$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e86bab7f-476b-3211-99b7-b56509930684.roa File: e86bab7f-476b-3211-99b7-b56509930684.roa (raw, json) Hash identifier: tCtF4rcqR8C0ScWjiH3s6ntgHcjQdSSmDsTYBpgkGus= Subject key identifier: 67:FD:32:0C:44:94:68:03:8B:49:BC:6E:81:A2:98:3A:A4:50:39:A7 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA7928C949D8024A9F1635B00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e86bab7f-476b-3211-99b7-b56509930684.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.33.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:8c:94:9d:80:24:a9:f1:63:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=afbac6f3-ff05-44ff-ab67-58b5a261e79d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ff:b6:96:36:97:50:12:2b:48:3e:c4:05:10: 89:7d:93:0c:9e:2a:1c:24:51:45:b5:12:77:10:29: 47:b5:10:66:1f:28:ad:16:b7:cc:e7:76:8f:e4:9d: 0d:f6:29:be:21:aa:1e:9c:fa:a5:07:d6:36:df:80: a9:da:27:30:54:31:0a:1b:fa:4b:15:8e:65:cc:ec: c8:36:92:13:87:f8:1f:78:8d:b6:c7:d9:89:ff:41: b2:d7:e3:f4:3a:a8:5e:41:f2:78:0e:d5:1a:99:d9: 7f:4f:a6:3e:ff:e3:11:66:bf:8f:e9:36:a3:7c:5e: 26:50:e9:fd:bd:36:43:9b:8c:b4:4f:f5:67:e3:84: 8a:fc:89:d5:7f:24:01:97:5d:92:f7:3c:dc:7e:3f: 72:61:60:bb:75:25:ca:49:b6:a0:b4:53:be:8b:c4: 8d:f2:a5:10:92:37:9b:e4:ca:84:a8:02:d0:c6:f1: 79:02:b1:75:d8:67:ef:20:03:19:1d:81:09:6d:c2: 0b:36:57:c7:f8:92:c2:a7:ed:af:8a:e9:99:d8:6f: 3a:55:5f:0f:02:20:be:e7:01:73:ee:fe:34:79:4b: 75:0e:bc:fd:7b:ea:28:63:a6:6c:eb:79:0e:55:7c: 63:c8:a9:89:df:91:4c:b9:62:4a:3e:a4:b4:dd:97: 5a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FD:32:0C:44:94:68:03:8B:49:BC:6E:81:A2:98:3A:A4:50:39:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e86bab7f-476b-3211-99b7-b56509930684.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:aa:ab:33:63:b5:f5:74:7a:87:00:bb:54:d2:3d:c1:60:7c: 1a:b2:7e:15:d3:f1:fd:08:1f:99:d8:c5:43:ce:75:69:37:5b: 0c:83:5a:17:79:52:8d:d5:30:41:64:19:9a:18:2c:91:c0:31: b9:2c:94:83:c2:5b:79:cf:04:59:dd:58:a5:ea:7d:46:5b:7b: 1e:87:be:ae:e8:93:51:23:b3:01:74:84:46:55:36:c7:90:10: 3c:5e:ce:f5:22:39:30:11:79:8e:39:73:6b:85:57:4b:c8:0b: b9:c6:46:12:9c:4d:81:ce:40:95:f7:a5:9c:31:9a:9d:f8:b7: bb:9d:7a:10:89:4b:47:dd:e8:a9:2c:8c:f2:a3:79:a1:8e:09: 5b:e4:0e:cb:1d:26:7d:91:bd:fa:ba:af:61:56:c8:5d:f5:89: 89:ef:36:11:54:bb:f2:9a:18:4e:aa:86:7d:b7:6c:33:43:75: cc:b2:ec:a8:4d:30:24:98:3d:0c:17:7f:ed:f2:20:84:1a:cc: b8:26:84:9c:03:7b:9c:76:db:55:8c:6c:4e:b6:98:f0:b6:f5: fd:5f:02:81:7d:94:6e:13:b2:52:5c:3e:ef:68:b0:f6:1d:31: cf:d1:80:bb:72:97:1f:2c:2a:7e:04:c3:f1:83:b6:4f:8f:2f: fe:ef:db:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkoyUnYAkqfFjWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YWZiYWM2ZjMtZmYwNS00NGZmLWFiNjctNThiNWEyNjFlNzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/+2ljaXUBIrSD7EBRCJfZMMniocJFFFtRJ3 EClHtRBmHyitFrfM53aP5J0N9im+IaoenPqlB9Y234Cp2icwVDEKG/pLFY5lzOzI NpITh/gfeI22x9mJ/0Gy1+P0OqheQfJ4DtUamdl/T6Y+/+MRZr+P6TajfF4mUOn9 vTZDm4y0T/Vn44SK/InVfyQBl12S9zzcfj9yYWC7dSXKSbagtFO+i8SN8qUQkjeb 5MqEqALQxvF5ArF12GfvIAMZHYEJbcILNlfH+JLCp+2viumZ2G86VV8PAiC+5wFz 7v40eUt1Drz9e+ooY6Zs63kOVXxjyKmJ35FMuWJKPqS03ZdauwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGf9MgxElGgDi0m8boGimDqkUDmnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTg2YmFiN2YtNDc2Yi0z MjExLTk5YjctYjU2NTA5OTMwNjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuqqzNjtfV0eocAu1TSPcFgfBqyfhXT8f0IH5nYxUPOdWk3WwyDWhd5 Uo3VMEFkGZoYLJHAMbkslIPCW3nPBFndWKXqfUZbex6Hvq7ok1EjswF0hEZVNseQ EDxezvUiOTAReY45c2uFV0vIC7nGRhKcTYHOQJX3pZwxmp34t7udehCJS0fd6Kks jPKjeaGOCVvkDssdJn2Rvfq6r2FWyF31iYnvNhFUu/KaGE6qhn23bDNDdcyy7KhN MCSYPQwXf+3yIIQazLgmhJwDe5x221WMbE62mPC29f1fAoF9lG4TslJcPu9osPYd Mc/RgLtylx8sKn4Ew/GDtk+PL/7v29Y= -----END CERTIFICATE-----Generated at Sat Sep 5 05:02:11 2026 by rpki-client