$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/edf37cc8-43ef-3f95-8478-5c871e14d557.roa File: edf37cc8-43ef-3f95-8478-5c871e14d557.roa (raw, json) Hash identifier: KPPXyvt5xEge8cGIm4OOWqZMsjxGigyLWf71IIDBQVQ= Subject key identifier: 65:11:47:2F:CD:03:95:AC:96:0A:E0:F7:93:70:1C:9F:A4:08:63:CF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EC7A1D9B79DA863DD29EC3010 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/edf37cc8-43ef-3f95-8478-5c871e14d557.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:d9:b7:9d:a8:63:dd:29:ec:30:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=408fd5ba-8eea-4e7a-bf01-6fcfb8452e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:85:78:0d:f8:c5:38:b6:fe:7a:ac:9c:d6:97: e8:b4:01:72:27:e7:a6:4e:9f:60:42:20:4c:20:b0: 3b:94:28:25:1d:81:91:af:97:6c:14:9c:ea:c1:78: 8f:6a:3c:70:1d:ee:8e:6d:d2:53:28:2f:c4:cb:94: 71:60:6e:e6:39:86:a8:df:0e:d3:b9:65:fa:38:f6: ec:68:d1:5e:8a:91:fb:5e:84:d9:c7:a1:f5:cf:c6: c7:91:0c:4a:32:a7:06:db:64:8b:8a:58:d1:29:9e: 0c:3b:4c:59:6c:68:d0:ed:8b:d1:1a:3a:21:94:cf: 40:b2:84:bd:51:8d:70:b9:03:c8:fc:b6:b7:9f:e5: e8:74:21:9a:9e:99:cc:21:a9:34:07:d3:3b:a8:0d: 44:7d:d7:ce:ce:27:4e:ab:c8:e7:b8:72:34:90:5f: 39:f4:49:59:de:f0:5a:fb:61:1e:ff:f0:39:e9:ec: d9:65:06:a5:53:18:ea:05:0e:d9:80:f4:34:3d:7a: cd:36:45:7e:23:66:21:4d:ab:c9:44:e5:9d:ea:d0: 17:18:02:bd:89:dc:bb:fd:71:42:5f:f1:a0:01:21: d8:42:f1:73:a7:d8:ad:0d:e3:68:2a:f4:0d:55:14: f5:a5:13:bc:66:48:b0:f4:7d:c0:f8:d4:ff:5b:48: ed:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:11:47:2F:CD:03:95:AC:96:0A:E0:F7:93:70:1C:9F:A4:08:63:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/edf37cc8-43ef-3f95-8478-5c871e14d557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:26:1c:5c:3f:e3:89:ba:ad:4e:f5:54:5d:16:ad:84:b0:9e: 58:4e:87:62:6f:c6:b8:94:fb:da:d3:8e:78:4f:32:a0:77:e1: 27:a9:d3:30:3c:8e:bb:61:a9:fe:bd:a6:76:40:9e:5d:a5:47: 0c:0d:54:f0:52:fc:a1:37:62:ea:3f:09:c6:b1:91:75:31:bb: a7:8a:1e:0a:d2:79:8a:95:96:e3:5e:e9:7a:04:ed:33:9f:7a: 28:30:7d:ce:a3:6d:eb:9f:39:57:a7:1b:a4:04:0b:97:3e:d5: d5:85:08:84:dc:5b:e9:a5:1e:62:f1:0c:de:2c:de:df:81:e5: 67:fe:02:7c:1e:87:42:2b:39:a4:c6:c4:55:52:25:a5:1b:cd: 4e:d9:9c:e2:2a:b7:a4:5f:f3:a0:30:e0:85:13:24:05:eb:52: 0b:45:05:3a:03:8e:a5:5a:7b:14:42:bf:28:ba:a8:1a:16:2e: 4c:e9:c4:16:29:58:09:4e:ea:35:4b:c2:b4:4f:5e:d2:80:ba: f9:93:ec:19:55:e3:77:9f:f0:c4:b7:18:d6:b9:f6:6f:55:1d: 59:2d:a6:df:4e:39:80:ac:a5:29:bd:25:5b:27:21:97:91:12: a1:9f:f8:6b:08:ab:bd:0f:81:97:e4:6f:ab:6b:49:af:cc:c3: a0:19:80:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Hodm3nahj3SnsMBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk NDA4ZmQ1YmEtOGVlYS00ZTdhLWJmMDEtNmZjZmI4NDUyZTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIV4DfjFOLb+eqyc1pfotAFyJ+emTp9gQiBM ILA7lCglHYGRr5dsFJzqwXiPajxwHe6ObdJTKC/Ey5RxYG7mOYao3w7TuWX6OPbs aNFeipH7XoTZx6H1z8bHkQxKMqcG22SLiljRKZ4MO0xZbGjQ7YvRGjohlM9AsoS9 UY1wuQPI/La3n+XodCGanpnMIak0B9M7qA1EfdfOzidOq8jnuHI0kF859ElZ3vBa +2Ee//A56ezZZQalUxjqBQ7ZgPQ0PXrNNkV+I2YhTavJROWd6tAXGAK9idy7/XFC X/GgASHYQvFzp9itDeNoKvQNVRT1pRO8Zkiw9H3A+NT/W0jteQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGURRy/NA5Wslgrg95NwHJ+kCGPPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWRmMzdjYzgtNDNlZi0z Zjk1LTg0NzgtNWM4NzFlMTRkNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcmHFw/44m6rU71VF0WrYSwnlhOh2JvxriU+9rTjnhPMqB34Sep0zA8 jrthqf69pnZAnl2lRwwNVPBS/KE3Yuo/CcaxkXUxu6eKHgrSeYqVluNe6XoE7TOf eigwfc6jbeufOVenG6QEC5c+1dWFCITcW+mlHmLxDN4s3t+B5Wf+Anweh0IrOaTG xFVSJaUbzU7ZnOIqt6Rf86Aw4IUTJAXrUgtFBToDjqVaexRCvyi6qBoWLkzpxBYp WAlO6jVLwrRPXtKAuvmT7BlV43ef8MS3GNa59m9VHVktpt9OOYCspSm9JVsnIZeR EqGf+GsIq70PgZfkb6trSa/Mw6AZgBA= -----END CERTIFICATE-----Generated at Sat Sep 5 05:23:45 2026 by rpki-client