$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5bf04b00-bd2b-33b8-9872-6c352ab3e042.roa File: 5bf04b00-bd2b-33b8-9872-6c352ab3e042.roa (raw, json) Hash identifier: 53T3c7WM9m1Bqd7bg1z1S7MHdnvnsBCN/NzSHDg9Riw= Subject key identifier: 67:BF:1E:FC:50:F7:08:C8:B8:3D:72:4C:8F:B3:D8:7B:E5:EF:6A:D0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584ED43225CBECFF886C2F25E2C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5bf04b00-bd2b-33b8-9872-6c352ab3e042.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 8069 IP address blocks: 20.33.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:25:cb:ec:ff:88:6c:2f:25:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=a5c542d2-2b2e-43f1-bcb1-9b972f5c5c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:20:a8:bf:b7:7c:46:d8:a2:40:07:dd:b1:91: 64:0f:61:af:b5:2f:35:4d:f9:56:8e:69:42:4f:c6: 8f:9a:51:4d:54:55:96:48:58:a9:17:71:aa:39:c9: 0c:fc:8b:ff:d8:c3:ca:71:32:27:b9:10:4b:20:17: cb:b1:15:45:47:1c:35:45:67:09:01:68:20:b4:14: 6f:9f:e1:30:cb:e0:d9:3d:17:50:ba:fd:52:a9:ce: 06:47:d3:fa:20:21:aa:e7:b3:2b:47:22:d0:b5:b9: 5a:fb:26:4e:dd:4b:68:4d:0e:1f:55:ed:fb:64:f4: 35:04:a3:97:d1:b2:b3:11:66:28:94:49:64:28:da: dd:76:a9:3e:49:90:73:7c:07:6b:53:11:46:9c:d7: 38:27:1c:c8:63:97:37:10:da:93:8e:03:19:02:3c: 50:05:40:2a:96:e3:b3:c3:fe:e1:e1:45:e8:22:4a: a0:81:fd:8c:bf:53:f6:0a:2e:00:0a:a5:a9:80:21: 11:a5:22:8d:ec:5f:68:c9:7d:74:2a:4d:6c:69:13: 32:ff:0d:c7:16:9b:7b:92:14:6b:be:57:87:e7:6a: 37:f1:da:03:cd:38:cf:51:6b:4b:83:2c:72:14:0c: 6f:4e:e0:c9:22:b7:66:1d:79:23:6e:fb:b5:36:a8: 42:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BF:1E:FC:50:F7:08:C8:B8:3D:72:4C:8F:B3:D8:7B:E5:EF:6A:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5bf04b00-bd2b-33b8-9872-6c352ab3e042.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:18:27:f1:d7:8d:05:aa:47:02:e7:84:42:50:4b:03:06:2d: 41:74:9f:07:64:80:bf:b6:1d:5c:56:fa:26:9b:4d:48:79:20: b8:ca:dc:6c:5d:44:04:25:5f:ed:cf:54:2d:39:69:08:a4:ee: 90:f5:60:07:1f:31:c2:a3:12:2c:1c:34:f4:65:23:a2:2c:e1: 3c:01:97:0b:2f:fe:bc:c1:ac:39:e9:9c:1a:ca:30:55:3a:92: 32:e7:ff:ce:2d:db:9d:66:c8:14:b2:77:2b:25:65:7e:e5:40: b4:8b:bf:bb:42:6c:6a:26:27:a9:3d:29:3b:e1:f0:d4:07:ad: ab:ab:a1:32:66:e7:39:c1:a2:9d:a8:af:22:97:9c:de:df:15: 1b:6b:5c:49:56:1e:9f:48:cd:93:a9:85:9c:4d:4e:57:be:c9: 91:ab:e5:ec:8d:55:f7:80:0b:34:ea:1e:b5:08:fc:87:e7:50: 33:57:2a:d2:46:9f:dd:90:ff:c6:a9:1a:6a:de:b1:49:27:53: 51:a0:e1:3f:fc:57:ef:0f:59:35:4b:c9:a5:a1:9c:26:53:d1: 96:68:2a:9b:ff:33:0b:9f:ef:85:d5:51:5c:8c:6f:df:1e:5e: a2:93:0c:d0:1e:7d:b8:12:1e:30:9f:73:fc:33:c2:fc:9e:78: 43:c2:32:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMiXL7P+IbC8l4sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk YTVjNTQyZDItMmIyZS00M2YxLWJjYjEtOWI5NzJmNWM1Yzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCCov7d8RtiiQAfdsZFkD2GvtS81TflWjmlC T8aPmlFNVFWWSFipF3GqOckM/Iv/2MPKcTInuRBLIBfLsRVFRxw1RWcJAWggtBRv n+Ewy+DZPRdQuv1Sqc4GR9P6ICGq57MrRyLQtbla+yZO3UtoTQ4fVe37ZPQ1BKOX 0bKzEWYolElkKNrddqk+SZBzfAdrUxFGnNc4JxzIY5c3ENqTjgMZAjxQBUAqluOz w/7h4UXoIkqggf2Mv1P2Ci4ACqWpgCERpSKN7F9oyX10Kk1saRMy/w3HFpt7khRr vleH52o38doDzTjPUWtLgyxyFAxvTuDJIrdmHXkjbvu1NqhCUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGe/HvxQ9wjIuD1yTI+z2Hvl72rQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWJmMDRiMDAtYmQyYi0z M2I4LTk4NzItNmMzNTJhYjNlMDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCHiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoYJ/HXjQWqRwLnhEJQSwMGLUF0nwdkgL+2HVxW+iabTUh5ILjK3Gxd RAQlX+3PVC05aQik7pD1YAcfMcKjEiwcNPRlI6Is4TwBlwsv/rzBrDnpnBrKMFU6 kjLn/84t251myBSydyslZX7lQLSLv7tCbGomJ6k9KTvh8NQHrauroTJm5znBop2o ryKXnN7fFRtrXElWHp9IzZOphZxNTle+yZGr5eyNVfeACzTqHrUI/IfnUDNXKtJG n92Q/8apGmresUknU1Gg4T/8V+8PWTVLyaWhnCZT0ZZoKpv/Mwuf74XVUVyMb98e XqKTDNAefbgSHjCfc/wzwvyeeEPCMjg= -----END CERTIFICATE-----Generated at Sat Sep 5 08:08:41 2026 by rpki-client