$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/33f05718-5754-32b3-9d3f-e96f5e5fccd4.roa File: 33f05718-5754-32b3-9d3f-e96f5e5fccd4.roa (raw, json) Hash identifier: ZLS+udY02kz9pFUYF5/cx9e1v40yzAZtcBG+4YmKq7Y= Subject key identifier: 63:13:40:41:38:EB:B9:A4:30:94:C8:31:31:6C:1C:55:96:7F:31:EB Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE7BCC8E497E36AAFF2BF3600 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/33f05718-5754-32b3-9d3f-e96f5e5fccd4.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:c8:e4:97:e3:6a:af:f2:bf:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=f0d0bc75-a28f-4e87-bee5-2d777fbf6cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4e:48:da:53:9d:47:ca:4b:46:ad:3d:33:c4: 4b:b0:95:26:22:09:47:ac:33:5d:71:df:ef:99:2f: cb:d5:83:8b:fb:c7:b4:4a:ad:99:a7:a2:66:2d:c3: 9b:d2:b7:d4:48:c7:18:1f:00:eb:78:61:5f:88:68: 6c:d0:63:57:f5:47:24:a3:db:0e:d2:eb:79:55:f9: ea:9d:52:ef:85:16:4f:84:fe:bc:56:07:d6:45:c0: 0e:88:0f:14:1a:e0:01:30:3a:cd:aa:01:12:95:da: f4:df:9e:3d:43:e7:54:71:20:8c:46:22:b3:47:2c: 0e:f2:32:d5:9e:e2:aa:ee:e5:69:ee:11:ac:d2:09: 6e:4d:50:8a:bd:83:6b:2e:c9:ce:97:e8:30:d8:4d: 83:d6:72:90:dd:dc:74:a1:41:cd:6f:36:80:80:1b: 83:78:87:37:c9:5c:d5:72:a8:5b:b8:4a:77:f0:e6: 75:2f:43:b6:57:a3:8d:62:2f:4f:ec:47:db:b0:0c: 15:ec:d1:da:28:39:d3:9b:d7:42:3e:15:1b:c0:36: 86:90:ef:46:46:1e:6c:34:6c:6d:7c:61:38:82:15: a6:ba:6b:45:55:39:96:ab:bc:6a:f3:ef:1d:3e:5b: 58:73:ce:6f:1b:a1:df:f1:2d:0a:08:1a:f5:1a:d3: 52:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:13:40:41:38:EB:B9:A4:30:94:C8:31:31:6C:1C:55:96:7F:31:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/33f05718-5754-32b3-9d3f-e96f5e5fccd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:7a:5f:ae:5f:3e:e3:52:60:8d:b3:67:79:29:83:b9:5b:51: c8:84:8d:1c:47:d9:cb:6b:3f:72:16:81:f0:35:d7:8d:05:1f: e8:ae:4b:3f:d9:a3:08:6f:82:dc:f1:3f:8e:ab:74:25:93:bf: 23:30:db:f6:a6:56:d0:ee:04:bd:da:a3:d8:f0:82:4f:cb:f8: 42:5d:c3:72:79:7a:9c:95:12:39:60:03:b8:0c:a6:84:c3:4e: ac:1d:25:1b:ea:39:f3:de:c4:5c:20:a3:d9:b3:91:24:96:13: ae:8f:39:35:10:9a:f1:ea:00:f5:cd:0d:b0:17:8d:f8:80:3a: 23:25:43:ab:32:67:28:8a:1d:2c:ec:f5:f9:75:fb:43:df:4c: 63:45:83:24:e2:15:71:f1:13:a9:9f:cd:a2:f6:db:11:e9:8d: 6a:dd:9a:be:3e:31:ca:b2:af:e1:e0:c0:43:9a:e6:07:e6:97: 0f:f5:7a:4e:f5:76:d1:e3:82:57:d8:14:2d:be:0c:42:32:69: 7c:15:a1:e0:1b:0d:ab:20:14:8d:b5:72:bd:5e:2a:9d:75:dd: 96:49:1d:22:02:db:ec:0d:ec:17:40:d1:0a:ad:02:e9:b6:b4: 2c:a1:ba:47:09:e0:ff:33:d7:21:99:72:d6:01:e4:81:fe:7b: 24:b6:de:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvMjkl+Nqr/K/NgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk ZjBkMGJjNzUtYTI4Zi00ZTg3LWJlZTUtMmQ3NzdmYmY2Y2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU5I2lOdR8pLRq09M8RLsJUmIglHrDNdcd/v mS/L1YOL+8e0Sq2Zp6JmLcOb0rfUSMcYHwDreGFfiGhs0GNX9Ucko9sO0ut5Vfnq nVLvhRZPhP68VgfWRcAOiA8UGuABMDrNqgESldr03549Q+dUcSCMRiKzRywO8jLV nuKq7uVp7hGs0gluTVCKvYNrLsnOl+gw2E2D1nKQ3dx0oUHNbzaAgBuDeIc3yVzV cqhbuEp38OZ1L0O2V6ONYi9P7EfbsAwV7NHaKDnTm9dCPhUbwDaGkO9GRh5sNGxt fGE4ghWmumtFVTmWq7xq8+8dPltYc85vG6Hf8S0KCBr1GtNSfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMTQEE467mkMJTIMTFsHFWWfzHrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzNmMDU3MTgtNTc1NC0z MmIzLTlkM2YtZTk2ZjVlNWZjY2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJnIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIh6X65fPuNSYI2zZ3kpg7lbUciEjRxH2ctrP3IWgfA1140FH+iuSz/Z owhvgtzxP46rdCWTvyMw2/amVtDuBL3ao9jwgk/L+EJdw3J5epyVEjlgA7gMpoTD TqwdJRvqOfPexFwgo9mzkSSWE66POTUQmvHqAPXNDbAXjfiAOiMlQ6syZyiKHSzs 9fl1+0PfTGNFgyTiFXHxE6mfzaL22xHpjWrdmr4+Mcqyr+HgwEOa5gfmlw/1ek71 dtHjglfYFC2+DEIyaXwVoeAbDasgFI21cr1eKp113ZZJHSIC2+wN7BdA0QqtAum2 tCyhukcJ4P8z1yGZctYB5IH+eyS23v0= -----END CERTIFICATE-----Generated at Sat Sep 5 06:42:11 2026 by rpki-client