$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28d91d14-0e2e-3866-8eda-06232954e8f9.roa File: 28d91d14-0e2e-3866-8eda-06232954e8f9.roa (raw, json) Hash identifier: S51MMC13Dz5LKd0ZyxCxvs0Hdi9ZmrxfuXB5Pj2zbs4= Subject key identifier: AA:36:20:33:EC:34:6A:67:AA:FE:64:2B:2C:4F:3E:0A:2D:2A:72:56 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F2957C8A3830E3C8E4C62BD80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28d91d14-0e2e-3866-8eda-06232954e8f9.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 8069 IP address blocks: 20.33.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:c8:a3:83:0e:3c:8e:4c:62:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=8f8ec3d1-ba84-45c5-9919-698ed4a31525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bf:64:67:ce:0a:95:e7:a1:18:d0:7b:0f:79: 04:cb:24:fa:f4:ad:a1:9e:24:10:da:02:e1:3f:d6: 35:12:c9:1d:b8:07:6b:b4:48:63:9f:43:f9:a1:4d: ec:e2:8a:94:dd:81:91:e9:b8:d7:b4:4f:29:5f:bc: c5:5d:0e:95:7a:36:0b:71:ac:3f:ad:50:37:5e:e2: 89:a5:fb:99:07:f4:5b:b4:a1:6a:87:95:d2:f5:b8: 65:20:7a:57:a8:4b:f2:fb:84:0a:0d:f4:77:45:2a: d3:67:32:2b:a8:0a:e9:ea:69:ff:63:ab:64:bc:51: 91:3d:9e:31:fc:6f:00:f3:1a:61:0f:98:a6:37:72: b1:17:7a:69:e9:f2:a9:29:a0:a9:52:c2:19:78:17: 44:8b:93:f1:67:da:5a:32:44:d6:4e:d2:8e:1c:69: f0:8a:94:bd:64:0d:6e:8f:be:c8:f3:d7:d5:b0:fb: 4b:cc:cc:59:a0:95:fc:97:4d:7d:2c:b0:70:9f:28: b1:aa:f0:3a:65:e9:f4:7b:64:ae:b7:16:42:29:c7: 97:f5:60:45:99:8e:9b:95:77:fa:dd:44:a1:ca:8b: ea:a6:7b:cf:91:67:ba:ef:eb:4d:f9:d4:e7:ce:9f: 8a:63:ea:30:9b:aa:1b:4f:21:b3:b3:4f:6c:fb:63: db:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:36:20:33:EC:34:6A:67:AA:FE:64:2B:2C:4F:3E:0A:2D:2A:72:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28d91d14-0e2e-3866-8eda-06232954e8f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:74:40:fa:78:dc:96:56:16:bc:bd:d4:8e:02:40:bf:7a:40: ed:17:a1:0a:d5:b5:d3:c3:c5:c0:c6:12:d9:b8:87:91:66:71: ff:46:5a:86:6f:5d:24:42:31:d6:e3:1c:45:5c:96:03:6e:7b: 56:7d:36:f3:23:5a:03:ac:52:dc:7e:84:f7:f7:c5:7b:7a:af: a4:8b:99:a5:5f:c4:e6:20:c0:e5:22:0f:31:88:79:24:3c:fd: 0b:d7:ce:c8:d7:27:07:cb:d5:49:b6:b9:10:be:7a:c9:e1:b3: 38:9b:9b:4c:72:ce:15:b3:f6:1a:6d:d3:5f:f8:cb:ab:60:6f: 52:51:27:01:a2:57:17:47:42:a7:97:44:c1:c4:08:74:d8:c7: cf:25:3d:cd:59:84:e1:79:b2:fe:c3:ad:a9:a5:28:dc:f6:63: 8f:15:ad:be:6e:cc:4a:74:4c:ff:5f:41:69:a1:e1:c8:19:fb: eb:54:74:b1:b4:81:2a:2c:14:2e:7b:8b:3f:fd:be:ee:ef:5b: 2a:06:c1:f0:68:28:a1:ac:b4:1e:0f:8b:b3:1c:0e:97:c6:3b: f6:35:5d:20:3c:6b:e2:97:c6:16:86:ec:de:72:e5:d6:b1:65: b5:df:b9:c9:6f:53:75:24:29:90:d7:1f:4b:2d:b5:6e:50:bd: a9:15:57:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV8ijgw48jkxivYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk OGY4ZWMzZDEtYmE4NC00NWM1LTk5MTktNjk4ZWQ0YTMxNTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA079kZ84KleehGNB7D3kEyyT69K2hniQQ2gLh P9Y1EskduAdrtEhjn0P5oU3s4oqU3YGR6bjXtE8pX7zFXQ6VejYLcaw/rVA3XuKJ pfuZB/RbtKFqh5XS9bhlIHpXqEvy+4QKDfR3RSrTZzIrqArp6mn/Y6tkvFGRPZ4x /G8A8xphD5imN3KxF3pp6fKpKaCpUsIZeBdEi5PxZ9paMkTWTtKOHGnwipS9ZA1u j77I89fVsPtLzMxZoJX8l019LLBwnyixqvA6Zen0e2SutxZCKceX9WBFmY6blXf6 3UShyovqpnvPkWe67+tN+dTnzp+KY+owm6obTyGzs09s+2PbOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKo2IDPsNGpnqv5kKyxPPgotKnJWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjhkOTFkMTQtMGUyZS0z ODY2LThlZGEtMDYyMzI5NTRlOGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABh0QPp43JZWFry91I4CQL96QO0XoQrVtdPDxcDGEtm4h5Fmcf9GWoZv XSRCMdbjHEVclgNue1Z9NvMjWgOsUtx+hPf3xXt6r6SLmaVfxOYgwOUiDzGIeSQ8 /QvXzsjXJwfL1Um2uRC+esnhszibm0xyzhWz9hpt01/4y6tgb1JRJwGiVxdHQqeX RMHECHTYx88lPc1ZhOF5sv7DramlKNz2Y48Vrb5uzEp0TP9fQWmh4cgZ++tUdLG0 gSosFC57iz/9vu7vWyoGwfBoKKGstB4Pi7McDpfGO/Y1XSA8a+KXxhaG7N5y5dax ZbXfuclvU3UkKZDXH0sttW5QvakVV04= -----END CERTIFICATE-----Generated at Mon Sep 28 21:53:44 2026 by rpki-client