$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d851fbe8-225a-3c6f-8e78-4c283a99fd68.roa File: d851fbe8-225a-3c6f-8e78-4c283a99fd68.roa (raw, json) Hash identifier: LXKumpS+IaqjFa//AUN5Fodt3zl8zR1x4dUkur6qWew= Subject key identifier: 81:81:A3:A5:31:D8:CC:79:0F:33:24:EC:F4:28:55:25:6D:33:CF:15 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EC0A7570BE12A67B151E00D00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d851fbe8-225a-3c6f-8e78-4c283a99fd68.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:57:0b:e1:2a:67:b1:51:e0:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=32a9cdcd-2437-420b-b1b4-d3707a93411f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:58:4e:99:dc:7f:19:78:8b:a6:ae:41:1d:2f: cc:db:0a:67:c7:10:39:0a:01:1a:f0:dd:b9:25:46: e4:77:d7:d6:07:e6:32:78:fb:7c:8f:f4:c4:67:e8: 68:e9:97:6b:d4:94:cb:ff:87:e6:44:ba:1a:29:46: 17:ef:6e:92:71:6d:eb:a3:f2:6f:9a:2a:f6:24:89: 14:07:ae:c1:06:8d:f7:cb:9b:71:d0:b1:f9:49:fb: 15:6c:54:ce:aa:a4:5a:3d:b3:00:ef:f5:07:c1:b5: f0:c5:0d:bd:c1:55:8c:71:39:69:fb:fa:2e:ab:5a: 14:75:89:f2:b6:b2:2d:28:44:82:3f:86:ed:20:d7: d4:c3:1e:08:b7:b7:47:1c:ed:d1:c0:8b:5a:ef:24: d8:28:d5:ff:1a:9a:44:9c:f2:62:bd:ff:40:c8:b4: 0a:34:f3:5b:ad:e4:6b:5c:bc:ed:7f:6f:a0:66:57: 36:78:1c:4b:e3:05:32:6f:36:31:df:be:42:bf:da: f7:05:3a:63:af:6c:9f:6d:f3:2e:e4:94:1c:21:48: 74:b6:7d:a2:12:28:c7:71:2a:f4:79:82:4e:ae:18: 8a:76:09:e5:b0:1a:54:17:90:25:84:95:ab:7e:e8: 26:aa:0b:f2:ed:44:03:35:22:51:f5:a1:b7:3c:aa: b4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:81:A3:A5:31:D8:CC:79:0F:33:24:EC:F4:28:55:25:6D:33:CF:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d851fbe8-225a-3c6f-8e78-4c283a99fd68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:f0:de:14:c7:98:5f:81:64:72:22:85:21:b7:68:23:3d:fc: f3:ac:12:39:d9:c1:13:a9:dc:d9:95:80:7c:3d:9d:57:ab:4a: 39:94:f9:58:95:c4:4f:bb:79:e7:02:41:d9:9c:f6:d7:84:f8: b5:74:6a:56:39:2a:b6:1d:59:59:50:96:55:71:8c:13:8f:af: 97:7a:92:32:3d:67:22:80:12:1a:9b:39:7b:3a:c7:a8:91:43: 0f:c0:99:a4:bf:ea:85:9a:11:75:9b:b3:eb:d7:1c:7a:77:26: 1b:2f:4f:bb:99:9e:6e:bb:65:29:d1:31:e5:7c:54:fc:df:3c: 81:1d:5a:5b:10:5c:74:f8:6a:60:4c:ad:c0:94:3f:2d:fe:65: 50:77:bf:70:b2:89:29:cc:81:02:c7:cf:1d:ce:45:5c:a9:ab: d9:a6:99:f3:b4:ba:14:aa:2a:69:98:32:6c:90:5d:2e:ed:fa: 0a:33:6e:3d:2a:9d:70:8a:a1:8e:72:f7:53:17:07:8d:aa:42: cf:d6:21:69:09:ef:37:c5:8a:ea:47:91:71:c6:c6:69:e9:2c: 11:d2:02:7f:97:bd:2a:43:f0:88:aa:f4:3f:18:a4:01:e3:f9: f2:71:b9:e8:39:79:dd:66:dc:98:0c:98:ac:7c:5b:65:ac:c8: de:e2:68:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Ap1cL4SpnsVHgDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk MzJhOWNkY2QtMjQzNy00MjBiLWIxYjQtZDM3MDdhOTM0MTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVhOmdx/GXiLpq5BHS/M2wpnxxA5CgEa8N25 JUbkd9fWB+YyePt8j/TEZ+ho6Zdr1JTL/4fmRLoaKUYX726ScW3ro/Jvmir2JIkU B67BBo33y5tx0LH5SfsVbFTOqqRaPbMA7/UHwbXwxQ29wVWMcTlp+/ouq1oUdYny trItKESCP4btINfUwx4It7dHHO3RwIta7yTYKNX/GppEnPJivf9AyLQKNPNbreRr XLztf2+gZlc2eBxL4wUybzYx375Cv9r3BTpjr2yfbfMu5JQcIUh0tn2iEijHcSr0 eYJOrhiKdgnlsBpUF5AlhJWrfugmqgvy7UQDNSJR9aG3PKq0owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGBo6Ux2Mx5DzMk7PQoVSVtM88VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDg1MWZiZTgtMjI1YS0z YzZmLThlNzgtNGMyODNhOTlmZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjw3hTHmF+BZHIihSG3aCM9/POsEjnZwROp3NmVgHw9nVerSjmU+ViV xE+7eecCQdmc9teE+LV0alY5KrYdWVlQllVxjBOPr5d6kjI9ZyKAEhqbOXs6x6iR Qw/AmaS/6oWaEXWbs+vXHHp3JhsvT7uZnm67ZSnRMeV8VPzfPIEdWlsQXHT4amBM rcCUPy3+ZVB3v3CyiSnMgQLHzx3ORVypq9mmmfO0uhSqKmmYMmyQXS7t+gozbj0q nXCKoY5y91MXB42qQs/WIWkJ7zfFiupHkXHGxmnpLBHSAn+XvSpD8Iiq9D8YpAHj +fJxueg5ed1m3JgMmKx8W2WsyN7iaDQ= -----END CERTIFICATE-----Generated at Sat Sep 5 06:23:03 2026 by rpki-client