$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5372288-b2a4-3d59-81bc-41226acf8120.roa File: b5372288-b2a4-3d59-81bc-41226acf8120.roa (raw, json) Hash identifier: hhI31Ja2r5huOVcd3Ol2tmj2faOnGW7H3UO58uvogAE= Subject key identifier: A5:F1:55:B4:59:AD:C6:86:6E:83:10:25:B6:CB:E7:05:91:BB:08:FA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EBB11C1A3BA9BCB5644BBD800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5372288-b2a4-3d59-81bc-41226acf8120.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:c1:a3:ba:9b:cb:56:44:bb:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=1c341ea0-952a-421e-bb04-e7f7a19cf84f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ea:68:6f:30:39:59:3a:80:05:a8:df:2a:b4: 17:96:62:16:1b:b1:73:45:4e:f5:53:91:27:86:1d: 35:93:d4:88:66:8f:51:4e:48:ca:6f:ff:b8:f3:14: 70:a7:ce:12:4c:93:71:8e:a1:72:55:28:42:ef:96: 58:27:ad:1b:29:fb:fa:b4:73:83:cc:71:e0:d9:da: 88:db:c0:4c:7e:20:8b:9b:4b:ee:82:6d:47:7b:f9: b7:4e:a2:55:84:4b:a0:e3:15:ae:a8:53:80:ff:8f: c3:1d:2e:53:49:f6:92:57:75:1c:5a:c0:ba:c8:78: d4:3c:0d:de:51:89:2f:a3:1a:30:97:6b:04:37:e3: 54:cf:e7:c1:2a:85:34:3f:00:5e:79:4c:37:48:cf: 10:d1:ea:1b:3a:ba:bd:b3:3c:d1:a6:5a:05:0b:e7: f3:a4:41:39:94:17:96:5f:9b:a1:61:64:15:9e:e5: 52:aa:a8:e4:e8:26:aa:d7:db:ac:69:39:b6:ed:cf: a4:95:bc:bb:ac:b1:c0:1d:1d:44:5c:61:60:90:9a: 44:38:7d:77:a3:54:25:29:4b:fe:0c:4c:6b:61:e3: 1c:6d:52:b8:e0:7d:9c:f2:90:08:df:4e:27:52:42: bf:11:ea:1e:db:ea:74:a5:47:ff:9e:24:ae:25:8b: 1b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F1:55:B4:59:AD:C6:86:6E:83:10:25:B6:CB:E7:05:91:BB:08:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5372288-b2a4-3d59-81bc-41226acf8120.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ae:a3:1c:10:31:2a:08:b3:2e:38:9a:72:67:95:f8:35:56: 74:e0:ab:04:31:db:96:91:16:e8:14:06:58:30:0e:4d:25:a0: d3:a6:d8:a8:6c:7b:be:42:e1:df:56:9b:b2:20:21:8f:47:61: 72:b0:80:3c:2a:6a:30:8f:d6:e7:71:7a:8f:55:dc:2e:07:24: b6:55:03:54:61:8f:b5:c5:84:0b:ea:f5:3c:62:68:3d:6a:a0: 7a:1d:78:c8:44:b9:76:4c:8d:61:9a:53:d6:a5:86:5d:bc:73: f4:3e:b2:42:c8:b3:31:22:4d:e3:f7:b5:e7:bf:ce:d2:16:96: 64:10:a9:d1:3b:f5:87:9c:d0:5e:09:be:f8:44:e6:9a:5f:43: 76:28:9a:ce:86:20:18:19:bf:f4:ac:0b:ab:7c:3b:e4:e7:e3: f6:28:41:55:d0:60:1e:93:cd:72:ef:a3:0e:32:76:6c:15:ac: e4:83:6a:27:db:c6:a8:21:1f:f7:95:82:f0:01:ea:9a:3e:fb: d2:54:6d:5a:24:2c:51:61:00:0c:51:55:d9:1b:f5:b2:7f:30: 95:c9:cd:70:6b:2e:2c:25:c9:54:c2:f5:80:76:12:27:a3:2b: 54:f7:14:65:fb:6d:0d:be:fe:68:65:b4:24:0f:0d:c5:89:5f: f4:62:74:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67EcGjupvLVkS72AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk MWMzNDFlYTAtOTUyYS00MjFlLWJiMDQtZTdmN2ExOWNmODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApupobzA5WTqABajfKrQXlmIWG7FzRU71U5En hh01k9SIZo9RTkjKb/+48xRwp84STJNxjqFyVShC75ZYJ60bKfv6tHODzHHg2dqI 28BMfiCLm0vugm1He/m3TqJVhEug4xWuqFOA/4/DHS5TSfaSV3UcWsC6yHjUPA3e UYkvoxowl2sEN+NUz+fBKoU0PwBeeUw3SM8Q0eobOrq9szzRploFC+fzpEE5lBeW X5uhYWQVnuVSqqjk6Caq19usaTm27c+klby7rLHAHR1EXGFgkJpEOH13o1QlKUv+ DExrYeMcbVK44H2c8pAI304nUkK/Eeoe2+p0pUf/niSuJYsb6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXxVbRZrcaGboMQJbbL5wWRuwj6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjUzNzIyODgtYjJhNC0z ZDU5LTgxYmMtNDEyMjZhY2Y4MTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeuoxwQMSoIsy44mnJnlfg1VnTgqwQx25aRFugUBlgwDk0loNOm2Khs e75C4d9Wm7IgIY9HYXKwgDwqajCP1udxeo9V3C4HJLZVA1Rhj7XFhAvq9TxiaD1q oHodeMhEuXZMjWGaU9alhl28c/Q+skLIszEiTeP3tee/ztIWlmQQqdE79Yec0F4J vvhE5ppfQ3Yoms6GIBgZv/SsC6t8O+Tn4/YoQVXQYB6TzXLvow4ydmwVrOSDaifb xqghH/eVgvAB6po++9JUbVokLFFhAAxRVdkb9bJ/MJXJzXBrLiwlyVTC9YB2Eiej K1T3FGX7bQ2+/mhltCQPDcWJX/RidI4= -----END CERTIFICATE-----Generated at Sat Sep 5 07:09:53 2026 by rpki-client