$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8ebe7e82-df85-3231-a9f4-547d1fd54426.roa File: 8ebe7e82-df85-3231-a9f4-547d1fd54426.roa (raw, json) Hash identifier: +xA8ROUjsGdU4IgY0eo3WoEO2S4xtAmq22Uw5poSwQE= Subject key identifier: 28:D6:78:8F:DB:EC:08:1A:E2:7B:C0:FA:CC:19:E3:AD:99:4D:47:83 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE38CACFB942FE130BF37B8D0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8ebe7e82-df85-3231-a9f4-547d1fd54426.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 8069 IP address blocks: 20.33.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:ac:fb:94:2f:e1:30:bf:37:b8:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=5dc2eb55-f32b-42e9-8a15-c800971eee9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:49:d4:7d:7f:1c:7b:4e:cf:d2:7c:37:ad:bc: 08:d3:9e:f6:96:fe:8b:0f:74:5b:6e:af:19:56:79: 11:3c:15:11:46:7a:38:94:eb:d0:9c:d1:f5:cf:26: b0:93:9f:50:b6:05:8e:db:0f:ee:42:93:be:8e:c4: 0c:2d:86:97:14:57:94:c0:85:93:7e:85:14:c5:07: e0:ed:5a:57:9f:fc:44:bb:d3:2d:dd:a4:2d:f5:a3: 81:f6:14:cb:61:8b:7b:03:98:3f:31:4e:8b:16:7c: a5:9b:c4:4b:44:64:13:35:39:56:a8:f0:ee:93:15: 3b:16:6b:b9:00:4c:e0:08:1b:85:69:4a:99:9f:fa: 74:18:bb:a9:db:80:2e:4a:3b:f8:ee:82:dd:77:b6: a8:b4:56:15:bd:dc:19:ca:8a:4d:19:6c:5f:e6:f2: 15:20:85:3f:77:33:97:29:e6:b1:88:88:a3:ca:aa: 62:d7:ee:29:0d:0e:5b:b4:e4:43:1c:cd:62:91:7f: 43:fb:b6:30:b3:ba:b5:9c:eb:ba:20:61:7a:ef:7c: 69:2a:ec:a9:68:74:75:99:45:23:d9:15:ca:c1:0f: 99:16:c7:df:d8:27:4b:73:a1:6b:e8:b8:c5:3a:1e: e6:c5:37:ab:13:12:c5:05:b9:78:6d:81:ac:d7:3a: d6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D6:78:8F:DB:EC:08:1A:E2:7B:C0:FA:CC:19:E3:AD:99:4D:47:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8ebe7e82-df85-3231-a9f4-547d1fd54426.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:39:bc:2f:8f:0e:f4:0d:4a:76:f2:74:f2:73:16:05:4b:11: 49:08:62:4d:21:17:b1:61:e9:26:f0:a6:2b:c8:98:c9:2c:bb: 05:96:21:b9:33:b0:a1:81:c8:87:12:c1:e7:b6:f6:67:00:9a: 3e:08:e1:3b:c8:df:dc:89:c1:e9:a1:9f:b6:3b:bd:b4:18:cc: 8e:f9:91:29:52:c3:54:56:c6:38:d1:98:cd:19:5e:60:65:b5: 1c:dc:4a:ae:87:df:41:11:d0:ac:63:7d:4f:f7:39:d2:ff:51: f5:b3:74:fb:8c:de:65:dc:63:c5:9e:3f:b3:20:36:dc:55:45: 5d:bc:8c:41:ee:f1:34:4c:4d:30:79:82:b1:e4:11:be:66:db: b7:d0:0a:01:a5:bd:69:09:7f:be:ee:d6:03:72:91:62:31:7f: 83:74:34:98:71:0f:a4:16:cb:31:1b:b8:d2:8f:86:16:f3:db: 88:13:dd:7c:08:84:f4:e8:54:12:15:ec:6e:2a:b8:f1:0f:ec: c1:e7:64:64:49:4e:ab:c5:cf:d9:d1:ac:35:10:f2:bb:3f:61: 3a:54:44:5f:62:ee:5c:d2:da:51:eb:0e:54:7d:6c:e9:6d:da: a3:ef:92:47:b0:35:0c:14:55:57:0e:ff:94:47:34:aa:45:93: 3d:02:c5:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjKz7lC/hML83uNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk NWRjMmViNTUtZjMyYi00MmU5LThhMTUtYzgwMDk3MWVlZTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0knUfX8ce07P0nw3rbwI0572lv6LD3Rbbq8Z VnkRPBURRno4lOvQnNH1zyawk59QtgWO2w/uQpO+jsQMLYaXFFeUwIWTfoUUxQfg 7VpXn/xEu9Mt3aQt9aOB9hTLYYt7A5g/MU6LFnylm8RLRGQTNTlWqPDukxU7Fmu5 AEzgCBuFaUqZn/p0GLup24AuSjv47oLdd7aotFYVvdwZyopNGWxf5vIVIIU/dzOX KeaxiIijyqpi1+4pDQ5btORDHM1ikX9D+7Yws7q1nOu6IGF673xpKuypaHR1mUUj 2RXKwQ+ZFsff2CdLc6Fr6LjFOh7mxTerExLFBbl4bYGs1zrWiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjWeI/b7Aga4nvA+swZ462ZTUeDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOGViZTdlODItZGY4NS0z MjMxLWE5ZjQtNTQ3ZDFmZDU0NDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEE5vC+PDvQNSnbydPJzFgVLEUkIYk0hF7Fh6SbwpivImMksuwWWIbkz sKGByIcSwee29mcAmj4I4TvI39yJwemhn7Y7vbQYzI75kSlSw1RWxjjRmM0ZXmBl tRzcSq6H30ER0KxjfU/3OdL/UfWzdPuM3mXcY8WeP7MgNtxVRV28jEHu8TRMTTB5 grHkEb5m27fQCgGlvWkJf77u1gNykWIxf4N0NJhxD6QWyzEbuNKPhhbz24gT3XwI hPToVBIV7G4quPEP7MHnZGRJTqvFz9nRrDUQ8rs/YTpURF9i7lzS2lHrDlR9bOlt 2qPvkkewNQwUVVcO/5RHNKpFkz0CxR4= -----END CERTIFICATE-----Generated at Sat Sep 5 05:24:01 2026 by rpki-client