$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7156ddac-0037-381d-b03c-e9232ac59dea.roa File: 7156ddac-0037-381d-b03c-e9232ac59dea.roa (raw, json) Hash identifier: PoVU3B6xW05QsQItXeEnvtsuysvB+prsNYuymkaCqXk= Subject key identifier: 30:22:82:B6:E1:B3:B3:66:49:D3:04:B1:26:93:B9:70:D8:62:94:FB Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F49775B920795895B4D462280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7156ddac-0037-381d-b03c-e9232ac59dea.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:5b:92:07:95:89:5b:4d:46:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6701644f-7f6d-4e49-a6e2-33b77205fc5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f6:f6:bb:bc:cc:3d:63:2d:53:fb:66:48:32: 13:5d:c7:45:88:05:df:ac:a7:88:08:98:d4:82:57: d8:c9:4c:18:6b:f4:71:b2:6b:4c:1f:f9:3b:f2:5b: 5d:85:38:a0:88:ac:9d:61:12:bd:d6:1b:fe:3d:4a: 62:91:3e:a5:1e:a0:40:d9:2d:6d:ef:61:6e:fc:dc: d3:1f:49:49:c4:d3:63:75:47:17:5f:91:f4:29:c5: e7:48:8e:54:c9:c1:a1:48:58:92:e5:1e:5f:d2:28: 6f:b3:e3:ec:7e:35:f0:73:3e:0f:be:fd:de:a6:80: 94:62:79:06:47:9f:02:0f:23:ca:b5:6b:af:62:8c: 98:cf:32:ac:93:7e:fb:9f:e0:5a:f5:55:05:6b:37: ca:04:a3:66:cf:14:e7:6e:32:ac:b8:e4:75:38:67: 0a:dc:29:03:f4:f2:48:4b:f5:11:5a:19:e9:22:d4: eb:df:9e:67:8b:67:ff:a0:9d:31:3a:18:68:2e:c2: 76:f9:9e:05:ed:e5:82:26:0f:3f:90:e1:d7:87:dc: 08:2c:ae:25:c3:cc:38:94:76:9f:36:e1:0f:42:cf: 44:ba:50:92:f0:d9:b8:29:77:f2:2c:10:23:93:a2: 43:79:02:cc:97:7c:39:a3:19:24:97:69:5d:6b:a9: 5b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:22:82:B6:E1:B3:B3:66:49:D3:04:B1:26:93:B9:70:D8:62:94:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7156ddac-0037-381d-b03c-e9232ac59dea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:73:92:31:21:93:12:c4:e5:f4:c8:ef:f7:63:6e:3b:b0:59: 41:a9:d3:29:32:4c:c9:cc:9a:27:3d:3c:41:e4:06:2f:27:85: 31:ad:fa:d4:cd:1a:35:48:9b:9f:b6:d7:2a:c2:2a:f4:4b:c0: dd:13:f6:7f:29:f7:26:65:71:b6:f2:3b:0c:5b:25:1c:ee:a5: 7c:ae:04:c9:1e:23:4c:2d:5c:03:72:fa:20:00:7b:0c:1f:27: 0b:d6:94:a0:41:f0:36:14:25:c2:34:e5:4b:58:44:d8:8f:0f: 21:fc:76:0d:57:80:5c:8e:a3:85:0b:d4:87:ed:1a:ba:0f:e3: b1:0b:1e:2c:94:e1:53:62:1c:a2:70:da:9e:dd:01:04:85:8f: 17:4c:b6:f8:c5:1e:56:3c:4e:ba:2e:1c:8c:6c:a3:e7:7d:bb: 00:11:d5:3f:80:7e:d5:60:82:99:b1:eb:85:6b:57:40:05:cc: fa:79:9c:ad:3a:f0:ba:7a:e7:3d:4a:22:1e:da:8f:a3:1e:62: 01:0f:69:54:c6:b6:5b:bc:94:2a:b2:ce:71:ed:49:0b:0a:3b: 2a:09:db:99:e5:88:1c:d6:f6:71:52:36:60:ca:da:7d:53:e6: 31:97:75:4a:5a:9a:fd:d1:cd:05:7b:2f:7d:d8:19:61:9a:42: 7a:b1:fa:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd1uSB5WJW01GIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjcwMTY0NGYtN2Y2ZC00ZTQ5LWE2ZTItMzNiNzcyMDVmYzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvb2u7zMPWMtU/tmSDITXcdFiAXfrKeICJjU glfYyUwYa/RxsmtMH/k78ltdhTigiKydYRK91hv+PUpikT6lHqBA2S1t72Fu/NzT H0lJxNNjdUcXX5H0KcXnSI5UycGhSFiS5R5f0ihvs+PsfjXwcz4Pvv3epoCUYnkG R58CDyPKtWuvYoyYzzKsk377n+Ba9VUFazfKBKNmzxTnbjKsuOR1OGcK3CkD9PJI S/URWhnpItTr355ni2f/oJ0xOhhoLsJ2+Z4F7eWCJg8/kOHXh9wILK4lw8w4lHaf NuEPQs9EulCS8Nm4KXfyLBAjk6JDeQLMl3w5oxkkl2lda6lbyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAigrbhs7NmSdMEsSaTuXDYYpT7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzE1NmRkYWMtMDAzNy0z ODFkLWIwM2MtZTkyMzJhYzU5ZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCEKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhzkjEhkxLE5fTI7/djbjuwWUGp0ykyTMnMmic9PEHkBi8nhTGt+tTN GjVIm5+21yrCKvRLwN0T9n8p9yZlcbbyOwxbJRzupXyuBMkeI0wtXANy+iAAewwf JwvWlKBB8DYUJcI05UtYRNiPDyH8dg1XgFyOo4UL1IftGroP47ELHiyU4VNiHKJw 2p7dAQSFjxdMtvjFHlY8TrouHIxso+d9uwAR1T+AftVggpmx64VrV0AFzPp5nK06 8Lp65z1KIh7aj6MeYgEPaVTGtlu8lCqyznHtSQsKOyoJ25nliBzW9nFSNmDK2n1T 5jGXdUpamv3RzQV7L33YGWGaQnqx+qs= -----END CERTIFICATE-----Generated at Sun Sep 27 07:58:28 2026 by rpki-client