:aa:21:b1:8c:3f:7c:e2: b3:36:c1:88:e5:ef:33:cf:a7:94:7b:a4:66:c5:81:af:e3:72: c9:67:37:ad:9b:2a:f7:9f:2e:e1:05:2b:d3:5b:69:68:53:d6: 75:43:82:06:0d:8c:93:bc:57:89:a4:1c:71:3d:3b:c6:2b:b7: d1:16:33:84:8e:98:6c:81:e1:d4:42:44:ed:50:8f:7b:2b:69: e0:70:f3:74:14:f2:df:fa:01:bc:e4:f4:0a:24:d4:c0:cc:03: 09:92:ff:1c:3e:61:3a:f7:db:68:af:6d:41:b5:16:98:f3:1a: c7:03:68:c7:6a:cb:2a:0b:22:b0:7f:11:62:48:b2:80:d3:ab: 52:90:5a:c8:6d:45:bd:57:c1:5d:e9:0f:aa:30:99:26:01:31: 58:a6:ee:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HodlCAf6eXpDEhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk YzFlYWE1Y2YtMmU1Yi00OWNhLWJhNGItYTYwZTg0NmMxODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1r/gYOv8Gi+Vdz5NUn3VhCSOK9utEgChV3jh 7Hx1IFyRFE4lfo8+Rz9udkHx8XmPXnELfF+nbDsPwjM3JLHARmnijg4FwmXgrFHS wVDrTJ6UwNDLJr/pwXODTQ1l3BnfbLL6ixIbSjTK22jtcssTtof+3cCUHBqf9/4i qT1ziDpYg+rT01/yjfjl2tcRgluKDfBPH5W0O0Zy2x0IHL8jq6/ZNafKtM8WyjQ9 kYYsEDCjCfRHL41F6NjN/Jw5S/W1G754ah5IbAq+QTvVj4iLt/IGRRBbcYmJJ37Q Tth4wxvrr2ikMFTtp8Qmgzf9Ot0V/+RIvTvF7tzHio1Hy/NUpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvf+SQt4Xc3CLOmhE/paRsTwSrGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDFhZmZkYzgtY2ZkZS0z OWIyLTkyZDEtNTRkYzhlMzY3YzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOklDx8oVKCj/a0typPs0TBVA7VLtcL3NskEaRsmXIi02+z33s93Az9 4JC6ceQcxlQrry6nU2ungjuvOR5YT4lIVbt/pyX4UG0+Ljg08PwRMNgQMF7jrkir CZiorEwKe32JcTrZqiGxjD984rM2wYjl7zPPp5R7pGbFga/jcslnN62bKvefLuEF K9NbaWhT1nVDggYNjJO8V4mkHHE9O8Yrt9EWM4SOmGyB4dRCRO1Qj3sraeBw83QU 8t/6Abzk9Aok1MDMAwmS/xw+YTr322ivbUG1FpjzGscDaMdqyyoLIrB/EWJIsoDT q1KQWshtRb1XwV3pD6owmSYBMVim7tE= -----END CERTIFICATE-----Generated at Sat Sep 5 06:03:33 2026 by rpki-client