$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d720d3d4-588b-310b-9b5e-0b5376deda30.roa File: d720d3d4-588b-310b-9b5e-0b5376deda30.roa (raw, json) Hash identifier: Ba659TeU0EC/1vWlG9X6ECE5nGVtIcgr9NaoioT8BR4= Subject key identifier: 01:5B:E8:3F:02:77:A0:CF:51:4B:FC:A8:74:4E:A9:EF:74:67:19:76 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA7873D89D3C80FD9C9001080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d720d3d4-588b-310b-9b5e-0b5376deda30.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.33.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:3d:89:d3:c8:0f:d9:c9:00:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8687f970-50b8-40bb-8c6d-915b6a5b4179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f4:29:13:03:fc:61:73:9a:78:ee:6f:fe:4a: 42:12:ec:3a:66:ef:36:3e:31:9a:9c:a8:5c:00:66: 61:b0:26:0b:36:60:27:44:6c:92:65:23:40:f4:2d: 42:ed:77:0e:b2:d0:de:9b:6e:b4:52:4a:27:82:1b: 89:bb:5c:24:06:b4:69:a8:ed:7b:3f:ed:e8:36:22: d5:b4:86:ee:1b:74:34:2e:f3:fd:1e:00:64:34:4d: fa:21:03:b8:57:ad:36:6f:2d:2f:77:05:c7:93:b6: 89:83:42:81:29:0e:ab:9a:86:1f:bd:a8:e0:57:5f: 08:7a:3f:f6:82:25:34:c1:fb:b8:0b:58:c9:f3:27: ed:9b:62:28:21:85:af:09:b1:3f:ed:f0:b6:86:d7: 7f:5d:de:7e:5e:61:73:fc:bb:fb:06:f9:f7:3f:6d: 54:72:f4:7d:fa:89:02:0b:0a:2c:88:68:38:b4:8b: 35:5d:65:35:89:e8:ed:31:30:6c:41:53:76:76:1b: 21:ee:6a:e4:5f:62:80:91:e6:11:13:a3:e1:da:af: 39:d8:a2:39:4b:dc:b9:6d:fd:0e:9b:f2:48:4a:17: ed:65:f2:ad:2c:d1:56:8c:64:ea:ca:4c:89:a8:a4: ad:08:8d:f9:e9:5e:da:cc:40:35:e4:51:a0:27:c6: 7a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5B:E8:3F:02:77:A0:CF:51:4B:FC:A8:74:4E:A9:EF:74:67:19:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d720d3d4-588b-310b-9b5e-0b5376deda30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:a7:e8:f1:48:d4:39:e8:18:6f:21:d1:cc:2a:55:39:1c:08: 5b:60:7b:75:e2:d6:57:fb:ec:4c:87:51:b3:69:58:f2:49:95: 83:a3:91:a3:94:7f:85:ed:ca:8e:70:44:12:ec:d5:59:ba:a2: 45:bc:82:b8:b5:5b:20:e1:4c:c1:a4:8b:9d:95:14:c7:fb:9b: ca:5f:3f:db:94:8b:68:c6:4b:c2:8b:5e:4a:37:45:a7:53:eb: 38:45:0d:74:c0:f3:ef:a7:62:6c:b5:1c:17:1b:d2:2a:18:a9: c7:79:98:20:60:62:20:69:32:3f:ef:b3:a1:8c:e1:81:f1:bb: 94:62:99:22:c9:ce:68:c3:14:68:a1:de:6b:d9:fc:b7:5d:14: 68:cd:92:82:ba:ce:c4:c1:0b:a2:cc:be:cc:55:d1:34:0d:83: d7:4a:89:04:24:59:fc:eb:39:d3:41:6a:ca:48:af:57:73:cc: 24:00:21:0c:6e:46:1a:d1:fd:2e:20:af:4c:02:22:03:1e:58: 47:fd:fb:7e:6a:e8:14:08:8b:e6:f8:85:6e:3e:9e:94:59:9b: 91:b5:f9:2b:18:55:51:f7:05:b4:c7:d5:2a:25:93:32:a8:27: c5:a2:6c:df:fe:5b:a3:57:33:37:a3:4f:25:09:c7:f8:28:cb: 60:c0:3b:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhz2J08gP2ckAEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODY4N2Y5NzAtNTBiOC00MGJiLThjNmQtOTE1YjZhNWI0MTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfQpEwP8YXOaeO5v/kpCEuw6Zu82PjGanKhc AGZhsCYLNmAnRGySZSNA9C1C7XcOstDem260UkonghuJu1wkBrRpqO17P+3oNiLV tIbuG3Q0LvP9HgBkNE36IQO4V602by0vdwXHk7aJg0KBKQ6rmoYfvajgV18Iej/2 giU0wfu4C1jJ8yftm2IoIYWvCbE/7fC2htd/Xd5+XmFz/Lv7Bvn3P21UcvR9+okC CwosiGg4tIs1XWU1iejtMTBsQVN2dhsh7mrkX2KAkeYRE6Ph2q852KI5S9y5bf0O m/JIShftZfKtLNFWjGTqykyJqKStCI356V7azEA15FGgJ8Z6JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFb6D8Cd6DPUUv8qHROqe90Zxl2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDcyMGQzZDQtNTg4Yi0z MTBiLTliNWUtMGI1Mzc2ZGVkYTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+n6PFI1DnoGG8h0cwqVTkcCFtge3Xi1lf77EyHUbNpWPJJlYOjkaOU f4Xtyo5wRBLs1Vm6okW8gri1WyDhTMGki52VFMf7m8pfP9uUi2jGS8KLXko3RadT 6zhFDXTA8++nYmy1HBcb0ioYqcd5mCBgYiBpMj/vs6GM4YHxu5RimSLJzmjDFGih 3mvZ/LddFGjNkoK6zsTBC6LMvsxV0TQNg9dKiQQkWfzrOdNBaspIr1dzzCQAIQxu RhrR/S4gr0wCIgMeWEf9+35q6BQIi+b4hW4+npRZm5G1+SsYVVH3BbTH1SolkzKo J8WibN/+W6NXMzejTyUJx/goy2DAO2E= -----END CERTIFICATE-----Generated at Sat Sep 5 08:08:41 2026 by rpki-client