$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/afceef4f-d98a-3a55-87af-6d0e1ed3d7c7.roa File: afceef4f-d98a-3a55-87af-6d0e1ed3d7c7.roa (raw, json) Hash identifier: li/4KvaDru3yGYu4g6+VUm7UMXvazSnyeWY8QX1OT5w= Subject key identifier: 55:68:D1:99:FB:3F:B0:C8:A2:BA:B5:AB:65:B0:6A:35:39:2F:A1:8F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F497AA52115B9AEFC4FE10FD7 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/afceef4f-d98a-3a55-87af-6d0e1ed3d7c7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:a5:21:15:b9:ae:fc:4f:e1:0f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e7e2f715-2ca0-4680-8c4c-309ecad9c1cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7c:0f:ef:b1:9f:76:84:b0:09:9b:64:58:ee: 2a:61:19:80:39:dc:32:05:87:a6:b9:4a:58:57:93: 0c:bf:fc:95:80:7e:5e:cc:e8:9e:e8:d3:4a:55:e9: de:44:68:a9:1a:7e:b4:93:03:db:d2:57:27:90:a5: 96:8e:dd:60:77:43:4e:e4:e1:fe:c9:2f:3d:30:e4: 39:ba:01:82:2a:3a:8b:26:d9:aa:b6:05:05:f7:3a: 8b:db:21:52:5b:f3:bc:0a:bd:2c:42:2b:b5:28:2e: bf:60:3c:b9:fd:cb:01:7b:eb:96:4d:95:c9:e0:51: d8:31:5b:bb:5c:50:f4:de:17:aa:09:ce:b8:d8:ae: d6:bb:06:9b:c8:76:8f:fa:b1:92:98:38:c7:0d:a5: c0:44:e5:3a:9e:77:53:08:e5:6d:95:79:a4:f3:9d: 1c:7e:2f:32:44:f0:da:66:94:33:35:1f:e3:d5:03: a1:38:48:9b:ed:3b:e0:99:34:fe:69:a8:31:38:a8: ce:d5:d7:a0:c4:0d:f0:d1:de:95:30:44:5e:48:3d: 12:0d:cb:ec:cb:e6:d4:0a:c1:b1:52:1c:c5:e7:fc: 56:ab:89:a5:ae:5d:48:7c:be:84:72:b4:ee:e5:fa: 62:c9:a3:4c:82:25:5b:6d:62:f4:23:ad:58:35:41: 17:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:68:D1:99:FB:3F:B0:C8:A2:BA:B5:AB:65:B0:6A:35:39:2F:A1:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/afceef4f-d98a-3a55-87af-6d0e1ed3d7c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:5e:71:fd:e0:c1:36:7a:ef:c7:62:6b:b7:a5:e5:e7:87:14: 39:1c:7e:93:56:30:c4:14:0f:77:0e:1c:de:58:d6:32:da:33: 3c:95:d3:ed:08:fd:5b:b2:2e:b3:06:ff:57:48:c2:36:63:66: 6b:65:18:d5:d9:a3:3e:cd:e4:a4:b9:a0:11:0f:d7:8e:bb:98: b6:31:8a:bb:b5:d1:82:e6:49:81:1e:56:b1:44:ae:45:9e:62: 62:8a:0a:23:82:90:a7:49:98:6d:bc:5b:bd:37:fc:ce:c6:0f: 5a:93:8b:49:dd:e7:05:1a:60:c5:61:ff:c0:7d:f9:f7:1c:85: 8c:db:3e:3b:26:90:e5:d2:65:3f:a8:52:b7:42:96:5e:47:8f: ce:a1:93:46:86:01:05:b7:02:61:d3:30:a0:98:2e:d1:c3:66: 8f:05:c3:55:5e:d8:9c:fe:76:2a:83:97:89:d3:d8:df:75:6d: d1:9b:22:5a:00:fa:70:2b:5a:63:fd:8c:32:78:09:eb:02:0e: e7:03:a5:bd:70:95:2b:5d:54:99:d2:ed:f0:10:6f:96:7c:97: 9c:40:e2:9c:33:3c:e3:ba:d1:b9:3c:bd:cb:9d:82:ab:e7:67: a3:ab:bb:b1:33:71:10:41:70:1d:37:e1:7c:0c:f1:f6:d8:3b: c8:00:55:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeqUhFbmu/E/hD9cwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTdlMmY3MTUtMmNhMC00NjgwLThjNGMtMzA5ZWNhZDljMWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3wP77GfdoSwCZtkWO4qYRmAOdwyBYemuUpY V5MMv/yVgH5ezOie6NNKVeneRGipGn60kwPb0lcnkKWWjt1gd0NO5OH+yS89MOQ5 ugGCKjqLJtmqtgUF9zqL2yFSW/O8Cr0sQiu1KC6/YDy5/csBe+uWTZXJ4FHYMVu7 XFD03heqCc642K7WuwabyHaP+rGSmDjHDaXAROU6nndTCOVtlXmk850cfi8yRPDa ZpQzNR/j1QOhOEib7TvgmTT+aagxOKjO1degxA3w0d6VMEReSD0SDcvsy+bUCsGx UhzF5/xWq4mlrl1IfL6EcrTu5fpiyaNMgiVbbWL0I61YNUEXXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVo0Zn7P7DIorq1q2WwajU5L6GPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWZjZWVmNGYtZDk4YS0z YTU1LTg3YWYtNmQwZTFlZDNkN2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtecf3gwTZ678dia7el5eeHFDkcfpNWMMQUD3cOHN5Y1jLaMzyV0+0I /VuyLrMG/1dIwjZjZmtlGNXZoz7N5KS5oBEP1467mLYxiru10YLmSYEeVrFErkWe YmKKCiOCkKdJmG28W703/M7GD1qTi0nd5wUaYMVh/8B9+fcchYzbPjsmkOXSZT+o UrdCll5Hj86hk0aGAQW3AmHTMKCYLtHDZo8Fw1Ve2Jz+diqDl4nT2N91bdGbIloA +nArWmP9jDJ4CesCDucDpb1wlStdVJnS7fAQb5Z8l5xA4pwzPOO60bk8vcudgqvn Z6Oru7EzcRBBcB034XwM8fbYO8gAVTE= -----END CERTIFICATE-----Generated at Mon Sep 28 03:25:32 2026 by rpki-client