$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/80e82465-c9d4-3c99-a3bc-a70a5dfd93f8.roa File: 80e82465-c9d4-3c99-a3bc-a70a5dfd93f8.roa (raw, json) Hash identifier: Ya6D2Av6KpxkUjsXlo72gL5qZwc8JvzUycuQFWkQjyY= Subject key identifier: 3B:97:F3:B5:EE:F7:13:80:AA:EC:AC:DC:E0:9F:AB:B4:74:AB:8E:A4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EC7A1D9876AD89F1F19D9E000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/80e82465-c9d4-3c99-a3bc-a70a5dfd93f8.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:d9:87:6a:d8:9f:1f:19:d9:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=8cd004d2-f457-46f7-8c5a-7c3ec1666ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e2:19:19:c0:e2:e4:c4:f4:43:ad:70:5c:9e: 10:2a:92:5a:5f:9a:89:8b:d7:29:4a:d6:d6:82:55: b5:ec:42:5a:47:e9:3d:b7:87:b4:ba:b5:ec:ca:9c: dc:40:75:ee:ca:14:ca:dc:95:64:5f:ac:b1:a8:01: c9:fa:a2:71:7f:ed:91:a8:e9:05:cf:0d:20:e1:c2: 09:75:0a:27:fa:74:11:dd:29:38:67:0d:c0:64:77: 20:e2:b3:8f:7d:62:26:10:cf:7c:b0:55:e8:7a:83: 78:36:b6:93:4f:1c:64:c0:21:8c:12:cd:c7:cd:90: 1e:7a:31:e5:8e:d5:09:c5:23:5f:9e:fb:a0:ee:fd: 17:f5:6e:c1:79:e4:a9:a3:be:8c:c8:40:fb:6d:90: 88:55:32:60:be:b2:81:78:13:1c:55:91:66:d9:73: fd:c4:37:9b:91:be:0d:09:9c:60:e4:67:9d:05:db: 98:42:d2:a0:bb:a1:c4:f6:0b:a2:08:89:8c:13:b0: 21:d8:11:1f:ea:0a:66:89:b4:be:17:05:37:18:4d: 74:2e:a9:b5:39:76:b9:25:94:12:48:43:8a:cc:ec: 70:25:e6:01:bb:fe:52:6b:a5:03:c6:57:2b:9f:5a: e1:cc:96:cc:f9:14:98:bc:06:a6:76:a8:a4:b0:0a: ad:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:97:F3:B5:EE:F7:13:80:AA:EC:AC:DC:E0:9F:AB:B4:74:AB:8E:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/80e82465-c9d4-3c99-a3bc-a70a5dfd93f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:4b:42:d0:a1:77:dc:84:88:48:a9:8f:9e:37:2b:0b:69:9f: a8:c1:de:64:da:5d:65:27:b3:00:22:b3:fb:7d:24:5b:55:54: d0:e1:63:1a:d5:04:44:4f:11:e5:4e:5e:e1:7a:db:f0:45:e9: 05:30:ca:40:78:4d:2c:13:47:91:b2:ab:8d:cd:2e:c8:2c:af: b7:69:57:62:36:3a:da:1f:8b:f9:c1:77:6d:ae:b7:d3:5a:c4: 22:38:0e:2a:4d:9d:ab:44:30:e0:d5:20:3c:45:ab:52:a1:21: 26:f5:e8:72:8f:18:ce:f3:e3:ab:30:3f:91:3e:ea:d4:4f:f7: c2:b8:eb:28:41:f4:67:e7:b4:29:60:06:fa:db:5b:1e:c7:da: 43:86:37:40:ad:7e:ed:d0:3d:8c:c1:59:9d:fc:44:b6:ab:31: fa:03:86:dd:42:4c:91:d1:34:5a:99:14:9d:b4:46:5e:b5:f5: 7f:46:23:39:50:69:13:72:6b:f7:5c:cb:e3:e6:7d:fe:a6:eb: 50:6e:36:6e:32:1e:88:01:7b:85:b8:8a:47:ee:94:40:1f:df: 70:81:ac:f3:6c:64:18:be:45:f6:1e:d5:84:da:62:df:e2:ad: 80:85:43:9c:3b:3e:56:40:ff:b4:7d:81:9a:0a:63:19:7e:7c: f0:ec:e1:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HodmHatifHxnZ4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk OGNkMDA0ZDItZjQ1Ny00NmY3LThjNWEtN2MzZWMxNjY2YWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OIZGcDi5MT0Q61wXJ4QKpJaX5qJi9cpStbW glW17EJaR+k9t4e0urXsypzcQHXuyhTK3JVkX6yxqAHJ+qJxf+2RqOkFzw0g4cIJ dQon+nQR3Sk4Zw3AZHcg4rOPfWImEM98sFXoeoN4NraTTxxkwCGMEs3HzZAeejHl jtUJxSNfnvug7v0X9W7BeeSpo76MyED7bZCIVTJgvrKBeBMcVZFm2XP9xDebkb4N CZxg5GedBduYQtKgu6HE9guiCImME7Ah2BEf6gpmibS+FwU3GE10Lqm1OXa5JZQS SEOKzOxwJeYBu/5Sa6UDxlcrn1rhzJbM+RSYvAamdqiksAqtBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuX87Xu9xOAquys3OCfq7R0q46kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODBlODI0NjUtYzlkNC0z Yzk5LWEzYmMtYTcwYTVkZmQ5M2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBLQtChd9yEiEipj543Kwtpn6jB3mTaXWUnswAis/t9JFtVVNDhYxrV BERPEeVOXuF62/BF6QUwykB4TSwTR5Gyq43NLsgsr7dpV2I2Otofi/nBd22ut9Na xCI4DipNnatEMODVIDxFq1KhISb16HKPGM7z46swP5E+6tRP98K46yhB9GfntClg BvrbWx7H2kOGN0Ctfu3QPYzBWZ38RLarMfoDht1CTJHRNFqZFJ20Rl619X9GIzlQ aRNya/dcy+Pmff6m61BuNm4yHogBe4W4ikfulEAf33CBrPNsZBi+RfYe1YTaYt/i rYCFQ5w7PlZA/7R9gZoKYxl+fPDs4Q0= -----END CERTIFICATE-----Generated at Sat Sep 5 07:38:15 2026 by rpki-client