$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5863ef84-56e8-36d7-a5a8-33b2de1eb16a.roa File: 5863ef84-56e8-36d7-a5a8-33b2de1eb16a.roa (raw, json) Hash identifier: ToUJ8Be3m+Pdqpy0x5X9B//RCWjdjIwGvp0OP1MCYWI= Subject key identifier: 5B:0E:CB:8D:E5:D6:FE:30:F9:7A:4C:26:69:87:AB:B0:25:D9:8C:40 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F497F1CDCF557F4C932450D00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5863ef84-56e8-36d7-a5a8-33b2de1eb16a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:1c:dc:f5:57:f4:c9:32:45:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=59fb45af-5a80-467c-a018-6a07a06f0bf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f3:75:ed:c5:5e:96:77:72:a4:8c:32:d9:77: 37:36:9d:e2:4c:de:b4:d1:78:14:d6:8b:9d:79:13: 75:74:be:93:d7:54:cb:b9:29:c5:20:dd:3f:53:02: 12:c1:ce:e1:6c:b5:bc:05:c0:e0:80:9e:32:a0:0e: 9e:dd:a4:da:be:19:18:ca:7d:8f:3d:b0:16:69:06: 5c:a3:d6:3c:4c:57:fd:fc:42:8d:76:6e:af:69:3c: 77:b2:e0:61:68:3d:93:85:cd:f3:67:e8:34:70:79: 0c:37:25:e1:bc:a5:a2:fe:32:c3:e7:9b:2a:09:40: d1:71:7d:eb:8d:e8:7d:d0:11:7e:27:0b:9f:38:11: 32:1c:e3:92:43:44:1b:c1:64:50:86:8c:d7:46:67: a0:60:86:eb:2b:73:e1:e7:6a:15:ed:84:c9:fa:cf: 41:1b:24:c6:ba:90:76:1d:15:d5:4a:00:42:1a:01: 87:4f:12:70:80:63:f7:d5:84:05:aa:27:bb:1a:66: eb:f0:6d:69:f1:23:77:6b:ee:d7:90:cd:a5:aa:a1: bb:e8:78:cd:99:3c:31:43:68:9d:ed:da:aa:d6:33: ed:be:2c:67:25:20:8d:75:7d:8c:1f:10:99:e0:ef: 06:45:07:5c:8d:da:53:1b:d1:b4:c3:50:81:b7:c6: ef:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0E:CB:8D:E5:D6:FE:30:F9:7A:4C:26:69:87:AB:B0:25:D9:8C:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5863ef84-56e8-36d7-a5a8-33b2de1eb16a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:73:0a:41:f2:0e:80:37:6f:de:2d:5e:dd:1b:80:fa:20:d4: 73:07:58:85:bf:cd:3b:92:ec:a6:6a:39:cc:0b:e9:ac:09:c3: c8:de:d1:9f:df:5f:2a:ad:40:88:8a:e8:de:20:d0:37:6f:a5: 8b:7f:6c:b2:10:dd:c2:6e:67:c7:c3:a1:31:0e:a5:13:d3:74: bf:7e:f8:85:86:e8:3f:d9:2a:1d:c1:6c:df:39:66:b2:f7:a4: d3:32:59:96:ce:d8:66:cd:d6:67:da:e2:db:73:db:80:2f:73: 4e:78:da:a6:f1:7e:52:8b:67:7f:4c:49:c1:16:d2:c4:09:e7: fb:33:cd:d8:7c:89:96:1a:40:02:ea:48:70:3b:8a:b7:ce:0c: b4:10:1e:46:56:e9:0c:a8:e4:6d:51:52:22:00:de:60:87:ab: d2:77:1a:b4:32:46:bb:e5:be:12:d5:d7:32:da:5d:0c:23:dd: 4d:e2:48:9a:02:3d:35:b0:b5:56:42:26:f0:da:78:b3:db:a3: 89:27:0c:b5:9b:93:e2:2b:27:c4:9a:c8:a3:4f:5a:5e:c6:97: 3c:e3:91:dc:e5:f6:ea:42:ee:4c:89:08:4f:6c:43:af:eb:e1: 80:0a:e8:4d:34:2c:a5:40:32:e1:8b:9e:2d:c9:6b:5f:b5:35: a9:dd:10:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jfxzc9Vf0yTJFDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTlmYjQ1YWYtNWE4MC00NjdjLWEwMTgtNmEwN2EwNmYwYmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPN17cVelndypIwy2Xc3Np3iTN600XgU1oud eRN1dL6T11TLuSnFIN0/UwISwc7hbLW8BcDggJ4yoA6e3aTavhkYyn2PPbAWaQZc o9Y8TFf9/EKNdm6vaTx3suBhaD2Thc3zZ+g0cHkMNyXhvKWi/jLD55sqCUDRcX3r jeh90BF+JwufOBEyHOOSQ0QbwWRQhozXRmegYIbrK3Ph52oV7YTJ+s9BGyTGupB2 HRXVSgBCGgGHTxJwgGP31YQFqie7Gmbr8G1p8SN3a+7XkM2lqqG76HjNmTwxQ2id 7dqq1jPtvixnJSCNdX2MHxCZ4O8GRQdcjdpTG9G0w1CBt8bvJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsOy43l1v4w+XpMJmmHq7Al2YxAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTg2M2VmODQtNTZlOC0z NmQ3LWE1YTgtMzNiMmRlMWViMTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNzCkHyDoA3b94tXt0bgPog1HMHWIW/zTuS7KZqOcwL6awJw8je0Z/f XyqtQIiK6N4g0DdvpYt/bLIQ3cJuZ8fDoTEOpRPTdL9++IWG6D/ZKh3BbN85ZrL3 pNMyWZbO2GbN1mfa4ttz24Avc0542qbxflKLZ39MScEW0sQJ5/szzdh8iZYaQALq SHA7irfODLQQHkZW6Qyo5G1RUiIA3mCHq9J3GrQyRrvlvhLV1zLaXQwj3U3iSJoC PTWwtVZCJvDaeLPbo4knDLWbk+IrJ8SayKNPWl7Glzzjkdzl9upC7kyJCE9sQ6/r 4YAK6E00LKVAMuGLni3Ja1+1NandEGg= -----END CERTIFICATE-----Generated at Mon Sep 28 20:52:23 2026 by rpki-client