$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4394c957-d6d6-3969-9f1f-2829f0301cc7.roa File: 4394c957-d6d6-3969-9f1f-2829f0301cc7.roa (raw, json) Hash identifier: vHI9W+KAapbL4sIStfO95Em/xsboLK8sLGNyqQPGyRo= Subject key identifier: 58:F4:8A:97:9E:27:CD:39:65:6F:AE:2E:71:C4:43:B5:D5:2B:D8:0D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EBB11C05D64B4621D9AFA4E80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4394c957-d6d6-3969-9f1f-2829f0301cc7.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:c0:5d:64:b4:62:1d:9a:fa:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=a0f1e672-b996-4662-9cb5-7811a940145f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:43:b4:5b:42:92:dd:54:28:22:04:cb:8f:5b: a0:42:9a:fa:2b:6c:17:35:6d:e1:5a:78:39:70:ee: e7:42:53:93:76:65:89:a3:c8:3c:bd:a4:16:a2:44: 04:90:de:8e:9b:fc:77:83:b5:07:41:d5:44:aa:42: 07:80:8e:01:7a:57:41:fc:69:c1:5c:3e:9d:3e:cf: 5a:32:23:53:5f:0b:8c:77:ed:bb:2d:54:f7:d4:b5: f1:66:cb:fa:55:e5:cc:b3:87:71:9e:63:fd:2f:27: 08:be:b0:f3:a2:c6:ba:47:7d:c0:7b:4f:85:cb:b0: e4:b6:87:20:c2:2f:f4:f6:9a:d4:3a:27:10:c7:dd: 1e:f9:21:73:58:9d:58:66:87:67:45:0d:9f:00:9d: cf:03:59:ff:6b:75:57:1f:94:c9:40:48:a6:c8:86: d6:05:85:36:f3:fd:eb:15:cf:e3:e5:81:03:16:5a: 5e:1f:61:2d:e0:23:3d:59:a7:4a:cf:09:a0:ef:56: 05:fa:af:11:08:bb:f1:60:94:f6:8f:ee:9f:67:8d: 36:7f:e6:cc:53:b0:22:8e:5e:00:df:d2:b0:90:42: cb:ab:c6:21:35:dd:ae:8f:5d:ac:b0:7b:ec:c7:9b: ed:b4:fc:58:09:16:a1:50:e7:e0:e4:2e:c1:a4:1c: a1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F4:8A:97:9E:27:CD:39:65:6F:AE:2E:71:C4:43:B5:D5:2B:D8:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4394c957-d6d6-3969-9f1f-2829f0301cc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:55:d0:5c:f3:48:72:f7:b8:25:b1:7a:7b:7a:31:fb:40:09: 39:cc:2a:98:5a:64:33:e9:92:8e:09:78:40:f8:21:6a:c5:53: 60:e7:dd:7a:38:9b:51:97:70:05:98:09:3b:03:d7:d4:1d:b1: 09:59:8a:d1:bc:73:27:d3:8b:48:24:a5:8f:f6:31:50:a5:f9: ee:03:fa:f7:7d:93:2d:6a:a3:94:cd:8d:e0:95:96:d5:f1:af: 6f:ec:f9:04:a3:69:41:ea:95:29:0a:0c:3e:b0:af:06:67:60: d2:7e:30:d9:2a:8c:d9:f5:8e:bf:e8:9a:ab:a1:f5:94:f1:c8: e5:d5:ab:8c:bf:b0:7a:50:87:d1:b4:71:0d:55:09:80:c7:56: e5:0d:47:c2:83:69:1b:d5:a4:f6:9d:14:62:65:ae:73:5f:ab: 6c:ab:d9:c3:d2:1f:fd:20:eb:93:4c:dc:fe:35:1c:3e:48:10: 68:9e:ca:24:15:2d:85:cb:d3:0b:23:7e:14:e9:da:30:1d:37: 9c:c0:94:c2:2c:7d:bd:75:99:08:99:13:85:7c:41:e2:2d:51: aa:e1:13:13:99:c6:3d:37:23:14:b1:19:bd:dd:3e:3a:fc:13: 30:c3:0e:ea:e8:bb:df:7b:28:52:84:5f:69:d0:ce:ed:84:48: 1d:ff:40:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67EcBdZLRiHZr6ToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk YTBmMWU2NzItYjk5Ni00NjYyLTljYjUtNzgxMWE5NDAxNDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUO0W0KS3VQoIgTLj1ugQpr6K2wXNW3hWng5 cO7nQlOTdmWJo8g8vaQWokQEkN6Om/x3g7UHQdVEqkIHgI4BeldB/GnBXD6dPs9a MiNTXwuMd+27LVT31LXxZsv6VeXMs4dxnmP9LycIvrDzosa6R33Ae0+Fy7Dktocg wi/09prUOicQx90e+SFzWJ1YZodnRQ2fAJ3PA1n/a3VXH5TJQEimyIbWBYU28/3r Fc/j5YEDFlpeH2Et4CM9WadKzwmg71YF+q8RCLvxYJT2j+6fZ402f+bMU7Aijl4A 39KwkELLq8YhNd2uj12ssHvsx5vttPxYCRahUOfg5C7BpByh6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFj0ipeeJ805ZW+uLnHEQ7XVK9gNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDM5NGM5NTctZDZkNi0z OTY5LTlmMWYtMjgyOWYwMzAxY2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVV0FzzSHL3uCWxent6MftACTnMKphaZDPpko4JeED4IWrFU2Dn3Xo4 m1GXcAWYCTsD19QdsQlZitG8cyfTi0gkpY/2MVCl+e4D+vd9ky1qo5TNjeCVltXx r2/s+QSjaUHqlSkKDD6wrwZnYNJ+MNkqjNn1jr/omquh9ZTxyOXVq4y/sHpQh9G0 cQ1VCYDHVuUNR8KDaRvVpPadFGJlrnNfq2yr2cPSH/0g65NM3P41HD5IEGieyiQV LYXL0wsjfhTp2jAdN5zAlMIsfb11mQiZE4V8QeItUarhExOZxj03IxSxGb3dPjr8 EzDDDurou997KFKEX2nQzu2ESB3/QJo= -----END CERTIFICATE-----Generated at Sat Sep 5 06:22:54 2026 by rpki-client