$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4eb720e4-01b2-3f16-8642-849e970123c0.roa File: 4eb720e4-01b2-3f16-8642-849e970123c0.roa (raw, json) Hash identifier: OROHyKKrviXCNRo8SCzTrSJ89fu69f9wMuLAFrLqIuA= Subject key identifier: 45:DE:26:A9:BE:B8:B1:5B:5B:79:6A:B4:85:B6:04:FE:E5:64:95:02 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EC7A1D91EC21B2D96B56A39C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4eb720e4-01b2-3f16-8642-849e970123c0.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:d9:1e:c2:1b:2d:96:b5:6a:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=963dd24c-0a10-46bf-85e4-98aca6862780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:23:0a:c4:c4:6c:5b:10:48:56:fb:7f:b5:64: e5:3f:91:b0:87:9a:d4:34:3a:dd:9b:01:f8:8a:6c: 03:f4:83:69:1a:6e:ea:78:60:90:d7:36:c3:e6:7b: b8:17:d5:23:94:19:1a:4c:be:e9:ee:7b:cd:35:5c: ea:2d:56:68:ce:77:db:da:6d:0d:aa:7e:b5:41:d9: fe:63:fa:d5:c4:a7:f4:b5:28:50:7a:dc:fb:b6:cd: f2:04:9c:f9:07:79:c9:3f:ea:68:a6:d2:7e:77:e9: 53:58:1f:db:c8:5f:95:5d:01:f2:d1:63:dc:23:e0: 9b:51:91:9c:2c:82:1d:a3:9b:a5:71:d4:1d:9b:65: 4e:98:0d:3b:43:c5:12:e9:e5:a3:ff:8c:06:d0:f5: 32:d9:aa:9b:3f:d3:46:5f:22:a7:db:3f:fe:7d:81: a5:b0:56:d8:fd:0a:13:c3:ad:10:e5:f4:07:69:42: 22:d2:fb:cc:bc:d3:72:42:a4:c4:4c:a4:7f:71:a0: c3:d8:67:99:0c:7e:aa:29:7d:f1:fc:65:72:eb:13: 57:a6:63:67:2f:b7:94:ec:4b:e8:10:b9:ff:56:b1: 9e:06:bb:b6:13:d0:64:71:14:0c:40:93:ac:77:1c: ee:a6:c4:b6:d7:00:78:28:c2:b2:01:d1:f4:02:0e: 60:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DE:26:A9:BE:B8:B1:5B:5B:79:6A:B4:85:B6:04:FE:E5:64:95:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4eb720e4-01b2-3f16-8642-849e970123c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:87:bd:a6:11:e7:9f:ef:ba:8b:51:73:8a:8e:c6:e1:df:b8: a2:2c:a5:2c:39:4a:29:0f:42:40:16:10:40:70:e1:62:a7:bc: a4:14:d1:74:1c:d2:61:4b:1b:4c:68:d5:e3:47:bb:99:ce:58: 3c:34:2b:af:d9:9c:45:79:45:d8:79:1c:fe:cd:1b:5e:33:8c: da:87:cd:b8:06:99:39:68:9e:84:15:1f:4b:ce:1f:bb:9e:9e: d9:3f:bd:55:81:05:89:6a:c9:0b:4d:0a:3a:c4:43:5e:22:b6: 2b:56:1c:b6:23:ad:74:45:36:28:ee:2d:fb:bd:39:07:9b:aa: 7f:eb:a4:21:c9:ec:12:35:d3:1e:50:0c:3d:0c:f0:e3:10:da: 08:0b:96:b1:d3:59:d9:7e:d0:ec:23:8e:bb:a9:e7:66:12:8b: 90:c0:59:b6:aa:60:d5:69:28:d1:78:b0:94:7d:78:eb:de:a0: 70:c3:93:94:ef:05:62:86:85:43:3b:fc:17:0b:83:8b:52:fd: 53:9a:cb:e6:c3:a8:5d:de:47:43:b2:45:25:b6:44:71:fb:aa: 32:4b:cb:dc:25:3b:e2:33:be:86:63:23:b5:13:0b:d9:2a:3b: 42:6f:74:47:b8:39:8e:ca:05:be:56:bc:3a:84:14:a1:7e:47: 3b:3b:49:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HodkewhstlrVqOcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk OTYzZGQyNGMtMGExMC00NmJmLTg1ZTQtOThhY2E2ODYyNzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviMKxMRsWxBIVvt/tWTlP5Gwh5rUNDrdmwH4 imwD9INpGm7qeGCQ1zbD5nu4F9UjlBkaTL7p7nvNNVzqLVZoznfb2m0Nqn61Qdn+ Y/rVxKf0tShQetz7ts3yBJz5B3nJP+poptJ+d+lTWB/byF+VXQHy0WPcI+CbUZGc LIIdo5ulcdQdm2VOmA07Q8US6eWj/4wG0PUy2aqbP9NGXyKn2z/+fYGlsFbY/QoT w60Q5fQHaUIi0vvMvNNyQqTETKR/caDD2GeZDH6qKX3x/GVy6xNXpmNnL7eU7Evo ELn/VrGeBru2E9BkcRQMQJOsdxzupsS21wB4KMKyAdH0Ag5gvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXeJqm+uLFbW3lqtIW2BP7lZJUCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGViNzIwZTQtMDFiMi0z ZjE2LTg2NDItODQ5ZTk3MDEyM2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKHvaYR55/vuotRc4qOxuHfuKIspSw5SikPQkAWEEBw4WKnvKQU0XQc 0mFLG0xo1eNHu5nOWDw0K6/ZnEV5Rdh5HP7NG14zjNqHzbgGmTlonoQVH0vOH7ue ntk/vVWBBYlqyQtNCjrEQ14ititWHLYjrXRFNijuLfu9OQebqn/rpCHJ7BI10x5Q DD0M8OMQ2ggLlrHTWdl+0Owjjrup52YSi5DAWbaqYNVpKNF4sJR9eOveoHDDk5Tv BWKGhUM7/BcLg4tS/VOay+bDqF3eR0OyRSW2RHH7qjJLy9wlO+IzvoZjI7UTC9kq O0JvdEe4OY7KBb5WvDqEFKF+Rzs7SWE= -----END CERTIFICATE-----Generated at Sat Sep 5 06:46:22 2026 by rpki-client