$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d6208af-a9bf-3bf7-bd20-7dd74ebd03c4.roa File: 7d6208af-a9bf-3bf7-bd20-7dd74ebd03c4.roa (raw, json) Hash identifier: gTFplhDEZY2geM1K40ZgVKRTNpbStIPSfpqDdHZ++g4= Subject key identifier: 0D:5A:9E:7E:9C:93:01:AD:21:67:99:37:BE:79:08:B5:1F:7F:F6:98 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F497F1DE57F801C25E45BE0C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d6208af-a9bf-3bf7-bd20-7dd74ebd03c4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:1d:e5:7f:80:1c:25:e4:5b:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e9c4a24d-4852-4244-b7a8-5ff87bc729f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f1:0c:be:d8:59:81:50:68:37:19:15:0d:e8: 27:77:e5:aa:33:1b:d2:af:93:0b:01:3f:7c:31:10: cb:44:c7:27:13:92:c2:28:58:80:18:18:6e:bb:36: 44:a6:e3:de:c5:b4:e9:38:49:91:5f:47:79:56:d7: a6:14:04:40:d2:f9:90:fc:d8:88:26:5b:0a:f7:9f: 2e:a5:c8:f8:94:18:88:37:62:20:81:ba:02:dd:12: c9:b2:f5:79:37:e2:d8:4a:4d:21:16:f6:4f:6a:50: 5c:25:68:1c:21:51:30:7b:6f:4a:7e:c5:bb:55:6f: 19:34:8d:ce:14:9a:ed:de:4c:97:0e:5d:dc:9d:8c: 72:c8:13:aa:1f:a4:9b:8b:13:7b:01:28:ec:70:de: 42:0d:d8:cf:2a:a9:22:ab:89:26:bd:cb:ee:50:cb: 03:bc:a2:d5:c0:25:21:bd:05:fc:06:21:5c:f1:ee: 90:b1:40:83:9f:62:d5:c6:81:c7:58:37:b6:dc:3f: d2:9c:fe:a7:b8:b7:96:87:48:ba:71:ac:ef:db:12: 73:40:02:64:12:e9:d2:25:f5:88:9b:f2:34:14:fd: e1:6b:df:76:b3:9d:01:78:4a:ac:c2:25:a2:f3:b0: f7:e0:0f:05:bc:16:bd:3f:e9:08:fd:7d:2d:03:74: 30:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5A:9E:7E:9C:93:01:AD:21:67:99:37:BE:79:08:B5:1F:7F:F6:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d6208af-a9bf-3bf7-bd20-7dd74ebd03c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:8e:86:07:d0:c3:c7:30:2c:a6:a8:62:3a:fe:9d:b6:dc:04: 27:14:35:75:2e:9d:c9:c1:11:5a:6b:b3:bf:ef:ab:ec:e8:16: 50:3d:e9:9c:4e:2d:b7:c4:1d:28:28:05:c7:fc:cc:4b:64:96: d9:22:3d:11:ed:0f:d0:52:9c:9c:b8:1f:6b:85:b8:81:c8:d3: 31:5f:66:57:8e:79:75:e6:37:42:d1:d2:a8:77:53:ad:04:d0: 03:e4:57:0e:f1:84:14:fc:cd:9f:92:3d:90:20:56:4d:de:f6: 0b:c0:f0:87:ae:05:88:e6:9c:10:89:06:b0:68:e8:c7:91:1a: 17:0a:a4:e6:09:f1:e0:47:1a:a0:1f:2e:de:20:47:67:c8:f3: dc:d4:38:1a:56:b2:31:5a:d1:0c:14:f7:5b:c0:a3:29:3d:a1: d2:4c:3c:f4:1c:1a:7e:73:3b:0e:60:29:61:39:26:c4:a6:4f: da:57:32:7a:50:4d:e1:cf:76:90:20:a7:cf:69:71:9b:ff:69: da:0f:a3:7d:85:63:26:f5:5d:78:1c:44:1f:05:ee:5c:34:5e: 4b:7d:18:d4:cd:5c:b3:18:f3:76:45:b4:70:ee:b3:b7:58:f9: e1:f7:fa:a3:df:2a:d9:d9:36:a7:68:be:da:b0:ef:f5:08:7f: 90:41:4c:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jfx3lf4AcJeRb4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTljNGEyNGQtNDg1Mi00MjQ0LWI3YTgtNWZmODdiYzcyOWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/EMvthZgVBoNxkVDegnd+WqMxvSr5MLAT98 MRDLRMcnE5LCKFiAGBhuuzZEpuPexbTpOEmRX0d5VtemFARA0vmQ/NiIJlsK958u pcj4lBiIN2IggboC3RLJsvV5N+LYSk0hFvZPalBcJWgcIVEwe29KfsW7VW8ZNI3O FJrt3kyXDl3cnYxyyBOqH6SbixN7ASjscN5CDdjPKqkiq4kmvcvuUMsDvKLVwCUh vQX8BiFc8e6QsUCDn2LVxoHHWDe23D/SnP6nuLeWh0i6cazv2xJzQAJkEunSJfWI m/I0FP3ha992s50BeEqswiWi87D34A8FvBa9P+kI/X0tA3QwtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1ann6ckwGtIWeZN755CLUff/aYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2Q2MjA4YWYtYTliZi0z YmY3LWJkMjAtN2RkNzRlYmQwM2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqOhgfQw8cwLKaoYjr+nbbcBCcUNXUuncnBEVprs7/vq+zoFlA96ZxO LbfEHSgoBcf8zEtkltkiPRHtD9BSnJy4H2uFuIHI0zFfZleOeXXmN0LR0qh3U60E 0APkVw7xhBT8zZ+SPZAgVk3e9gvA8IeuBYjmnBCJBrBo6MeRGhcKpOYJ8eBHGqAf Lt4gR2fI89zUOBpWsjFa0QwU91vAoyk9odJMPPQcGn5zOw5gKWE5JsSmT9pXMnpQ TeHPdpAgp89pcZv/adoPo32FYyb1XXgcRB8F7lw0Xkt9GNTNXLMY83ZFtHDus7dY +eH3+qPfKtnZNqdovtqw7/UIf5BBTEw= -----END CERTIFICATE-----Generated at Sun Sep 27 07:55:38 2026 by rpki-client