$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c5213a05-0625-3375-8382-9c42d5a3e1cb.roa File: c5213a05-0625-3375-8382-9c42d5a3e1cb.roa (raw, json) Hash identifier: CA7yAvYgWH6Eej4PD24ajiT5/006pjNzOGfJvP/kmOw= Subject key identifier: 0F:A2:59:ED:BC:0F:FA:77:CE:A1:B0:EB:6B:CD:41:B9:05:C0:D4:A9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE38CAD1E4B59D424BA27B300 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c5213a05-0625-3375-8382-9c42d5a3e1cb.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 8069 IP address blocks: 20.33.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:ad:1e:4b:59:d4:24:ba:27:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=48df8981-68e5-4825-b3e2-8fb3108124c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bc:37:83:85:d1:e4:a8:b3:34:99:a9:0d:a8: ad:dd:4d:4c:f5:0c:45:1c:84:6e:02:14:8d:24:d1: 63:2f:40:d6:b8:4c:1e:d6:28:81:f5:bf:0c:1b:5e: 9a:26:e1:49:0e:04:05:39:32:8a:24:f9:3b:44:33: dd:27:37:c9:5c:07:d9:c9:47:88:6d:ff:bf:19:04: 92:b5:db:58:54:f5:6b:54:ef:cc:1b:ba:8e:7f:1e: 5d:76:ae:0b:9b:99:df:0b:e8:b6:e0:34:25:4a:e8: 8b:25:10:52:76:a7:72:22:55:eb:ff:09:2c:31:49: 99:14:bb:9a:51:f1:67:da:2a:29:c7:9d:52:72:5e: 92:82:1e:47:3a:0c:75:b2:5f:4a:fd:13:1a:a4:67: 41:9f:53:b9:a0:7d:a2:c7:82:d4:98:56:de:6e:88: b8:d8:04:c0:6d:93:8f:eb:da:40:40:6b:ff:d5:56: 35:68:d1:35:f3:08:ec:3f:be:33:11:f7:f6:23:c9: d9:e7:50:b3:8f:be:a1:53:6b:ee:35:ea:28:ed:af: f0:92:a0:54:9d:d7:76:1a:88:6e:45:3d:85:08:51: 79:37:81:73:f0:9f:b2:72:f7:8a:ff:f0:69:30:3b: d4:25:0e:b9:ab:46:08:6c:27:af:e3:b4:1f:fb:bb: f5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A2:59:ED:BC:0F:FA:77:CE:A1:B0:EB:6B:CD:41:B9:05:C0:D4:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c5213a05-0625-3375-8382-9c42d5a3e1cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:67:e2:5c:e0:f6:60:f5:00:00:35:75:d7:fd:00:be:da:d5: b8:99:12:52:a1:ac:ce:d3:98:77:7a:d8:26:6b:11:14:d3:b5: e4:35:cd:6d:06:87:a3:58:c4:12:3f:83:87:16:1e:5e:4b:1b: 1e:1b:ff:6b:d2:53:55:39:c5:55:0b:34:54:9b:b0:d6:00:91: f0:32:f9:70:be:fc:93:fc:7a:11:12:14:ff:2f:90:30:9c:d3: de:0d:44:e4:e9:e8:df:01:94:64:39:ff:d9:45:56:14:66:e1: 19:e5:69:1b:9b:47:c8:2e:fb:4f:ea:34:38:ee:71:bf:65:cc: ad:ce:8e:b8:fe:1e:cf:a4:0c:ea:1e:d6:8f:87:ac:45:8e:6b: d3:ea:01:83:43:9e:d0:b4:e2:e4:de:9d:39:7e:e2:a8:bb:6a: 40:d1:4b:96:b4:1b:fd:47:33:16:51:9a:cf:e4:ba:d9:79:85: 3d:a6:34:5e:f3:c4:0f:5c:32:df:61:ed:57:20:fd:16:89:bb: 3a:56:ac:07:34:13:e1:8e:5c:39:ca:30:f9:c3:bb:6d:b2:56: fe:a2:3a:c8:ad:f3:ba:7c:a6:fc:ad:f0:d8:2f:56:4e:e2:98: cd:5f:7c:79:5b:c8:fc:e3:3b:68:d8:0b:b6:ff:9a:71:5f:78: 25:28:65:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjK0eS1nUJLonswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk NDhkZjg5ODEtNjhlNS00ODI1LWIzZTItOGZiMzEwODEyNGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbw3g4XR5KizNJmpDait3U1M9QxFHIRuAhSN JNFjL0DWuEwe1iiB9b8MG16aJuFJDgQFOTKKJPk7RDPdJzfJXAfZyUeIbf+/GQSS tdtYVPVrVO/MG7qOfx5ddq4Lm5nfC+i24DQlSuiLJRBSdqdyIlXr/wksMUmZFLua UfFn2iopx51Scl6Sgh5HOgx1sl9K/RMapGdBn1O5oH2ix4LUmFbeboi42ATAbZOP 69pAQGv/1VY1aNE18wjsP74zEff2I8nZ51Czj76hU2vuNeoo7a/wkqBUndd2Gohu RT2FCFF5N4Fz8J+ycveK//BpMDvUJQ65q0YIbCev47Qf+7v18wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+iWe28D/p3zqGw62vNQbkFwNSpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzUyMTNhMDUtMDYyNS0z Mzc1LTgzODItOWM0MmQ1YTNlMWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHln4lzg9mD1AAA1ddf9AL7a1biZElKhrM7TmHd62CZrERTTteQ1zW0G h6NYxBI/g4cWHl5LGx4b/2vSU1U5xVULNFSbsNYAkfAy+XC+/JP8ehESFP8vkDCc 094NROTp6N8BlGQ5/9lFVhRm4RnlaRubR8gu+0/qNDjucb9lzK3Ojrj+Hs+kDOoe 1o+HrEWOa9PqAYNDntC04uTenTl+4qi7akDRS5a0G/1HMxZRms/kutl5hT2mNF7z xA9cMt9h7Vcg/RaJuzpWrAc0E+GOXDnKMPnDu22yVv6iOsit87p8pvyt8NgvVk7i mM1ffHlbyPzjO2jYC7b/mnFfeCUoZak= -----END CERTIFICATE-----Generated at Sat Sep 5 06:09:47 2026 by rpki-client