$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3d4e8bf-bf55-38de-9130-ab101d948b21.roa File: d3d4e8bf-bf55-38de-9130-ab101d948b21.roa (raw, json) Hash identifier: NNGwsT6NTqYTTba7Io1gGpRnoLc/e0vjtHZE0ws2W0M= Subject key identifier: 4D:47:B9:EE:0A:BC:4F:F6:1C:81:EC:32:89:C0:41:76:34:9F:99:35 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA7928A1B6ED9D35E8C5C3240 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3d4e8bf-bf55-38de-9130-ab101d948b21.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.33.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:8a:1b:6e:d9:d3:5e:8c:5c:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5db75b81-a6f5-4156-9e71-8a21c47316f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9f:43:19:b7:fb:45:77:27:8f:59:d7:ab:64: d7:39:d2:e2:5b:32:59:9d:f3:81:9d:4a:86:47:4c: 14:14:13:72:f4:b8:6f:61:b4:d4:d2:f4:4e:7c:2b: 37:4f:e8:87:78:78:76:e2:42:d2:c8:ed:ab:b4:63: 75:c8:32:b9:7e:47:98:fb:0a:51:3b:21:07:a2:77: 3c:88:e2:7f:b3:1b:d1:de:17:17:d1:b0:bb:48:15: 1b:07:0f:c7:71:8c:91:b0:53:2e:20:8c:3b:0c:84: 6e:12:33:ee:82:a6:2c:76:1f:cd:7b:68:98:3b:22: 00:b4:00:bd:b2:d4:16:de:da:5e:5d:49:30:96:de: ba:8c:f3:b6:0d:57:86:95:c3:91:bc:7c:08:a0:9e: 44:f0:dd:02:4b:10:24:d8:81:d8:36:1c:53:77:ca: 2c:8b:bf:4a:79:4c:01:7f:ea:85:f4:ff:7e:68:b2: 45:51:ba:50:ba:b9:7e:b9:91:8b:20:94:71:df:9b: 19:64:c8:6a:e6:92:49:43:57:70:84:5f:5f:9a:33: 1d:1f:2b:70:84:04:a3:8d:0c:4a:78:bd:ce:9f:f3: ea:bd:d0:89:6b:89:be:e3:38:39:73:61:c5:18:1a: a9:95:f7:bc:99:c1:c5:cc:de:70:01:30:7d:52:d0: 34:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:47:B9:EE:0A:BC:4F:F6:1C:81:EC:32:89:C0:41:76:34:9F:99:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3d4e8bf-bf55-38de-9130-ab101d948b21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:cb:fe:7a:ec:81:26:31:9d:c2:99:99:6e:6a:9f:67:a3:77: d2:b8:6f:3b:5c:31:68:ea:28:0d:5b:1d:e3:ed:f9:53:d6:1a: 40:c9:ea:8a:92:aa:15:10:70:9b:7c:7e:d9:bf:2e:f3:de:d1: 4b:96:a4:c0:48:ea:87:52:b0:06:00:8c:d9:0c:75:9a:8a:da: db:4c:82:c0:22:8c:65:c0:0a:15:cd:69:73:a4:83:2e:f5:51: ff:f1:ab:dc:02:ed:bf:dc:44:c5:fc:1b:70:13:f1:ca:e3:02: d8:b7:b2:1e:39:d4:c3:ab:55:6b:f8:91:56:23:6b:ba:6c:52: 08:2b:76:e4:59:77:8f:98:12:41:aa:60:f2:62:2a:3e:a5:9a: 30:2f:b8:45:a1:f9:ca:b3:72:23:a4:bf:52:27:2c:eb:01:85: 30:be:a8:d1:fa:7c:4f:65:9d:f5:42:66:dc:5f:73:2e:ca:8c: 24:c0:53:bc:d6:d0:32:2f:e8:a3:8e:4c:f2:54:71:fe:c1:02: 5f:4c:50:71:44:46:1c:a7:5b:e2:1f:10:13:31:f1:a9:4c:8c: 5b:f6:d7:10:fd:87:d5:cc:9f:12:63:cc:34:75:eb:71:bf:90: 7b:4a:cd:b7:dc:bc:cc:06:1f:76:65:f9:9a:49:4f:30:32:02: f4:cc:cd:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkoobbtnTXoxcMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NWRiNzViODEtYTZmNS00MTU2LTllNzEtOGEyMWM0NzMxNmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ9DGbf7RXcnj1nXq2TXOdLiWzJZnfOBnUqG R0wUFBNy9LhvYbTU0vROfCs3T+iHeHh24kLSyO2rtGN1yDK5fkeY+wpROyEHonc8 iOJ/sxvR3hcX0bC7SBUbBw/HcYyRsFMuIIw7DIRuEjPugqYsdh/Ne2iYOyIAtAC9 stQW3tpeXUkwlt66jPO2DVeGlcORvHwIoJ5E8N0CSxAk2IHYNhxTd8osi79KeUwB f+qF9P9+aLJFUbpQurl+uZGLIJRx35sZZMhq5pJJQ1dwhF9fmjMdHytwhASjjQxK eL3On/PqvdCJa4m+4zg5c2HFGBqplfe8mcHFzN5wATB9UtA0+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1Hue4KvE/2HIHsMonAQXY0n5k1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDNkNGU4YmYtYmY1NS0z OGRlLTkxMzAtYWIxMDFkOTQ4YjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/L/nrsgSYxncKZmW5qn2ejd9K4bztcMWjqKA1bHePt+VPWGkDJ6oqS qhUQcJt8ftm/LvPe0UuWpMBI6odSsAYAjNkMdZqK2ttMgsAijGXAChXNaXOkgy71 Uf/xq9wC7b/cRMX8G3AT8crjAti3sh451MOrVWv4kVYja7psUggrduRZd4+YEkGq YPJiKj6lmjAvuEWh+cqzciOkv1InLOsBhTC+qNH6fE9lnfVCZtxfcy7KjCTAU7zW 0DIv6KOOTPJUcf7BAl9MUHFERhynW+IfEBMx8alMjFv21xD9h9XMnxJjzDR163G/ kHtKzbfcvMwGH3Zl+ZpJTzAyAvTMzaE= -----END CERTIFICATE-----Generated at Sat Sep 5 06:40:48 2026 by rpki-client