$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/22285684-8ff5-3dbc-83e3-d4a60561cea7.roa File: 22285684-8ff5-3dbc-83e3-d4a60561cea7.roa (raw, json) Hash identifier: A4vimHtTKqIZUF+KIL/DxGQjXdKPdKG/XSStLCbdSpc= Subject key identifier: A7:8C:30:D5:DA:E8:6C:FA:79:62:F6:72:6D:05:29:47:DA:24:C1:BF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EC7A1D97C05B107F1850EC680 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/22285684-8ff5-3dbc-83e3-d4a60561cea7.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:d9:7c:05:b1:07:f1:85:0e:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=52350cd0-3214-4526-b098-17a608003c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:c8:b1:6d:0c:f4:4e:10:19:a7:79:50:ed:25: e1:62:30:c9:3c:14:65:ba:cb:98:8e:5b:20:3d:4c: 7d:81:d8:57:94:01:fa:c1:86:78:b4:2c:ed:64:db: f2:99:07:72:bd:ac:0d:c8:97:f5:e9:e2:a3:40:3e: f9:1e:e6:26:d8:80:72:f2:96:4b:00:38:5a:a3:17: d7:3c:42:46:34:53:c9:92:e0:30:72:3d:18:c6:81: 02:36:9f:b3:89:34:09:5e:8d:66:67:47:a2:c7:bf: c7:26:0d:22:75:23:b9:d7:66:0a:cf:12:6e:7e:87: d9:2e:63:a0:df:d7:09:66:f2:e0:08:32:98:59:7a: 6d:41:79:33:73:d9:fa:10:7b:71:da:45:32:e2:d8: c0:bd:7b:55:5c:a0:a3:1c:99:2e:a7:fa:a6:14:45: 94:5c:ee:f0:86:56:97:50:78:b0:12:04:2b:be:08: eb:3d:8d:1d:23:fa:38:73:fc:80:d1:bf:42:76:c9: 86:0d:55:f8:af:79:d5:35:3a:de:14:2d:2f:aa:33: 66:96:75:80:8f:33:73:2c:50:83:48:18:0d:76:c5: b2:bb:8a:72:9f:b8:1d:d6:a2:60:88:81:69:08:3a: 3c:70:c4:de:bf:b7:05:cc:ab:76:d5:df:52:2d:c8: db:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8C:30:D5:DA:E8:6C:FA:79:62:F6:72:6D:05:29:47:DA:24:C1:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/22285684-8ff5-3dbc-83e3-d4a60561cea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:40:59:c7:08:ac:66:06:d9:52:73:5e:2d:e2:c9:07:06:dc: 21:af:eb:2a:44:77:5f:e2:c1:e3:6a:5d:20:97:4d:c4:c1:f1: ed:56:89:ec:8f:80:fc:03:94:db:0c:a3:d4:4e:20:8d:40:61: 29:80:86:b4:5e:ee:07:b0:b7:0e:b3:c0:6c:37:bc:4b:eb:61: 2b:f7:84:69:36:80:0a:86:23:27:7b:1a:4a:3e:5d:59:6d:b0: 9f:1a:cd:4b:51:cd:e6:0a:aa:e5:ea:0a:fb:c9:84:f1:77:1a: ea:cf:21:d8:e0:68:4e:a8:ec:39:7a:d3:b2:a0:4a:de:f3:f5: d7:47:d3:71:e1:ea:6d:be:ae:67:4f:37:0b:20:62:b5:96:46: 77:a5:b2:2d:47:e0:5d:2a:32:b1:a5:8c:f0:ef:a8:14:3c:8a: e2:1c:34:7f:9e:fe:1d:b3:64:09:d1:b8:1d:12:33:a4:1a:e5: 3c:d9:ac:61:9b:c6:1a:7a:3d:22:fc:49:0b:42:e6:1f:71:47: a8:04:cf:50:37:c0:54:f0:06:06:7e:4f:67:41:a5:2d:7d:54: 92:42:67:2c:6c:3b:f0:af:ab:f8:04:c6:f6:d5:48:19:06:2d: a4:db:c7:09:33:a4:e2:f7:29:d8:c4:54:4c:a1:b4:88:45:49: 65:d4:43:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Hodl8BbEH8YUOxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk NTIzNTBjZDAtMzIxNC00NTI2LWIwOTgtMTdhNjA4MDAzYzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+8ixbQz0ThAZp3lQ7SXhYjDJPBRlusuYjlsg PUx9gdhXlAH6wYZ4tCztZNvymQdyvawNyJf16eKjQD75HuYm2IBy8pZLADhaoxfX PEJGNFPJkuAwcj0YxoECNp+ziTQJXo1mZ0eix7/HJg0idSO512YKzxJufofZLmOg 39cJZvLgCDKYWXptQXkzc9n6EHtx2kUy4tjAvXtVXKCjHJkup/qmFEWUXO7whlaX UHiwEgQrvgjrPY0dI/o4c/yA0b9CdsmGDVX4r3nVNTreFC0vqjNmlnWAjzNzLFCD SBgNdsWyu4pyn7gd1qJgiIFpCDo8cMTev7cFzKt21d9SLcjbbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKeMMNXa6Gz6eWL2cm0FKUfaJMG/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjIyODU2ODQtOGZmNS0z ZGJjLTgzZTMtZDRhNjA1NjFjZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxAWccIrGYG2VJzXi3iyQcG3CGv6ypEd1/iweNqXSCXTcTB8e1WieyP gPwDlNsMo9ROII1AYSmAhrRe7gewtw6zwGw3vEvrYSv3hGk2gAqGIyd7Gko+XVlt sJ8azUtRzeYKquXqCvvJhPF3GurPIdjgaE6o7Dl607KgSt7z9ddH03Hh6m2+rmdP NwsgYrWWRnelsi1H4F0qMrGljPDvqBQ8iuIcNH+e/h2zZAnRuB0SM6Qa5TzZrGGb xhp6PSL8SQtC5h9xR6gEz1A3wFTwBgZ+T2dBpS19VJJCZyxsO/Cvq/gExvbVSBkG LaTbxwkzpOL3KdjEVEyhtIhFSWXUQ7s= -----END CERTIFICATE-----Generated at Sat Sep 5 07:15:42 2026 by rpki-client