$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a951ae95-5985-3769-aa0d-1f4ba31ef891.roa File: a951ae95-5985-3769-aa0d-1f4ba31ef891.roa (raw, json) Hash identifier: VHiY0CNklQozsx9+zTfI1Tf8f8lJlCvMRD3V7/kl0Ck= Subject key identifier: A5:EC:8B:81:03:35:0F:63:B1:7C:92:42:D1:56:18:73:E9:25:45:8A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4235AD935ED0E75AAEDEE80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a951ae95-5985-3769-aa0d-1f4ba31ef891.roa Signing time: Wed 19 Aug 2026 18:04:03 +0000 ROA not before: Wed 19 Aug 2026 18:04:03 +0000 ROA not after: Thu 04 Apr 2030 04:00:00 +0000 asID: 8075 IP address blocks: 20.33.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:5a:d9:35:ed:0e:75:aa:ed:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:03 2026 GMT Not After : Apr 4 04:00:00 2030 GMT Subject: CN=5e250b7e-05b1-4013-a18b-588f763f302b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ff:7f:ad:a3:3c:70:32:b4:9b:98:ad:44:01: 88:d4:19:f4:9f:88:3a:88:cd:20:0a:cf:a3:e9:99: 85:71:3e:52:8b:0d:2c:40:f7:2c:59:27:68:62:6c: 61:4d:c4:fa:50:f9:a2:3f:50:7c:e2:07:f4:38:38: 9f:0f:27:88:4a:8a:77:d5:42:b0:c1:d5:51:4b:04: e6:d3:25:24:3a:57:5f:48:4d:25:63:e1:f1:50:e9: ef:77:c7:b2:53:e8:4a:92:0f:df:83:53:74:af:88: ff:5c:92:aa:66:a0:de:95:da:91:09:f3:98:43:93: 13:98:24:c1:0f:6c:96:e1:b2:17:6f:de:b7:3f:4f: 30:eb:df:d9:25:3c:b4:d0:0e:af:fc:b6:93:30:be: 97:50:74:71:3c:2c:bd:b6:31:98:ac:08:75:f1:ed: 4f:a8:61:97:f2:8f:32:65:75:79:1e:a6:12:f2:e4: 49:50:28:bb:0e:40:4b:2f:27:fc:d4:9d:94:20:01: ce:d7:a9:6d:ff:48:a5:be:48:5a:6f:15:01:07:1a: 41:db:05:bc:c7:f9:74:80:b7:1c:00:a2:ea:f4:12: 7e:03:61:2d:ab:3a:6f:b9:9e:d9:12:46:1d:22:26: 71:e5:a5:2c:db:6a:1b:0e:21:44:ea:59:2e:bb:13: d6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EC:8B:81:03:35:0F:63:B1:7C:92:42:D1:56:18:73:E9:25:45:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a951ae95-5985-3769-aa0d-1f4ba31ef891.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:19:c3:a9:59:64:bf:af:19:c4:b1:d5:35:a1:99:77:2f:7d: e9:2a:60:f1:2a:dd:11:50:15:d6:08:81:0c:12:16:d4:ac:50: 72:34:c6:28:08:74:4a:07:6f:70:49:fc:47:13:ae:f8:6e:fa: cc:fc:3c:39:06:58:dc:bd:28:f1:9f:57:87:44:3d:60:95:be: 3c:e0:15:2a:cd:3a:73:4d:54:a7:5c:ae:c8:b5:5d:51:c7:cf: c2:31:c4:02:fb:ac:a1:4d:8c:eb:e4:b3:df:2a:80:9c:55:2c: 2f:cc:97:24:61:af:11:f0:3e:6c:41:ec:c9:56:74:e9:3d:a2: a7:57:9b:b3:1d:7b:05:d3:3c:97:67:03:88:12:b6:98:6f:2c: f8:0a:16:70:ff:d3:43:ca:97:3f:b3:2e:59:e3:24:3d:97:6b: d6:86:ff:44:09:9a:b9:ca:18:d9:56:72:9f:ca:71:87:80:50: 18:03:c4:ed:8a:ba:06:e9:b7:41:33:f0:c0:f2:b7:1e:48:61: 1a:40:16:ce:5f:94:50:ed:8e:5f:7e:06:41:2a:2c:20:3b:c2: 41:bf:6d:30:cc:b2:ce:b2:cd:dd:92:86:67:9f:dc:0b:cb:1a: f3:22:95:c2:e7:86:f0:e7:fc:98:e1:55:57:af:00:9b:c4:e5: 02:0b:b4:e3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7kI1rZNe0Odart7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwM1oXDTMwMDQwNDA0MDAwMFowLzEtMCsGA1UEAxMk NWUyNTBiN2UtMDViMS00MDEzLWExOGItNTg4Zjc2M2YzMDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP9/raM8cDK0m5itRAGI1Bn0n4g6iM0gCs+j 6ZmFcT5Siw0sQPcsWSdoYmxhTcT6UPmiP1B84gf0ODifDyeISop31UKwwdVRSwTm 0yUkOldfSE0lY+HxUOnvd8eyU+hKkg/fg1N0r4j/XJKqZqDeldqRCfOYQ5MTmCTB D2yW4bIXb963P08w69/ZJTy00A6v/LaTML6XUHRxPCy9tjGYrAh18e1PqGGX8o8y ZXV5HqYS8uRJUCi7DkBLLyf81J2UIAHO16lt/0ilvkhabxUBBxpB2wW8x/l0gLcc AKLq9BJ+A2EtqzpvuZ7ZEkYdIiZx5aUs22obDiFE6lkuuxPWOQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKXsi4EDNQ9jsXySQtFWGHPpJUWKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTk1MWFlOTUtNTk4NS0z NzY5LWFhMGQtMWY0YmEzMWVmODkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAFCEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEABxnDqVlkv68ZxLHVNaGZdy996Spg8SrdEVAV1giBDBIW1KxQcjTGKAh0 SgdvcEn8RxOu+G76zPw8OQZY3L0o8Z9Xh0Q9YJW+POAVKs06c01Up1yuyLVdUcfP wjHEAvusoU2M6+Sz3yqAnFUsL8yXJGGvEfA+bEHsyVZ06T2ip1ebsx17BdM8l2cD iBK2mG8s+AoWcP/TQ8qXP7MuWeMkPZdr1ob/RAmaucoY2VZyn8pxh4BQGAPE7Yq6 Bum3QTPwwPK3HkhhGkAWzl+UUO2OX34GQSosIDvCQb9tMMyyzrLN3ZKGZ5/cC8sa 8yKVwueG8Of8mOFVV68Am8TlAgu04w== -----END CERTIFICATE-----Generated at Sat Sep 5 02:05:24 2026 by rpki-client