$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/193b4617-c040-35e0-ad01-80a5e562b1ae.roa File: 193b4617-c040-35e0-ad01-80a5e562b1ae.roa (raw, json) Hash identifier: RCQ//WK2e+vjjR/uIJZO/N8bCsMEmVkPkW2zJ7fsvdw= Subject key identifier: E8:EF:B5:C1:43:B2:15:14:5D:AD:F8:BB:49:99:56:16:12:01:A7:92 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F1E2CFCCFA9B4418822F63580 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/193b4617-c040-35e0-ad01-80a5e562b1ae.roa Signing time: Wed 09 Sep 2026 13:00:11 +0000 ROA not before: Wed 09 Sep 2026 13:00:11 +0000 ROA not after: Tue 08 Dec 2026 14:00:11 +0000 asID: 8069 IP address blocks: 20.33.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:2c:fc:cf:a9:b4:41:88:22:f6:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 9 13:00:11 2026 GMT Not After : Dec 8 14:00:11 2026 GMT Subject: CN=d1245fbe-b22f-4fc8-98b3-08d37fdeefca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:58:ac:5b:0a:22:b0:93:35:9f:ef:39:7c:12: fb:32:5f:3a:f6:0d:04:df:6e:47:c8:15:4a:15:cf: 7c:16:5a:41:12:62:10:36:e0:69:49:08:e7:9e:eb: 9c:0c:c1:a6:58:98:ed:b2:b4:de:56:a4:15:9a:cf: db:86:2f:e4:53:23:69:2f:26:d8:42:58:a5:39:8c: 0e:20:99:1c:2e:07:02:2e:5f:46:96:b8:2c:b0:84: 9a:0b:fa:da:00:a8:96:2b:97:36:b1:0b:f5:19:b8: b3:b5:b4:ba:d1:58:aa:d2:ac:fe:d1:25:2a:59:12: 73:54:d8:c3:fb:34:87:ba:ad:93:ca:64:68:86:f3: c6:21:9b:8e:57:e5:6a:73:09:f3:1b:5d:d1:17:f5: 9d:33:37:b6:ce:d4:9f:49:36:e6:e4:dc:11:c6:eb: 75:b6:93:62:1d:54:52:7a:ba:f1:d2:10:d7:6e:79: ee:ee:21:14:7c:ce:9b:90:12:da:28:fc:82:8e:f2: 7d:07:b0:de:3a:1c:07:f3:49:03:ca:cd:46:8e:0b: 7c:f0:78:0a:14:5d:49:ca:32:39:ba:53:70:af:6a: a4:fa:37:89:24:f6:dc:13:13:09:6d:f6:21:21:5b: 3e:a2:37:54:6e:3a:ee:40:8c:e0:36:d4:55:31:ad: f6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:EF:B5:C1:43:B2:15:14:5D:AD:F8:BB:49:99:56:16:12:01:A7:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/193b4617-c040-35e0-ad01-80a5e562b1ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:17:e6:47:52:79:24:b5:54:d9:6c:98:51:cc:e3:23:88:2f: fb:9d:fd:cc:48:48:f2:b9:3f:28:20:91:ca:fa:d5:e4:82:f2: 47:ae:58:62:ab:86:90:17:2a:23:08:1b:7a:41:ca:99:f5:c5: 0e:fb:15:27:a4:c2:ea:d1:ee:0d:27:7a:39:8d:be:13:f4:5a: 1b:cc:25:f4:f9:4e:92:d7:b2:0b:11:92:01:dd:0f:d6:5f:62: b7:4f:e1:b5:aa:dd:28:21:d2:65:74:a7:24:e2:c7:c2:51:b8: fa:29:a2:01:5c:c1:f7:4e:c5:25:6d:92:80:f5:21:83:1d:fc: bc:87:f4:c2:25:94:dc:47:ef:89:4e:44:22:98:0a:ea:9d:63: 79:c4:21:ec:c4:a3:76:af:5c:0c:88:33:5a:f0:96:c9:14:25: 79:b6:96:17:0e:bc:44:e6:0c:18:ad:2d:63:25:f8:59:ef:a0: 59:89:9f:0f:4c:65:26:88:3a:89:83:c0:ff:c3:8d:50:75:d9: ac:98:6a:58:ac:3f:9e:c4:53:b9:19:c7:08:56:2f:32:e6:19: 26:ba:fb:b9:e7:5c:f9:01:2a:19:e0:90:e1:f9:33:f4:59:c6: db:66:81:ae:42:be:83:50:25:e7:8c:a8:36:54:33:47:fa:53: 62:81:66:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eLPzPqbRBiCL2NYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk ZDEyNDVmYmUtYjIyZi00ZmM4LTk4YjMtMDhkMzdmZGVlZmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1isWwoisJM1n+85fBL7Ml869g0E325HyBVK Fc98FlpBEmIQNuBpSQjnnuucDMGmWJjtsrTeVqQVms/bhi/kUyNpLybYQlilOYwO IJkcLgcCLl9GlrgssISaC/raAKiWK5c2sQv1GbiztbS60Viq0qz+0SUqWRJzVNjD +zSHuq2TymRohvPGIZuOV+VqcwnzG13RF/WdMze2ztSfSTbm5NwRxut1tpNiHVRS errx0hDXbnnu7iEUfM6bkBLaKPyCjvJ9B7DeOhwH80kDys1Gjgt88HgKFF1JyjI5 ulNwr2qk+jeJJPbcExMJbfYhIVs+ojdUbjruQIzgNtRVMa32JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjvtcFDshUUXa34u0mZVhYSAaeSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTkzYjQ2MTctYzA0MC0z NWUwLWFkMDEtODBhNWU1NjJiMWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYX5kdSeSS1VNlsmFHM4yOIL/ud/cxISPK5Pyggkcr61eSC8keuWGKr hpAXKiMIG3pBypn1xQ77FSekwurR7g0nejmNvhP0WhvMJfT5TpLXsgsRkgHdD9Zf YrdP4bWq3Sgh0mV0pyTix8JRuPopogFcwfdOxSVtkoD1IYMd/LyH9MIllNxH74lO RCKYCuqdY3nEIezEo3avXAyIM1rwlskUJXm2lhcOvETmDBitLWMl+FnvoFmJnw9M ZSaIOomDwP/DjVB12ayYalisP57EU7kZxwhWLzLmGSa6+7nnXPkBKhngkOH5M/RZ xttmga5CvoNQJeeMqDZUM0f6U2KBZr4= -----END CERTIFICATE-----Generated at Mon Sep 28 05:48:52 2026 by rpki-client