$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b29c80bc-009a-3da4-ae58-96b8bae82cc5.roa File: b29c80bc-009a-3da4-ae58-96b8bae82cc5.roa (raw, json) Hash identifier: eVdWS1b0gv43iNtChkTwrN5xPYYCYHvquEevbaTrYpw= Subject key identifier: CC:A4:39:18:AE:2F:11:AB:D3:E6:72:B7:E7:A2:CC:BB:DB:E2:51:7A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA788BFDFD7C164361C267780 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b29c80bc-009a-3da4-ae58-96b8bae82cc5.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.33.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:bf:df:d7:c1:64:36:1c:26:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=92bf652b-cc14-4d07-ab24-3a188c28022b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:80:fa:cf:d4:de:30:90:8f:e8:7c:eb:47:d1: 20:ee:d2:bf:5e:02:67:be:35:da:28:60:06:e1:4b: 0c:92:8e:3c:27:0f:7c:03:e9:6b:c9:a6:37:e0:70: 08:1d:78:5a:0a:a8:35:da:2d:29:66:2f:ab:ab:46: f5:fb:04:a8:4a:f3:8f:76:04:1f:55:90:08:57:79: 08:5f:3b:64:34:f3:e0:fe:b7:ef:f0:5d:eb:f3:5e: ea:6b:98:f0:f3:4a:0c:95:55:a6:3e:1a:34:fa:ea: b5:37:62:2c:4a:dd:88:49:d8:31:67:d1:96:da:99: d7:38:8a:db:57:e9:e6:a2:2a:9c:95:17:68:18:8f: c5:a3:a6:55:43:61:af:22:81:77:9d:82:cb:2d:84: e9:6e:60:99:0d:d0:46:0d:aa:a2:8d:12:4b:74:41: 35:b6:53:8c:bb:46:2b:92:03:de:51:10:70:1e:e8: 66:12:3d:b6:a1:4b:4f:e2:f8:9e:ed:1d:ed:5d:41: eb:63:bc:7d:ca:a2:79:96:ba:78:e4:46:b2:21:47: ee:6d:49:76:80:46:ef:a7:37:1b:c5:dc:aa:7a:60: 72:1d:a4:bf:4e:9f:de:b2:f7:98:6f:bf:c1:dc:b1: 82:34:d3:f0:01:ec:7b:ff:52:44:4b:d3:5c:6a:99: 3a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A4:39:18:AE:2F:11:AB:D3:E6:72:B7:E7:A2:CC:BB:DB:E2:51:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b29c80bc-009a-3da4-ae58-96b8bae82cc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:34:67:c0:ce:01:1d:79:d1:08:9b:ab:19:d9:88:6e:39:a0: d8:be:1c:23:e9:4b:22:ea:d3:f2:1d:52:a6:e7:d7:a8:0a:b9: f5:39:4f:3a:d3:66:7f:7c:ab:62:13:56:86:f7:cd:9f:f2:1c: d8:a3:b5:06:1e:96:da:c3:cc:fc:53:46:40:b6:48:f2:a3:a1: 2e:d6:12:7a:86:eb:f6:23:2e:96:1c:a9:e9:c7:a6:43:cc:98: 34:5b:c6:a5:56:b2:7b:2b:c5:a6:7c:cc:2a:9d:f2:b0:36:0b: 96:ec:56:8e:31:7c:a0:31:d4:7b:aa:3d:e7:ac:4a:b9:09:17: ff:14:6c:01:fe:36:3d:f9:fc:70:8d:65:ce:8d:1d:73:ac:ab: f7:6d:a0:78:68:70:a6:d5:d1:ff:3f:00:b3:8e:25:bb:2e:53: b6:4c:d1:e1:c8:bc:6c:4b:8f:12:05:4f:0d:b1:76:bc:01:62: b5:d6:26:17:4c:c1:c6:9e:50:92:75:ca:12:78:fd:3e:16:ac: da:6d:55:40:e3:76:f3:fd:02:48:b3:56:e6:c6:e1:d9:f7:81: eb:58:1a:29:c1:a8:c7:44:ba:e6:b8:cb:ce:d6:c9:ef:29:01: 6d:1f:52:c1:65:c0:8d:ed:17:80:2a:b2:c0:ba:c9:29:52:ea: bc:8c:b8:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niL/f18FkNhwmd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTJiZjY1MmItY2MxNC00ZDA3LWFiMjQtM2ExODhjMjgwMjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoD6z9TeMJCP6HzrR9Eg7tK/XgJnvjXaKGAG 4UsMko48Jw98A+lryaY34HAIHXhaCqg12i0pZi+rq0b1+wSoSvOPdgQfVZAIV3kI XztkNPPg/rfv8F3r817qa5jw80oMlVWmPho0+uq1N2IsSt2ISdgxZ9GW2pnXOIrb V+nmoiqclRdoGI/Fo6ZVQ2GvIoF3nYLLLYTpbmCZDdBGDaqijRJLdEE1tlOMu0Yr kgPeURBwHuhmEj22oUtP4vie7R3tXUHrY7x9yqJ5lrp45EayIUfubUl2gEbvpzcb xdyqemByHaS/Tp/esveYb7/B3LGCNNPwAex7/1JES9Ncapk66wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMykORiuLxGr0+Zyt+eizLvb4lF6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjI5YzgwYmMtMDA5YS0z ZGE0LWFlNTgtOTZiOGJhZTgyY2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQ0Z8DOAR150QibqxnZiG45oNi+HCPpSyLq0/IdUqbn16gKufU5TzrT Zn98q2ITVob3zZ/yHNijtQYeltrDzPxTRkC2SPKjoS7WEnqG6/YjLpYcqenHpkPM mDRbxqVWsnsrxaZ8zCqd8rA2C5bsVo4xfKAx1HuqPeesSrkJF/8UbAH+Nj35/HCN Zc6NHXOsq/dtoHhocKbV0f8/ALOOJbsuU7ZM0eHIvGxLjxIFTw2xdrwBYrXWJhdM wcaeUJJ1yhJ4/T4WrNptVUDjdvP9AkizVubG4dn3getYGinBqMdEuua4y87Wye8p AW0fUsFlwI3tF4AqssC6ySlS6ryMuOg= -----END CERTIFICATE-----Generated at Sat Sep 5 05:23:53 2026 by rpki-client