$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a224f8e7-d8e5-3c2c-8b2f-55a68efb823b.roa File: a224f8e7-d8e5-3c2c-8b2f-55a68efb823b.roa (raw, json) Hash identifier: MJJjW+3qXWWDx6dN7GnqFccp6sGa8cHWFGE644bSk88= Subject key identifier: F9:C2:C2:3E:E4:96:B2:3A:24:A9:F5:3F:18:EE:C4:F8:18:AB:7D:DD Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F497F1F3F5BE98ECB40A72340 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a224f8e7-d8e5-3c2c-8b2f-55a68efb823b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:1f:3f:5b:e9:8e:cb:40:a7:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7fa21224-d791-4fe0-ab9c-00d92fa8b6b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:e9:eb:16:cc:c2:2b:70:6b:f5:76:d2:ed:93: cb:7c:6d:be:bd:79:cf:9f:57:75:5f:52:f0:61:1b: b2:af:06:af:d2:43:4e:fc:af:e2:8d:34:61:bf:5a: 73:69:fe:87:30:ee:9a:93:ac:06:6b:71:04:7b:c5: 0e:50:18:6a:3e:a1:c0:c6:18:f7:f8:5b:5e:e0:d3: b8:dc:cf:de:a1:87:10:f0:89:47:91:27:cd:e6:93: 10:5b:76:4d:8f:08:56:9a:cd:a4:15:e4:7b:cd:a8: ce:3e:a7:c6:5f:9d:bb:73:b5:82:2e:60:66:86:9a: 28:f8:c5:12:27:67:95:75:47:08:42:af:a7:a5:8d: af:46:44:63:9d:fe:73:cc:d1:0b:4f:92:91:ff:7a: 4c:3e:b4:b2:02:79:47:f4:e0:26:86:6d:6d:e0:fe: df:f9:1e:4e:0c:30:6a:02:b6:9b:08:6f:a7:2a:af: 30:28:21:ec:df:82:58:97:0c:17:72:94:5f:cd:6e: 5d:cd:3d:92:98:53:01:f2:9d:66:32:ba:71:b1:df: 1d:9a:54:ca:3b:bc:a1:f2:26:c4:27:be:a8:f1:ff: b7:c5:aa:f3:43:fa:fb:c5:e0:82:8f:d5:d3:a8:4a: 4f:c7:76:e8:d5:18:bd:b3:eb:11:bc:86:9d:b8:8f: dd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C2:C2:3E:E4:96:B2:3A:24:A9:F5:3F:18:EE:C4:F8:18:AB:7D:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a224f8e7-d8e5-3c2c-8b2f-55a68efb823b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:a4:98:90:ff:fd:d2:49:d0:7e:d0:30:0a:d1:f6:30:24:f1: a4:2a:77:83:1b:48:a8:96:48:5e:a0:c6:79:3d:b3:ca:90:99: c2:34:de:ae:b5:c8:96:a5:a4:4a:7e:93:3d:ce:d4:a1:9b:0d: de:91:c7:b9:ca:a3:a0:4a:41:86:e6:bd:24:94:91:f7:1b:53: 1f:07:b0:22:76:dc:39:91:3b:8a:9d:cf:5c:43:6a:1a:48:a2: 00:73:9d:af:b6:a4:e0:3b:fc:b2:3c:74:ba:64:78:c4:22:db: 27:dd:7a:fc:89:a9:b9:b2:b1:fb:61:46:a6:56:7e:88:d3:2b: df:32:c7:23:f2:6b:fa:8e:6a:9c:e1:ce:e6:f0:b6:cc:1f:8d: 2b:37:2b:4b:fa:36:6e:09:fd:37:95:83:5a:f4:7d:c8:fb:38: 57:d0:fc:28:40:aa:4c:f7:a7:ec:29:65:2a:34:45:7b:4f:eb: 2b:9e:13:3d:89:ce:f6:ef:b2:79:b7:3b:66:33:3a:df:d9:f9: 89:56:d8:2b:3f:d1:5c:41:31:2c:5f:4c:b5:0b:d8:00:56:24: f0:f2:54:87:0e:10:83:e1:ec:4b:6e:e7:dd:f3:cd:56:7c:63: a3:63:0f:32:ac:da:67:9d:ed:6e:5e:1c:92:01:e0:d8:16:0c: 9d:bd:19:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jfx8/W+mOy0CnI0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2ZhMjEyMjQtZDc5MS00ZmUwLWFiOWMtMDBkOTJmYThiNmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+nrFszCK3Br9XbS7ZPLfG2+vXnPn1d1X1Lw YRuyrwav0kNO/K/ijTRhv1pzaf6HMO6ak6wGa3EEe8UOUBhqPqHAxhj3+Fte4NO4 3M/eoYcQ8IlHkSfN5pMQW3ZNjwhWms2kFeR7zajOPqfGX527c7WCLmBmhpoo+MUS J2eVdUcIQq+npY2vRkRjnf5zzNELT5KR/3pMPrSyAnlH9OAmhm1t4P7f+R5ODDBq ArabCG+nKq8wKCHs34JYlwwXcpRfzW5dzT2SmFMB8p1mMrpxsd8dmlTKO7yh8ibE J76o8f+3xarzQ/r7xeCCj9XTqEpPx3bo1Ri9s+sRvIaduI/dtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnCwj7klrI6JKn1PxjuxPgYq33dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTIyNGY4ZTctZDhlNS0z YzJjLThiMmYtNTVhNjhlZmI4MjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCkmJD//dJJ0H7QMArR9jAk8aQqd4MbSKiWSF6gxnk9s8qQmcI03q61 yJalpEp+kz3O1KGbDd6Rx7nKo6BKQYbmvSSUkfcbUx8HsCJ23DmRO4qdz1xDahpI ogBzna+2pOA7/LI8dLpkeMQi2yfdevyJqbmysfthRqZWfojTK98yxyPya/qOapzh zubwtswfjSs3K0v6Nm4J/TeVg1r0fcj7OFfQ/ChAqkz3p+wpZSo0RXtP6yueEz2J zvbvsnm3O2YzOt/Z+YlW2Cs/0VxBMSxfTLUL2ABWJPDyVIcOEIPh7Etu593zzVZ8 Y6NjDzKs2med7W5eHJIB4NgWDJ29GW4= -----END CERTIFICATE-----Generated at Sun Sep 27 16:15:54 2026 by rpki-client