$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b500f9ea-1f0a-3934-963e-3f57b3b70047.roa File: b500f9ea-1f0a-3934-963e-3f57b3b70047.roa (raw, json) Hash identifier: B+7KDh49vXziAkkl4oebFnWx7QY+3odkcIkci7tz7D4= Subject key identifier: 7C:A7:70:80:F5:B6:57:EE:3A:3E:E0:DE:5F:69:06:CB:D7:B5:F5:26 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EBB11C1C77DC41DBEC7B02940 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b500f9ea-1f0a-3934-963e-3f57b3b70047.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:c1:c7:7d:c4:1d:be:c7:b0:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=b4ebc6a8-2c93-4891-abf4-ffa82400862f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fb:b0:61:a1:9a:20:4d:f0:41:c9:bd:2f:52: 31:01:0f:85:a7:11:00:2f:54:83:6a:b2:25:ee:a9: a0:e3:d1:d1:c6:c7:48:6d:33:d3:d0:8f:06:70:43: 8a:2b:b5:b6:63:80:f4:89:94:c3:2d:55:f0:f0:a7: e6:fc:8a:04:6a:90:38:80:b8:38:d8:95:99:2d:9b: b6:90:d7:dc:b7:78:20:ce:86:8f:9a:0e:0e:2d:b2: 5e:89:17:19:03:85:7a:0f:1a:d8:d2:d1:d4:5d:fb: 0f:6e:64:52:8b:5b:7e:d2:8a:1c:de:72:77:0b:f9: eb:c0:42:05:76:f8:4e:1a:ae:e3:6e:c6:ba:7a:f8: 7e:30:5d:47:73:5f:4f:44:8d:1b:b0:70:b3:e0:1e: ee:4d:ad:21:59:f2:a6:5f:74:74:d1:7a:6c:f9:7f: 7b:b6:56:0b:d8:99:4b:eb:e8:4b:81:90:c5:78:22: 8d:cd:5b:9b:08:56:2a:dd:b3:fe:f3:ee:8f:c1:1a: c9:68:5a:87:5b:96:f3:d8:b9:a3:0a:d2:df:72:77: 3f:71:06:8d:31:11:a1:98:86:46:84:c7:3a:88:a0: 64:10:73:1a:25:a7:28:bc:d8:2d:53:9d:47:d1:6b: 06:d1:40:5d:7a:4a:8a:1d:d6:70:c5:cc:49:9f:9d: 30:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A7:70:80:F5:B6:57:EE:3A:3E:E0:DE:5F:69:06:CB:D7:B5:F5:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b500f9ea-1f0a-3934-963e-3f57b3b70047.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:b2:79:a1:82:c1:27:7e:88:53:ef:93:c8:3a:04:d8:71:ee: a3:8a:a1:b4:b2:9f:5e:d0:87:74:b1:9b:64:9d:a8:c0:61:ae: 53:43:11:b1:c0:ed:30:55:33:f6:fd:ca:b9:a7:20:0a:d5:63: 4a:02:96:84:a4:19:1a:6a:10:d8:07:8e:5f:f0:0a:78:fc:52: 94:73:29:a5:5c:da:2d:c6:dc:52:e5:b7:8f:1d:f0:c3:d8:03: e5:09:e7:4f:56:84:ff:f1:64:10:ab:a4:8d:25:c2:c5:40:a6: 80:37:a2:0e:26:0c:f4:be:ca:68:fe:41:3a:79:9f:55:28:24: ff:1b:e2:2b:7c:c1:10:85:e8:5a:7f:19:56:1e:d0:dc:67:6e: c9:9f:73:34:fd:b2:d7:88:e8:b8:6f:8e:fd:3b:cb:41:30:fd: f9:43:ae:50:fc:57:e8:6d:f0:d0:b9:9f:c7:30:e5:fd:01:b4: 0a:3d:bd:01:14:2b:c0:a5:e6:31:96:5d:16:e8:47:88:8d:ff: 8e:cc:9a:db:15:18:19:db:73:80:e6:27:1b:10:be:11:89:d5: 63:8d:c3:f6:7c:22:f1:18:f9:8e:9c:86:85:bf:96:94:97:b2: 6a:b3:50:b2:99:47:94:9f:6a:4d:50:1a:29:e1:63:39:f3:a4: 0a:60:4c:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67EcHHfcQdvsewKUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk YjRlYmM2YTgtMmM5My00ODkxLWFiZjQtZmZhODI0MDA4NjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvuwYaGaIE3wQcm9L1IxAQ+FpxEAL1SDarIl 7qmg49HRxsdIbTPT0I8GcEOKK7W2Y4D0iZTDLVXw8Kfm/IoEapA4gLg42JWZLZu2 kNfct3ggzoaPmg4OLbJeiRcZA4V6DxrY0tHUXfsPbmRSi1t+0ooc3nJ3C/nrwEIF dvhOGq7jbsa6evh+MF1Hc19PRI0bsHCz4B7uTa0hWfKmX3R00Xps+X97tlYL2JlL 6+hLgZDFeCKNzVubCFYq3bP+8+6PwRrJaFqHW5bz2LmjCtLfcnc/cQaNMRGhmIZG hMc6iKBkEHMaJacovNgtU51H0WsG0UBdekqKHdZwxcxJn50wcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyncID1tlfuOj7g3l9pBsvXtfUmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjUwMGY5ZWEtMWYwYS0z OTM0LTk2M2UtM2Y1N2IzYjcwMDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCERMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyyeaGCwSd+iFPvk8g6BNhx7qOKobSyn17Qh3Sxm2SdqMBhrlNDEbHA 7TBVM/b9yrmnIArVY0oCloSkGRpqENgHjl/wCnj8UpRzKaVc2i3G3FLlt48d8MPY A+UJ509WhP/xZBCrpI0lwsVApoA3og4mDPS+ymj+QTp5n1UoJP8b4it8wRCF6Fp/ GVYe0NxnbsmfczT9steI6Lhvjv07y0Ew/flDrlD8V+ht8NC5n8cw5f0BtAo9vQEU K8Cl5jGWXRboR4iN/47MmtsVGBnbc4DmJxsQvhGJ1WONw/Z8IvEY+Y6choW/lpSX smqzULKZR5Sfak1QGinhYznzpApgTMM= -----END CERTIFICATE-----Generated at Sat Sep 5 05:24:39 2026 by rpki-client