$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f9b17776-29ce-332b-bfef-70c3a6e26fae.roa File: f9b17776-29ce-332b-bfef-70c3a6e26fae.roa (raw, json) Hash identifier: vzk8uwM++E3Nz8JZIuSL1/vW4zBAnMG0Esb4HQXxgEE= Subject key identifier: AE:AF:D0:A0:F6:73:C7:32:8B:E6:58:FB:22:4C:0D:C5:D5:2E:B4:7A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE38CACD74EB1A840BB022600 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f9b17776-29ce-332b-bfef-70c3a6e26fae.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 8069 IP address blocks: 20.33.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:ac:d7:4e:b1:a8:40:bb:02:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=e2455584-838c-44c6-b7f8-42b34c279162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b3:de:4e:74:b1:1a:46:b1:84:59:48:17:97: 87:12:5a:18:da:71:a5:4a:f6:c0:5a:1a:64:36:a5: 78:1a:f3:1d:e9:58:35:f2:e0:54:df:68:5d:75:41: f4:30:ab:ba:fb:94:cf:9a:72:6b:15:be:19:93:df: 84:26:b8:28:48:5c:30:39:2c:df:9b:28:29:0b:d3: ac:d8:9f:ef:ae:60:db:26:db:76:fa:a3:e9:4e:a7: e4:98:bc:97:e9:10:34:27:a6:9e:d9:9c:8c:7b:88: ab:57:15:f1:0d:37:9c:93:4f:3e:5b:d3:fd:f8:40: a6:82:da:6e:99:55:a6:d0:82:9c:b2:31:eb:9c:40: 23:30:01:b2:48:f5:17:84:0b:d9:f0:4c:2e:35:c6: c3:82:c1:5a:b3:1e:f7:f0:8f:78:7b:7c:10:6c:fc: 92:90:08:78:ca:d3:2e:5f:2d:c3:ad:6e:5e:46:48: 30:99:07:e7:a1:bd:cc:88:69:bf:1e:d3:c4:7c:47: fe:16:82:8a:f4:8d:c1:e5:23:8c:2a:21:9d:d7:78: 44:a7:db:16:de:ec:b0:a8:ef:f3:bc:ea:7d:72:f6: 25:65:c7:c8:37:58:d7:ad:2a:e3:5c:37:43:12:20: ab:f1:8f:6c:7f:25:3f:59:f6:2f:f1:1a:f5:b0:68: 71:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AF:D0:A0:F6:73:C7:32:8B:E6:58:FB:22:4C:0D:C5:D5:2E:B4:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f9b17776-29ce-332b-bfef-70c3a6e26fae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:35:ea:e7:e8:86:7f:dc:e0:b8:af:13:e7:8c:d6:bc:18:2e: 87:46:1e:03:de:be:d8:2b:18:d1:40:b8:7c:af:a2:43:92:6b: 17:53:dc:90:ae:6e:ac:4f:18:f1:23:64:d7:f5:d7:f3:87:f3: 3a:27:2f:bd:a2:bc:b0:00:86:79:ff:93:27:12:83:22:09:aa: e1:2c:28:6e:3c:dc:eb:03:c2:17:9d:53:d1:b4:aa:b3:7f:8a: f8:c9:38:3f:db:b1:4c:82:36:37:80:e1:9b:4b:22:2d:fb:82: 31:88:e0:07:f1:93:dd:90:03:fc:34:0b:a6:da:e7:22:df:9b: 08:9b:17:e4:89:60:f7:2b:3b:a8:6e:bd:7d:3c:0f:bb:c4:97: 8b:73:ed:46:36:cd:dd:dd:d7:4a:76:f9:88:d8:1d:4e:6c:1f: d2:c7:4f:e2:24:b3:7a:38:74:0d:7e:fd:66:b4:8b:69:d2:56: ec:1c:84:00:f4:95:47:71:7f:57:66:11:74:cb:d1:98:2a:ba: 34:cc:db:7a:64:3f:25:0f:1d:3e:8e:44:0c:87:45:3b:b2:b6: 0e:88:c2:0e:60:23:bc:c0:6f:2b:16:1f:02:c7:91:9d:9b:0b: dc:8f:6f:16:fe:5d:0c:07:af:1f:b1:f7:3f:2a:f9:6d:ff:cd: 35:a1:35:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjKzXTrGoQLsCJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk ZTI0NTU1ODQtODM4Yy00NGM2LWI3ZjgtNDJiMzRjMjc5MTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorPeTnSxGkaxhFlIF5eHEloY2nGlSvbAWhpk NqV4GvMd6Vg18uBU32hddUH0MKu6+5TPmnJrFb4Zk9+EJrgoSFwwOSzfmygpC9Os 2J/vrmDbJtt2+qPpTqfkmLyX6RA0J6ae2ZyMe4irVxXxDTeck08+W9P9+ECmgtpu mVWm0IKcsjHrnEAjMAGySPUXhAvZ8EwuNcbDgsFasx738I94e3wQbPySkAh4ytMu Xy3DrW5eRkgwmQfnob3MiGm/HtPEfEf+FoKK9I3B5SOMKiGd13hEp9sW3uywqO/z vOp9cvYlZcfIN1jXrSrjXDdDEiCr8Y9sfyU/WfYv8Rr1sGhxfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6v0KD2c8cyi+ZY+yJMDcXVLrR6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjliMTc3NzYtMjljZS0z MzJiLWJmZWYtNzBjM2E2ZTI2ZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJY16ufohn/c4LivE+eM1rwYLodGHgPevtgrGNFAuHyvokOSaxdT3JCu bqxPGPEjZNf11/OH8zonL72ivLAAhnn/kycSgyIJquEsKG483OsDwhedU9G0qrN/ ivjJOD/bsUyCNjeA4ZtLIi37gjGI4Afxk92QA/w0C6ba5yLfmwibF+SJYPcrO6hu vX08D7vEl4tz7UY2zd3d10p2+YjYHU5sH9LHT+Iks3o4dA1+/Wa0i2nSVuwchAD0 lUdxf1dmEXTL0ZgqujTM23pkPyUPHT6ORAyHRTuytg6Iwg5gI7zAbysWHwLHkZ2b C9yPbxb+XQwHrx+x9z8q+W3/zTWhNQ8= -----END CERTIFICATE-----Generated at Sat Sep 5 06:46:05 2026 by rpki-client