$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5411a0e2-71bf-3e49-a170-f2238edd14df.roa File: 5411a0e2-71bf-3e49-a170-f2238edd14df.roa (raw, json) Hash identifier: Y6MAn7+1ssA6TR1bg0+8kXS16gYvFAGdHVg/umojh+I= Subject key identifier: 35:58:35:65:0F:27:74:89:8C:12:55:E6:25:61:DA:A3:CE:BF:99:B4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EC7A1D94D69EA295453BF9800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5411a0e2-71bf-3e49-a170-f2238edd14df.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:d9:4d:69:ea:29:54:53:bf:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=f445b7cd-7db7-4d16-b5f8-ba594eafe969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e7:1b:76:63:e4:f0:88:5f:2a:e8:d8:d3:4d: fc:34:cf:fc:06:78:40:62:1e:f1:1a:76:d8:d5:2e: 54:63:fa:a7:e4:2d:29:b9:2b:d4:24:e3:5a:33:b4: 71:b7:fc:c5:19:7c:79:4e:2a:0c:38:07:4a:bf:c0: 01:a2:35:b2:cd:27:98:a6:56:2b:df:18:24:9c:7a: 96:3e:4f:3f:1c:d2:35:fc:49:8f:00:66:e0:a5:78: 10:fb:41:99:33:05:93:c6:f4:81:a7:e0:bc:7e:eb: 6d:1b:45:66:ad:f1:a2:5a:3d:bd:8d:b8:fc:df:0f: 79:d8:26:c1:ef:77:2e:98:1e:a3:18:5f:e1:a7:aa: 12:1a:c8:1f:a4:01:4b:9d:04:28:f5:cb:79:80:d1: d5:dc:9f:39:00:3d:4b:24:00:f4:66:4c:b7:45:fa: 8c:e7:35:b2:92:2a:ed:4a:bc:ce:06:ca:e6:1f:36: 0f:b1:27:d5:5c:ae:ba:3a:4d:32:35:d8:f1:9e:66: 0f:c9:10:f9:62:dc:5a:78:d7:ba:1d:01:bd:5c:fa: 40:10:40:07:22:8a:c6:44:1d:3b:84:9a:74:fb:3d: 26:e8:4f:1a:bb:e6:5c:90:58:9a:4a:9f:52:48:69: 25:a4:ea:51:2d:6a:ba:41:5b:a4:73:be:bc:c2:89: 11:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:58:35:65:0F:27:74:89:8C:12:55:E6:25:61:DA:A3:CE:BF:99:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5411a0e2-71bf-3e49-a170-f2238edd14df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:15:de:06:95:ec:b5:34:0f:71:59:0f:52:8c:49:d8:8d:b7: c1:27:88:b2:e7:f3:0d:76:d3:5a:d5:33:fc:36:0c:75:62:6b: ba:c2:40:58:3e:fa:e2:12:61:2d:08:8b:83:ba:c2:ca:63:0b: 5a:97:a8:51:91:da:09:82:1e:30:d1:e4:d8:c7:d6:2e:cf:3d: a2:01:aa:f8:59:b5:d4:b1:e3:eb:70:a4:c8:36:f3:f5:11:c7: 71:9a:04:02:99:7b:1e:7c:65:86:da:31:46:c3:53:77:c8:ba: f6:5c:68:78:80:d3:f8:55:ce:6b:bf:f3:81:bd:2f:60:2e:d8: 6f:0c:50:b2:5d:a9:bf:e5:dc:b8:c2:08:a6:be:37:f1:36:db: 67:30:3e:74:3f:d3:5d:6d:55:db:2e:df:db:8c:74:79:43:78: 79:c2:1b:bc:a7:b8:a0:aa:b0:7a:ed:ec:b5:d9:de:92:9b:8e: 50:a2:71:fd:8a:fd:56:3a:ff:94:e2:fc:34:cf:b7:c0:29:44: ce:51:37:27:48:32:6c:3e:b8:de:82:c3:5e:2c:c8:d6:df:93: 82:71:af:2d:43:a4:08:2d:d4:dd:57:a4:7a:27:42:b3:aa:f3: 32:19:e6:19:16:e8:d3:4a:4d:cb:8c:c2:d6:6f:4a:cc:04:63: 7d:5b:ea:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HodlNaeopVFO/mAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk ZjQ0NWI3Y2QtN2RiNy00ZDE2LWI1ZjgtYmE1OTRlYWZlOTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxecbdmPk8IhfKujY0038NM/8BnhAYh7xGnbY 1S5UY/qn5C0puSvUJONaM7Rxt/zFGXx5TioMOAdKv8ABojWyzSeYplYr3xgknHqW Pk8/HNI1/EmPAGbgpXgQ+0GZMwWTxvSBp+C8futtG0VmrfGiWj29jbj83w952CbB 73cumB6jGF/hp6oSGsgfpAFLnQQo9ct5gNHV3J85AD1LJAD0Zky3RfqM5zWykirt SrzOBsrmHzYPsSfVXK66Ok0yNdjxnmYPyRD5YtxaeNe6HQG9XPpAEEAHIorGRB07 hJp0+z0m6E8au+ZckFiaSp9SSGklpOpRLWq6QVukc768wokRuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVYNWUPJ3SJjBJV5iVh2qPOv5m0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTQxMWEwZTItNzFiZi0z ZTQ5LWExNzAtZjIyMzhlZGQxNGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYV3gaV7LU0D3FZD1KMSdiNt8EniLLn8w1201rVM/w2DHVia7rCQFg+ +uISYS0Ii4O6wspjC1qXqFGR2gmCHjDR5NjH1i7PPaIBqvhZtdSx4+twpMg28/UR x3GaBAKZex58ZYbaMUbDU3fIuvZcaHiA0/hVzmu/84G9L2Au2G8MULJdqb/l3LjC CKa+N/E222cwPnQ/011tVdsu39uMdHlDeHnCG7ynuKCqsHrt7LXZ3pKbjlCicf2K /VY6/5Ti/DTPt8ApRM5RNydIMmw+uN6Cw14syNbfk4Jxry1DpAgt1N1XpHonQrOq 8zIZ5hkW6NNKTcuMwtZvSswEY31b6sw= -----END CERTIFICATE-----Generated at Sat Sep 5 07:09:53 2026 by rpki-client