$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/139a9492-65e1-3f75-ab00-d84e01d973d7.roa File: 139a9492-65e1-3f75-ab00-d84e01d973d7.roa (raw, json) Hash identifier: S08ePaUv2txHtt7/YNvXp8nwyNbAFB8jLOHVJLqUNW8= Subject key identifier: F1:D6:3B:3C:77:A6:CE:4B:0A:39:9D:E4:84:E0:43:AE:C8:19:94:04 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EC7A1D99238FA06FC6CF29680 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/139a9492-65e1-3f75-ab00-d84e01d973d7.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:d9:92:38:fa:06:fc:6c:f2:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=47f5b164-2c03-48f6-89e7-15b1d689b91d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:50:77:81:ea:c1:e9:fa:d6:7c:ba:b9:45:45: 9d:79:21:26:81:99:ee:8c:13:f0:61:bd:0e:c9:6b: 86:64:47:85:28:50:c1:ab:18:9f:d8:0a:4d:0a:13: 3f:87:d2:18:28:1b:9c:4e:a4:74:bb:91:31:3b:25: ed:69:1e:1b:df:79:56:d5:c6:04:b3:c1:57:ac:c0: 33:cc:77:5e:e1:b2:dd:d2:a9:b1:9f:63:9e:5a:88: f5:f3:27:0f:26:b9:3b:d9:f5:70:50:62:ad:d2:8e: d9:6c:57:08:8b:ab:ee:0e:a3:26:ee:af:c6:9c:c4: ab:f3:13:cd:38:67:19:87:a2:e4:bf:56:a8:0d:ea: a0:27:11:90:29:79:dd:c5:22:7f:c7:62:8c:14:57: db:dc:04:c2:79:52:10:9a:cb:82:3c:15:15:68:94: b1:ec:76:b3:66:97:bd:c8:99:38:9e:b4:70:15:08: e9:b8:be:d1:a3:bb:42:b6:43:2c:4d:91:ee:e3:7a: 3f:80:8c:48:18:a3:49:5d:01:6b:e8:1f:f3:1d:3e: 46:3c:9b:cb:1d:a6:57:19:f9:7d:66:23:1f:82:02: 55:2c:e9:dc:d2:a6:ac:95:c3:ea:f2:5a:24:e2:d1: d8:5d:2b:e2:0b:6b:55:d4:ce:c9:dd:9d:08:32:6d: a9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D6:3B:3C:77:A6:CE:4B:0A:39:9D:E4:84:E0:43:AE:C8:19:94:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/139a9492-65e1-3f75-ab00-d84e01d973d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:fd:e6:6b:6c:c7:e4:05:ee:92:79:8a:f1:4d:28:92:37:a1: 64:db:e1:26:16:7f:c6:03:a9:c5:f4:15:04:5f:d9:6e:f9:37: cb:23:9a:ae:4f:37:71:03:bc:f4:7c:84:8b:82:b5:fc:a2:21: a2:9b:8a:ff:dc:12:60:59:b4:cc:da:f9:09:7b:e7:f3:3f:6b: 9a:b1:19:5a:12:19:62:bf:b2:a6:f9:75:9e:d1:62:72:85:94: b5:13:22:6e:77:ef:1b:12:33:a8:f9:27:b7:40:bc:a2:87:16: d7:06:0d:b1:56:13:a9:38:81:89:1d:72:89:d7:a8:31:05:c6: 3c:53:b5:08:db:93:ae:13:e7:65:6a:4f:87:7e:a6:02:88:ac: db:ee:74:47:9d:b2:10:7c:fe:f3:fa:ec:8e:e9:92:a8:95:bc: b4:0a:51:42:d5:4c:f3:ae:4e:48:5d:26:e8:c1:58:87:12:9d: 1c:dd:fd:5b:b8:8f:08:cf:0b:5b:96:12:ee:d8:8f:e6:a5:89: 97:ca:ea:05:ef:0e:09:15:3d:1d:f1:21:dd:0c:47:a1:e9:f0: 0f:1a:4e:a7:8d:18:9e:9e:8b:4d:70:23:ac:0d:c4:86:a6:fc: d6:ec:8c:ba:23:bc:91:e7:d5:d7:89:d4:d7:91:06:63:1f:57: 9c:07:6a:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HodmSOPoG/GzyloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk NDdmNWIxNjQtMmMwMy00OGY2LTg5ZTctMTViMWQ2ODliOTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlB3gerB6frWfLq5RUWdeSEmgZnujBPwYb0O yWuGZEeFKFDBqxif2ApNChM/h9IYKBucTqR0u5ExOyXtaR4b33lW1cYEs8FXrMAz zHde4bLd0qmxn2OeWoj18ycPJrk72fVwUGKt0o7ZbFcIi6vuDqMm7q/GnMSr8xPN OGcZh6Lkv1aoDeqgJxGQKXndxSJ/x2KMFFfb3ATCeVIQmsuCPBUVaJSx7HazZpe9 yJk4nrRwFQjpuL7Ro7tCtkMsTZHu43o/gIxIGKNJXQFr6B/zHT5GPJvLHaZXGfl9 ZiMfggJVLOnc0qaslcPq8lok4tHYXSviC2tV1M7J3Z0IMm2pMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHWOzx3ps5LCjmd5ITgQ67IGZQEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTM5YTk0OTItNjVlMS0z Zjc1LWFiMDAtZDg0ZTAxZDk3M2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACf95mtsx+QF7pJ5ivFNKJI3oWTb4SYWf8YDqcX0FQRf2W75N8sjmq5P N3EDvPR8hIuCtfyiIaKbiv/cEmBZtMza+Ql75/M/a5qxGVoSGWK/sqb5dZ7RYnKF lLUTIm537xsSM6j5J7dAvKKHFtcGDbFWE6k4gYkdconXqDEFxjxTtQjbk64T52Vq T4d+pgKIrNvudEedshB8/vP67I7pkqiVvLQKUULVTPOuTkhdJujBWIcSnRzd/Vu4 jwjPC1uWEu7Yj+aliZfK6gXvDgkVPR3xId0MR6Hp8A8aTqeNGJ6ei01wI6wNxIam /NbsjLojvJHn1deJ1NeRBmMfV5wHanA= -----END CERTIFICATE-----Generated at Sat Sep 5 06:50:41 2026 by rpki-client