$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9b153f48-fda1-3324-9da3-41ec104e3952.roa File: 9b153f48-fda1-3324-9da3-41ec104e3952.roa (raw, json) Hash identifier: FCBpB45RuHTXKvqg1l4UFcrd2qW3//BL4AljnaQ4oGY= Subject key identifier: FC:8C:EA:1C:9C:EB:02:A7:37:C7:71:B8:58:BC:39:F8:B0:19:C0:17 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F3052857BE3864A4B6170F300 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9b153f48-fda1-3324-9da3-41ec104e3952.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:85:7b:e3:86:4a:4b:61:70:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=02d05239-9610-4406-94ae-6d266e1413c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a3:5b:86:e9:3a:69:c1:3f:6f:2f:97:12:a4: b7:6b:5c:fb:27:62:1a:70:fe:43:0f:59:95:19:58: 36:5e:94:c4:72:ee:c2:a4:ef:8c:12:62:69:64:a5: d3:65:ee:10:e3:ca:9a:c9:9e:8d:28:65:9b:05:8a: 96:e1:c0:b4:35:ae:8c:a0:c8:11:e6:70:3b:00:9b: 71:46:9f:c6:dd:9e:12:ed:e2:a6:25:1f:91:4d:0b: b9:20:18:17:e4:e7:b4:7b:8d:3c:ba:64:5a:32:2e: 51:db:51:45:ff:a7:f2:bc:6f:93:19:f3:2d:7f:02: 54:47:e1:da:c8:b8:dd:36:4c:88:a0:bd:95:ae:56: ac:df:f3:39:c2:a2:b0:ed:e1:b3:f8:f0:4b:65:a6: dd:b3:7b:66:5c:7a:cc:e1:af:f6:c9:62:4e:fe:ad: 5c:aa:5f:af:10:52:ab:79:29:a8:19:01:cf:ee:c7: 48:07:47:ff:64:a2:56:1a:57:37:0b:08:42:5a:c9: 04:57:4d:6f:4d:f1:43:3b:75:2c:5d:50:53:62:41: 20:b9:eb:24:a3:9e:f1:40:0f:bc:99:cc:79:73:0b: 7a:4d:64:04:f2:b3:63:2e:c2:fe:46:5b:96:41:f9: a7:41:01:26:43:68:60:9b:dd:0f:33:51:c1:54:a0: 09:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:8C:EA:1C:9C:EB:02:A7:37:C7:71:B8:58:BC:39:F8:B0:19:C0:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9b153f48-fda1-3324-9da3-41ec104e3952.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:be:5b:16:67:23:69:6c:06:47:fe:5d:df:44:77:47:ca:0f: 59:66:de:b7:d7:ac:bf:48:e8:aa:74:ba:97:9d:21:3f:5b:91: 08:2d:7b:7d:c8:d3:c1:62:df:c8:9c:67:5c:9b:30:92:6c:97: 68:6f:70:c8:9c:b6:2a:b5:4d:77:76:de:39:fb:d6:b8:a2:bd: 1d:db:73:fc:13:8d:1e:70:fd:17:cc:ce:4d:c3:f0:3a:72:22: 8d:d6:80:fd:57:c8:db:97:1b:e7:23:40:93:af:fb:a9:a5:9f: b4:55:76:a8:40:9f:a6:cd:46:d7:5d:f7:f4:bb:66:45:0a:84: 79:4b:d1:3b:f5:14:33:4a:2a:d7:0a:85:76:48:f5:b7:e7:fa: a9:2f:21:5e:ea:53:5d:b9:a6:d8:63:97:44:dc:9b:46:ac:62: a4:a3:f3:4f:44:c1:33:a8:b5:71:55:d3:b4:a4:cb:76:80:b2: 44:1f:91:d7:01:1f:a1:57:07:e3:ba:a9:10:63:70:0f:1c:2a: 73:f2:12:35:f6:5e:42:9a:13:79:18:dd:17:1d:22:75:4e:79: 9f:96:1f:83:5a:9e:91:6d:f3:dd:ea:de:59:cf:cb:4d:fb:59: 2f:f3:78:46:12:90:91:1e:3f:7c:6e:1c:b8:16:d7:75:0f:97: ad:20:26:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUoV744ZKS2Fw8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk MDJkMDUyMzktOTYxMC00NDA2LTk0YWUtNmQyNjZlMTQxM2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKNbhuk6acE/by+XEqS3a1z7J2IacP5DD1mV GVg2XpTEcu7CpO+MEmJpZKXTZe4Q48qayZ6NKGWbBYqW4cC0Na6MoMgR5nA7AJtx Rp/G3Z4S7eKmJR+RTQu5IBgX5Oe0e408umRaMi5R21FF/6fyvG+TGfMtfwJUR+Ha yLjdNkyIoL2Vrlas3/M5wqKw7eGz+PBLZabds3tmXHrM4a/2yWJO/q1cql+vEFKr eSmoGQHP7sdIB0f/ZKJWGlc3CwhCWskEV01vTfFDO3UsXVBTYkEguesko57xQA+8 mcx5cwt6TWQE8rNjLsL+RluWQfmnQQEmQ2hgm90PM1HBVKAJ2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyM6hyc6wKnN8dxuFi8OfiwGcAXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOWIxNTNmNDgtZmRhMS0z MzI0LTlkYTMtNDFlYzEwNGUzOTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFa+WxZnI2lsBkf+Xd9Ed0fKD1lm3rfXrL9I6Kp0upedIT9bkQgte33I 08Fi38icZ1ybMJJsl2hvcMictiq1TXd23jn71riivR3bc/wTjR5w/RfMzk3D8Dpy Io3WgP1XyNuXG+cjQJOv+6mln7RVdqhAn6bNRtdd9/S7ZkUKhHlL0Tv1FDNKKtcK hXZI9bfn+qkvIV7qU125pthjl0Tcm0asYqSj809EwTOotXFV07Sky3aAskQfkdcB H6FXB+O6qRBjcA8cKnPyEjX2XkKaE3kY3RcdInVOeZ+WH4NanpFt893q3lnPy037 WS/zeEYSkJEeP3xuHLgW13UPl60gJvY= -----END CERTIFICATE-----Generated at Sat Oct 10 14:23:13 2026 by rpki-client