$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/826b271f-edee-3676-98e4-6d4c334e95f2.roa File: 826b271f-edee-3676-98e4-6d4c334e95f2.roa (raw, json) Hash identifier: VjbP6KsnlDBBZlLTH+k1jObfcb2xQIarwK3cuORSsGo= Subject key identifier: 9E:66:7E:55:5F:45:B4:43:84:EE:2B:43:9A:DD:88:B0:69:63:84:ED Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F19FCF884C17A507085009FE0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/826b271f-edee-3676-98e4-6d4c334e95f2.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:f8:84:c1:7a:50:70:85:00:9f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=dcd0ee23-7948-43c4-bf48-8d788b6d91e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a8:c3:87:12:83:a5:a9:fc:f6:53:1f:3a:c2: 53:50:e3:cb:9d:43:7d:b2:0b:f3:46:9f:8a:da:bd: 57:af:22:b5:27:a0:7a:75:c6:e9:9a:54:73:97:0e: af:88:ac:23:a4:db:1b:d2:a3:92:5f:1c:7f:a7:bc: d7:30:66:a9:67:a5:4a:6d:99:e3:c2:1c:fe:e7:1b: d9:a3:5b:ff:81:6d:ca:af:c7:bf:f4:4b:1f:6b:e4: d8:82:44:dd:02:1a:04:53:cc:db:39:15:4e:d7:82: bf:6f:ab:50:70:6f:5f:d8:dc:93:a1:33:75:ec:f4: 66:2a:66:26:73:5f:21:9c:13:36:93:80:ca:af:70: 81:4f:21:76:a9:00:f5:57:6b:92:ba:b7:63:ef:47: e9:60:41:ce:9c:d6:8b:2a:7c:2b:ad:3c:a0:42:77: 52:f2:1a:5f:de:28:7a:56:1e:f3:58:3a:19:d9:d2: e2:00:2b:c3:9c:a4:03:10:16:83:cd:09:69:f3:2a: f5:29:11:a3:03:71:70:47:93:77:3d:da:c5:8c:13: 93:f8:52:02:20:1f:5d:40:15:17:85:ac:41:da:ff: 6a:44:f5:a2:b6:7b:b5:91:15:34:e7:29:97:b9:8e: 8c:5a:ec:6c:b4:66:7d:ce:ef:13:29:1f:21:44:f1: f0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:66:7E:55:5F:45:B4:43:84:EE:2B:43:9A:DD:88:B0:69:63:84:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/826b271f-edee-3676-98e4-6d4c334e95f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:c9:18:de:17:97:44:93:0f:c4:bd:09:8a:52:0a:df:bd:1e: 29:c8:6d:c9:39:1e:97:c3:29:9f:47:62:10:0f:fb:1a:80:49: ea:4a:c3:30:fa:20:b3:dc:74:c5:45:26:b9:41:0d:77:0d:e5: ec:2e:48:30:d4:30:26:91:b0:e5:cf:9a:e4:83:1e:47:ce:23: 6e:86:bc:f4:96:9b:41:5f:d1:b7:86:8c:6c:ea:81:ee:75:2a: 11:68:00:1e:63:19:76:99:56:fc:2b:cc:8c:7a:c0:7f:cc:31: e7:7b:f5:d3:c5:a1:d8:b9:26:68:1e:77:3f:73:39:e8:87:12: 4f:fb:7e:99:05:27:12:f3:15:66:3f:f9:1c:c9:44:c9:11:5a: 78:c8:c6:9f:60:49:45:1a:c2:c3:d3:5f:81:7f:6a:2d:78:82: 84:d6:9f:92:f9:ee:e8:74:6d:1b:34:51:67:a6:71:cf:a9:51: 9c:8a:9a:31:1e:73:1e:c5:61:a8:a7:12:ff:06:9f:1f:bc:2d: 90:b8:65:b0:ff:2a:0b:3f:dd:b9:07:b6:bc:bd:80:01:49:eb: f4:4a:9d:41:57:6d:a5:20:51:03:a4:2d:d4:0b:da:b4:1d:d5: 77:fa:03:f7:29:56:da:4e:c2:b3:83:90:33:dd:8e:53:0c:99: 89:f7:4f:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/PiEwXpQcIUAn+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk ZGNkMGVlMjMtNzk0OC00M2M0LWJmNDgtOGQ3ODhiNmQ5MWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkajDhxKDpan89lMfOsJTUOPLnUN9sgvzRp+K 2r1XryK1J6B6dcbpmlRzlw6viKwjpNsb0qOSXxx/p7zXMGapZ6VKbZnjwhz+5xvZ o1v/gW3Kr8e/9Esfa+TYgkTdAhoEU8zbORVO14K/b6tQcG9f2NyToTN17PRmKmYm c18hnBM2k4DKr3CBTyF2qQD1V2uSurdj70fpYEHOnNaLKnwrrTygQndS8hpf3ih6 Vh7zWDoZ2dLiACvDnKQDEBaDzQlp8yr1KRGjA3FwR5N3PdrFjBOT+FICIB9dQBUX haxB2v9qRPWitnu1kRU05ymXuY6MWuxstGZ9zu8TKR8hRPHwCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5mflVfRbRDhO4rQ5rdiLBpY4TtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODI2YjI3MWYtZWRlZS0z Njc2LTk4ZTQtNmQ0YzMzNGU5NWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7JGN4Xl0STD8S9CYpSCt+9HinIbck5HpfDKZ9HYhAP+xqASepKwzD6 ILPcdMVFJrlBDXcN5ewuSDDUMCaRsOXPmuSDHkfOI26GvPSWm0Ff0beGjGzqge51 KhFoAB5jGXaZVvwrzIx6wH/MMed79dPFodi5Jmgedz9zOeiHEk/7fpkFJxLzFWY/ +RzJRMkRWnjIxp9gSUUawsPTX4F/ai14goTWn5L57uh0bRs0UWemcc+pUZyKmjEe cx7FYainEv8Gnx+8LZC4ZbD/Kgs/3bkHtry9gAFJ6/RKnUFXbaUgUQOkLdQL2rQd 1Xf6A/cpVtpOwrODkDPdjlMMmYn3T7A= -----END CERTIFICATE-----Generated at Mon Sep 28 21:47:17 2026 by rpki-client