$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0d49e71e-15ef-35d8-87b6-e8933f1ce4d7.roa File: 0d49e71e-15ef-35d8-87b6-e8933f1ce4d7.roa (raw, json) Hash identifier: gTmc+InBWHfxnNYVXsDK4anQHSLbkDZ7ofkM9KmHcbs= Subject key identifier: 54:37:C4:AF:89:99:26:D1:54:D2:A3:FD:2E:6A:EE:CD:97:DC:9D:CD Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F2ABD24C80BB5C4FB623A5FB0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0d49e71e-15ef-35d8-87b6-e8933f1ce4d7.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:24:c8:0b:b5:c4:fb:62:3a:5f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=555da0c7-0157-414c-979d-b45cee61866f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:61:f0:3e:db:88:3f:87:1f:66:49:6a:c7:da: b7:b3:03:36:08:8a:d5:2b:dd:8c:ab:12:21:71:4d: e7:e7:ee:86:42:06:b2:6b:85:ff:71:23:33:13:87: e5:77:52:2f:05:93:5e:e1:32:aa:28:45:9d:b5:8a: a9:a9:74:11:78:fa:de:83:44:6a:3f:7f:1a:7b:cd: 0d:15:b4:2a:2a:d3:83:e1:2e:3d:69:2d:5f:ce:ac: 75:00:41:f7:7f:79:31:8d:ba:78:32:a2:eb:b6:ba: 79:9b:7a:48:04:f9:a4:c6:02:84:38:25:95:1f:74: 72:cc:a5:b4:93:5e:fe:1f:b7:3c:63:b6:0b:89:b6: 89:2c:bc:d9:d3:af:e5:e4:77:b7:83:6a:26:83:7f: 4c:1e:19:16:5a:60:97:72:27:e5:66:85:16:55:7a: 00:16:5e:c5:97:d8:e3:56:c1:c7:94:e4:b4:98:4e: 1a:00:a0:88:37:cd:62:77:b9:f7:c1:56:e5:d9:cf: c0:1b:45:54:a3:71:e8:d9:e1:7a:23:7e:27:2f:c3: e6:89:e6:09:d4:3b:9d:da:44:dc:34:54:d9:ae:d8: a2:63:ad:d4:96:88:aa:8f:3e:7e:8a:df:59:fc:cd: c4:da:6e:18:40:2d:35:46:b2:59:fb:65:ec:e6:47: 54:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:37:C4:AF:89:99:26:D1:54:D2:A3:FD:2E:6A:EE:CD:97:DC:9D:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0d49e71e-15ef-35d8-87b6-e8933f1ce4d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:7d:ca:96:39:45:21:35:49:2b:7c:ee:72:2d:e8:a7:ba:d4: 13:82:02:7c:d0:68:01:65:20:34:a2:62:38:54:de:e6:f9:3d: ff:88:2b:6e:ad:ba:c2:ab:ef:48:4c:89:ab:ee:32:7d:74:97: 9f:05:38:3d:6f:13:93:0f:00:98:23:8d:4e:cf:d4:a2:a5:b2: d3:50:8c:62:36:b3:d9:77:fc:a3:ae:75:f2:e3:61:5f:0a:f3: a5:c9:92:0c:6a:40:88:4e:6c:e0:28:48:da:56:55:c1:61:b8: 9f:d0:52:ed:e7:16:5a:5c:6e:c7:36:51:8b:d5:79:4a:ea:53: e7:13:7a:3a:32:11:9a:fa:95:29:ab:ff:55:6d:3e:e6:c0:0d: 71:26:a6:c1:c2:cd:52:82:ce:71:02:b1:41:ad:ba:18:d4:17: c9:eb:b8:dd:90:59:89:90:fe:3b:8c:ac:9e:39:3d:46:ae:61: 58:04:d4:33:9f:4f:c9:38:06:b6:8e:7d:82:bf:7a:87:ea:15: 39:e0:47:b4:23:39:13:ba:a8:9e:47:01:8d:a7:e2:91:86:14: b7:d0:ce:80:3c:84:4d:62:40:ef:29:2e:98:7e:e5:57:16:1f: 29:5e:06:a0:f5:f1:29:8b:fd:a0:8a:48:f3:66:02:44:8e:85: ba:df:65:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvSTIC7XE+2I6X7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk NTU1ZGEwYzctMDE1Ny00MTRjLTk3OWQtYjQ1Y2VlNjE4NjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGHwPtuIP4cfZklqx9q3swM2CIrVK92MqxIh cU3n5+6GQgaya4X/cSMzE4fld1IvBZNe4TKqKEWdtYqpqXQRePreg0RqP38ae80N FbQqKtOD4S49aS1fzqx1AEH3f3kxjbp4MqLrtrp5m3pIBPmkxgKEOCWVH3RyzKW0 k17+H7c8Y7YLibaJLLzZ06/l5He3g2omg39MHhkWWmCXciflZoUWVXoAFl7Fl9jj VsHHlOS0mE4aAKCIN81id7n3wVbl2c/AG0VUo3Ho2eF6I34nL8PmieYJ1Dud2kTc NFTZrtiiY63Uloiqjz5+it9Z/M3E2m4YQC01RrJZ+2Xs5kdUGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQ3xK+JmSbRVNKj/S5q7s2X3J3NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMGQ0OWU3MWUtMTVlZi0z NWQ4LTg3YjYtZTg5MzNmMWNlNGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKR9ypY5RSE1SSt87nIt6Ke61BOCAnzQaAFlIDSiYjhU3ub5Pf+IK26t usKr70hMiavuMn10l58FOD1vE5MPAJgjjU7P1KKlstNQjGI2s9l3/KOudfLjYV8K 86XJkgxqQIhObOAoSNpWVcFhuJ/QUu3nFlpcbsc2UYvVeUrqU+cTejoyEZr6lSmr /1VtPubADXEmpsHCzVKCznECsUGtuhjUF8nruN2QWYmQ/juMrJ45PUauYVgE1DOf T8k4BraOfYK/eofqFTngR7QjORO6qJ5HAY2n4pGGFLfQzoA8hE1iQO8pLph+5VcW HyleBqD18SmL/aCKSPNmAkSOhbrfZY8= -----END CERTIFICATE-----Generated at Mon Sep 28 02:28:12 2026 by rpki-client