$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4b0c2265-c6cc-304f-b1ab-afa0962ddec2.roa File: 4b0c2265-c6cc-304f-b1ab-afa0962ddec2.roa (raw, json) Hash identifier: cI+ZMVe9MytI7ZDDD1Oz38IejGAC/YLhRDDUQA1qIR4= Subject key identifier: C6:98:28:F7:DA:44:40:F2:45:4F:1D:E5:32:6D:60:A6:90:B1:7E:21 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE38CAD5C18D5FB3014CBA500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4b0c2265-c6cc-304f-b1ab-afa0962ddec2.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 8069 IP address blocks: 20.33.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:ad:5c:18:d5:fb:30:14:cb:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=9b65195d-0f44-4ae9-a175-65882fa9f38b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6e:13:7d:a4:8f:1a:9e:64:42:10:9f:3b:4a: 3b:28:9d:42:fe:67:f2:b9:ce:a4:aa:f3:65:9a:25: 8c:e0:13:15:fe:f3:3b:69:90:ba:11:1d:d4:0e:73: 85:ed:14:7a:ac:9a:3a:1e:b3:86:ec:4b:19:a7:4f: 9d:12:c2:9c:40:47:22:18:01:08:6a:cb:d5:0d:49: 6b:f3:4d:7d:7e:6a:9b:df:96:4b:7b:1a:8e:24:83: a2:19:99:de:0c:7b:2c:52:cb:24:2f:56:65:be:03: c6:fb:41:13:c4:69:b2:24:67:1e:15:28:8d:36:62: ff:62:60:e5:ed:ac:43:b8:97:70:a3:71:50:26:db: 2b:f2:ba:01:ca:b6:3e:46:a8:d9:9b:ba:3f:5d:4f: 76:5f:b3:74:c9:6a:09:95:51:11:30:13:5f:15:74: d1:13:ee:b9:64:b9:ef:c1:0a:4b:02:dc:3b:03:e7: 38:df:08:ec:e6:c1:aa:43:eb:f1:dd:7f:86:e2:87: 5c:94:9b:b3:21:e6:40:25:05:5a:70:3c:60:62:4d: b8:17:1a:89:c3:96:7e:b2:0f:c4:53:d7:d7:bd:05: 87:ef:2d:66:21:bf:5e:aa:61:62:98:27:82:af:fe: 77:8b:cc:4a:db:b8:db:be:54:69:2f:8a:64:a4:78: 3b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:98:28:F7:DA:44:40:F2:45:4F:1D:E5:32:6D:60:A6:90:B1:7E:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4b0c2265-c6cc-304f-b1ab-afa0962ddec2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:2a:e8:af:f9:63:78:28:86:01:28:07:03:40:49:d9:71:ae: eb:47:e5:5b:de:b2:6f:21:f0:2b:c5:fb:af:b1:29:03:4b:24: 4e:0b:da:40:08:50:f1:88:7b:ba:35:c0:01:11:78:8c:5d:b5: f6:e2:8e:7c:83:a8:2a:62:93:0d:15:ce:af:92:65:fd:07:70: 61:f3:2b:f0:7f:83:bb:08:50:d5:a9:ec:7c:e6:5c:1f:05:5f: c0:81:86:3e:99:40:6a:fb:17:08:7e:9d:a4:17:6e:d0:63:14: d4:e7:6f:81:7c:3f:08:e2:8e:02:ee:fd:22:94:3d:0f:68:b4: e4:cd:05:ea:5a:22:9c:5d:d4:e7:fc:43:e6:fb:e2:89:b5:b4: be:94:53:60:f9:76:fa:55:cf:d3:f7:36:ab:6f:0a:e6:78:f2: d5:ba:df:95:03:26:c2:5b:ca:a2:6c:8c:60:e8:83:a2:c8:77: 30:34:96:d1:fc:30:e9:3b:62:bf:f9:db:08:92:7a:83:c3:46: 20:68:22:f2:3b:95:f2:5b:dd:85:d2:92:04:3b:d2:6a:f9:1d: 8e:d7:7e:6c:9a:86:d5:f1:f2:f4:67:ce:59:29:4a:09:11:9c: 2b:38:27:ec:7a:f1:d6:74:56:d3:d7:1e:07:02:1d:06:b5:bd: b6:fc:65:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjK1cGNX7MBTLpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk OWI2NTE5NWQtMGY0NC00YWU5LWExNzUtNjU4ODJmYTlmMzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG4TfaSPGp5kQhCfO0o7KJ1C/mfyuc6kqvNl miWM4BMV/vM7aZC6ER3UDnOF7RR6rJo6HrOG7EsZp0+dEsKcQEciGAEIasvVDUlr 8019fmqb35ZLexqOJIOiGZneDHssUsskL1ZlvgPG+0ETxGmyJGceFSiNNmL/YmDl 7axDuJdwo3FQJtsr8roByrY+RqjZm7o/XU92X7N0yWoJlVERMBNfFXTRE+65ZLnv wQpLAtw7A+c43wjs5sGqQ+vx3X+G4odclJuzIeZAJQVacDxgYk24FxqJw5Z+sg/E U9fXvQWH7y1mIb9eqmFimCeCr/53i8xK27jbvlRpL4pkpHg7JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMaYKPfaREDyRU8d5TJtYKaQsX4hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGIwYzIyNjUtYzZjYy0z MDRmLWIxYWItYWZhMDk2MmRkZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwq6K/5Y3gohgEoBwNASdlxrutH5Vvesm8h8CvF+6+xKQNLJE4L2kAI UPGIe7o1wAEReIxdtfbijnyDqCpikw0Vzq+SZf0HcGHzK/B/g7sIUNWp7HzmXB8F X8CBhj6ZQGr7Fwh+naQXbtBjFNTnb4F8PwjijgLu/SKUPQ9otOTNBepaIpxd1Of8 Q+b74om1tL6UU2D5dvpVz9P3NqtvCuZ48tW635UDJsJbyqJsjGDog6LIdzA0ltH8 MOk7Yr/52wiSeoPDRiBoIvI7lfJb3YXSkgQ70mr5HY7XfmyahtXx8vRnzlkpSgkR nCs4J+x68dZ0VtPXHgcCHQa1vbb8ZdQ= -----END CERTIFICATE-----Generated at Sat Sep 5 05:23:39 2026 by rpki-client