$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14c71dae-6e19-3c93-9f11-94b8dad2435d.roa File: 14c71dae-6e19-3c93-9f11-94b8dad2435d.roa (raw, json) Hash identifier: UzbRwhYmpRzN+CZS3JB031OQ2CydP+KR1lwNZvqDo9Q= Subject key identifier: 80:F3:B6:0D:B0:20:7D:03:05:FA:D2:E3:5F:6E:0C:34:F6:8A:F5:70 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE38CACEFAFC01CB9FA632A80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14c71dae-6e19-3c93-9f11-94b8dad2435d.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 8069 IP address blocks: 20.33.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:ac:ef:af:c0:1c:b9:fa:63:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=e7744d9f-68be-4849-a118-cb69e1b7af93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a0:55:63:f1:4e:37:49:a5:7d:35:00:e1:49: b8:87:20:44:1f:13:f1:17:06:63:25:b6:84:63:9b: 2b:30:32:04:ee:71:2a:2b:b3:42:1c:21:9a:94:0b: 20:5d:d3:82:cc:ba:44:e6:3e:98:a2:50:c2:32:bf: 6f:e2:e1:95:c2:ae:b9:9a:83:9d:b3:90:ae:a9:d3: 66:7a:28:8f:1b:da:de:f0:f8:49:2d:6d:8d:1b:88: 11:d1:4d:76:28:66:88:52:12:4d:f9:ab:7a:1f:9a: f3:cf:64:2c:c2:82:0b:80:94:bd:ee:66:8a:4d:fe: 4c:2b:2e:96:21:ab:3f:de:19:ec:ca:2a:e0:23:dd: ea:da:b8:81:8e:44:3a:b8:ce:86:93:c8:8d:b8:0e: f7:7a:ec:f3:88:0d:8d:f6:0a:85:dc:f9:7e:56:20: 61:00:2b:e0:08:44:d5:0b:6d:81:b5:74:9c:8c:ce: ff:e6:ad:5f:61:fd:88:e7:eb:75:fc:b0:df:86:22: 01:36:20:1a:d0:af:bc:57:36:d2:a1:ce:6d:de:8e: ed:2d:14:04:00:ab:69:d2:ff:4a:27:91:65:39:51: 54:a8:ea:92:70:e7:f4:06:d6:b8:0f:f2:57:64:19: d9:e4:e5:ff:bf:d6:bc:6e:5d:90:95:20:96:81:6b: bd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F3:B6:0D:B0:20:7D:03:05:FA:D2:E3:5F:6E:0C:34:F6:8A:F5:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14c71dae-6e19-3c93-9f11-94b8dad2435d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:65:c0:4a:54:88:f4:4a:74:5d:7e:cd:30:1b:bd:b6:e3:18: 78:5a:6c:1d:7c:75:d3:0a:2b:a2:8a:e6:46:a6:7b:3b:d4:97: c1:2e:01:fe:14:06:3e:cf:29:fc:81:8d:f3:ff:e6:37:08:87: ac:1c:ce:87:bb:2f:8a:59:ce:5f:81:eb:07:ad:c3:cc:79:62: d8:6f:5e:05:34:84:e3:da:8d:9f:e5:7c:a9:3b:13:de:83:c9: 14:f3:57:15:a9:45:6e:33:46:b8:18:8d:8a:08:b3:f8:1f:f5: 01:62:13:a4:0a:8a:08:5a:7f:12:c9:9c:d6:c7:94:d7:40:1b: f7:8d:83:fc:af:08:8e:d5:26:8d:5d:76:d7:89:43:d5:6b:01: df:bc:03:22:67:45:96:d1:06:4e:cb:fe:83:6a:57:2a:89:f3: 3e:22:83:9c:e2:18:85:f4:cb:98:09:3a:8a:17:2a:a3:86:ef: 60:df:b3:82:68:c3:9c:67:00:aa:21:02:2d:be:dd:e2:62:40: f2:c8:1b:0b:10:6c:cd:7a:fd:a8:78:ab:ad:2f:25:d4:41:ea: 71:51:9b:20:90:6d:ed:45:6c:44:9c:3d:cd:28:3d:58:dd:0f: 39:6b:db:ce:7c:4f:c3:03:87:ca:93:11:26:22:1d:2e:f4:33: 68:57:99:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjKzvr8AcufpjKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk ZTc3NDRkOWYtNjhiZS00ODQ5LWExMTgtY2I2OWUxYjdhZjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56BVY/FON0mlfTUA4Um4hyBEHxPxFwZjJbaE Y5srMDIE7nEqK7NCHCGalAsgXdOCzLpE5j6YolDCMr9v4uGVwq65moOds5CuqdNm eiiPG9re8PhJLW2NG4gR0U12KGaIUhJN+at6H5rzz2QswoILgJS97maKTf5MKy6W Ias/3hnsyirgI93q2riBjkQ6uM6Gk8iNuA73euzziA2N9gqF3Pl+ViBhACvgCETV C22BtXScjM7/5q1fYf2I5+t1/LDfhiIBNiAa0K+8VzbSoc5t3o7tLRQEAKtp0v9K J5FlOVFUqOqScOf0Bta4D/JXZBnZ5OX/v9a8bl2QlSCWgWu9nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDztg2wIH0DBfrS419uDDT2ivVwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTRjNzFkYWUtNmUxOS0z YzkzLTlmMTEtOTRiOGRhZDI0MzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVlwEpUiPRKdF1+zTAbvbbjGHhabB18ddMKK6KK5kamezvUl8EuAf4U Bj7PKfyBjfP/5jcIh6wczoe7L4pZzl+B6wetw8x5YthvXgU0hOPajZ/lfKk7E96D yRTzVxWpRW4zRrgYjYoIs/gf9QFiE6QKighafxLJnNbHlNdAG/eNg/yvCI7VJo1d dteJQ9VrAd+8AyJnRZbRBk7L/oNqVyqJ8z4ig5ziGIX0y5gJOooXKqOG72Dfs4Jo w5xnAKohAi2+3eJiQPLIGwsQbM16/ah4q60vJdRB6nFRmyCQbe1FbEScPc0oPVjd Dzlr2858T8MDh8qTESYiHS70M2hXmTk= -----END CERTIFICATE-----Generated at Sat Sep 5 05:02:54 2026 by rpki-client