$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d760a4d0-1f4e-3320-be56-0e534bf615df.roa File: d760a4d0-1f4e-3320-be56-0e534bf615df.roa (raw, json) Hash identifier: ScNdDldsJCV+WOmy44iishTW1+Y21Jo7T0/SnXWzTag= Subject key identifier: 13:87:11:DE:2B:08:92:7D:69:0C:02:99:2E:0A:8D:62:40:43:10:DE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EC7A1D958C9B216ADF3B03F80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d760a4d0-1f4e-3320-be56-0e534bf615df.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:d9:58:c9:b2:16:ad:f3:b0:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=3f518e4d-7698-40d3-8f35-5b5a91ae7312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a7:30:f9:33:d0:cd:24:b1:94:16:35:e4:53: e8:d9:82:08:2f:c5:c9:6d:e1:eb:f0:fa:b9:a3:37: 9e:85:57:be:f5:71:eb:42:48:70:ba:ca:60:09:9b: 96:95:c5:f6:93:9b:34:0e:92:b6:10:c9:1a:aa:23: c7:01:d9:5b:21:83:cf:82:0e:36:f4:39:8e:bc:4b: 42:6c:95:23:55:6a:13:21:3f:bf:e6:ff:aa:0e:82: b5:d0:0e:8f:26:7f:af:e5:a2:a9:e6:f6:ca:b1:f6: d3:0b:9b:ec:48:c7:74:81:b0:ad:a4:f6:ae:b5:ba: 37:98:df:c4:79:eb:a9:e5:cb:9d:8f:a6:52:97:f4: 73:aa:99:e6:61:ac:2c:2f:e3:a0:b4:75:56:21:13: 7a:28:fd:23:e0:ab:73:18:0b:15:d1:f5:76:5e:40: a7:c4:a7:7c:8a:c6:6b:07:14:58:ed:83:6f:9a:d6: f5:8b:e7:91:8b:6e:99:47:be:b3:64:4a:2b:0b:04: cb:51:27:a6:50:53:77:f0:70:12:64:f4:9e:7e:8e: 36:13:c4:59:45:58:52:40:30:98:de:94:27:40:d5: c9:03:25:0a:02:99:f8:db:2e:5a:5f:30:4c:99:ef: 79:a1:c4:70:a8:05:b5:1a:7d:58:60:7c:44:43:49: 5e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:87:11:DE:2B:08:92:7D:69:0C:02:99:2E:0A:8D:62:40:43:10:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d760a4d0-1f4e-3320-be56-0e534bf615df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:81:64:4f:ba:51:04:f8:3f:fb:81:54:64:0a:1f:8c:65:e2: d6:aa:e0:91:7f:15:da:c5:47:92:69:c6:d0:1d:63:58:59:45: 0f:82:07:ca:9b:64:5c:49:ab:6d:da:c9:91:d7:96:01:82:d5: 63:52:99:41:4b:ab:86:86:ef:54:fa:4b:44:a4:6a:4c:3f:4e: 7c:b8:02:33:ef:48:e1:ae:46:3b:3d:af:f9:5d:15:60:b6:12: 44:75:37:fc:e0:1e:89:b2:f9:e5:4b:0c:9f:6d:70:47:f4:e2: 6e:ed:b1:be:32:4f:b8:22:ff:b5:58:6f:a6:b0:01:7c:21:f1: 06:bb:8d:31:29:88:9b:99:30:7a:fd:40:46:0c:1f:20:38:f3: 3d:31:f8:99:7c:c7:15:80:82:47:27:f7:f2:0b:5f:53:41:0e: 5c:03:28:b8:84:3f:35:bb:03:5c:49:d2:6d:b3:b0:69:32:67: 17:d4:e7:39:3c:fb:fc:3d:92:1d:81:a6:c9:bb:99:7a:f4:3b: 27:c9:5f:4e:a1:d7:24:20:8a:9a:4c:c5:60:28:5f:f2:e5:5f: 1a:62:9c:97:34:bf:28:f6:10:2c:cd:eb:8c:ec:68:f1:c2:d2: 8d:93:05:09:70:93:25:ca:a6:39:16:cc:23:1d:4a:8a:76:29: d8:de:3a:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HodlYybIWrfOwP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk M2Y1MThlNGQtNzY5OC00MGQzLThmMzUtNWI1YTkxYWU3MzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqcw+TPQzSSxlBY15FPo2YIIL8XJbeHr8Pq5 ozeehVe+9XHrQkhwuspgCZuWlcX2k5s0DpK2EMkaqiPHAdlbIYPPgg429DmOvEtC bJUjVWoTIT+/5v+qDoK10A6PJn+v5aKp5vbKsfbTC5vsSMd0gbCtpPautbo3mN/E eeup5cudj6ZSl/RzqpnmYawsL+OgtHVWIRN6KP0j4KtzGAsV0fV2XkCnxKd8isZr BxRY7YNvmtb1i+eRi26ZR76zZEorCwTLUSemUFN38HASZPSefo42E8RZRVhSQDCY 3pQnQNXJAyUKApn42y5aXzBMme95ocRwqAW1Gn1YYHxEQ0leEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOHEd4rCJJ9aQwCmS4KjWJAQxDeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDc2MGE0ZDAtMWY0ZS0z MzIwLWJlNTYtMGU1MzRiZjYxNWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWBZE+6UQT4P/uBVGQKH4xl4taq4JF/FdrFR5JpxtAdY1hZRQ+CB8qb ZFxJq23ayZHXlgGC1WNSmUFLq4aG71T6S0Skakw/Tny4AjPvSOGuRjs9r/ldFWC2 EkR1N/zgHomy+eVLDJ9tcEf04m7tsb4yT7gi/7VYb6awAXwh8Qa7jTEpiJuZMHr9 QEYMHyA48z0x+Jl8xxWAgkcn9/ILX1NBDlwDKLiEPzW7A1xJ0m2zsGkyZxfU5zk8 +/w9kh2Bpsm7mXr0OyfJX06h1yQgippMxWAoX/LlXxpinJc0vyj2ECzN64zsaPHC 0o2TBQlwkyXKpjkWzCMdSop2KdjeOh4= -----END CERTIFICATE-----Generated at Sat Sep 5 06:03:15 2026 by rpki-client