$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d0a7225f-2047-3944-a23d-469eab9df0ec.roa File: d0a7225f-2047-3944-a23d-469eab9df0ec.roa (raw, json) Hash identifier: fXlGMqhXxFOnT3yPtdh+xMqKrS0FA9tG1HNZqILOitY= Subject key identifier: F1:76:34:A3:B4:5B:0B:98:85:FD:3B:14:37:8B:A9:C7:F5:9E:91:5D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F2957C87FB0B3E28BFACE8F1C Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d0a7225f-2047-3944-a23d-469eab9df0ec.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 8069 IP address blocks: 20.33.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:c8:7f:b0:b3:e2:8b:fa:ce:8f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=31cc1f4b-37a9-4d50-ad61-57b027bff4d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:28:e3:cf:12:84:51:40:d4:99:05:cb:b8:2b: c6:9d:fe:0b:12:32:9e:a1:10:17:23:d8:dd:d5:c8: 83:94:3e:5e:1f:55:f3:d5:46:f1:eb:ca:8e:7c:5c: b7:b3:e1:1b:ca:49:28:dd:b2:be:7a:08:c9:81:bd: 52:e1:7b:1d:1e:7f:a0:85:cb:5e:0b:79:84:93:a2: 47:21:06:29:d3:ae:a9:93:86:1f:a5:10:ec:9b:96: 8e:fa:59:dd:69:84:7e:7a:cd:56:4c:ab:24:0f:77: 5d:3a:d5:e1:fc:a7:c2:eb:db:d0:16:35:dc:f6:4d: 55:f5:1f:b7:fc:7b:8c:73:6d:97:bc:9b:8c:9a:7e: f7:8a:14:27:f7:70:65:ac:e3:20:36:58:58:dd:3a: 28:14:92:25:e2:66:a5:d3:10:5b:b5:6a:80:fd:94: 67:67:cd:1e:a1:5b:71:c1:f7:76:2b:97:06:31:3a: 9e:b8:b3:5b:60:43:65:a0:9f:c1:10:f3:9f:97:69: bc:d5:3d:b9:b9:5b:70:20:2c:bf:c7:31:59:2f:d3: 5b:5c:6f:30:84:3d:b6:0f:fe:c7:c0:b5:56:b5:43: c2:43:ef:ef:97:28:12:ae:9b:f1:14:c2:3f:6e:31: 5e:a0:ea:a0:cb:ef:a2:ea:d1:db:2e:91:10:9f:c4: 83:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:76:34:A3:B4:5B:0B:98:85:FD:3B:14:37:8B:A9:C7:F5:9E:91:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d0a7225f-2047-3944-a23d-469eab9df0ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:ab:6a:3b:75:40:58:65:34:a5:8a:5b:88:06:b4:c0:94:a0: 40:0f:9a:04:96:65:69:ea:b3:34:9a:4a:d8:8b:7a:36:61:62: c2:72:ba:8b:56:a0:0d:2e:a1:de:2f:75:3e:65:9c:2e:79:9d: 37:0c:40:4e:81:be:10:a7:54:ff:9f:1b:53:eb:30:f0:10:aa: 7d:77:a6:b4:f9:ae:85:f8:d6:ab:a6:4d:00:ad:39:2a:a8:aa: a5:82:98:8e:96:6d:e8:6f:55:4f:9b:5f:7d:61:b2:8f:7f:1d: 5e:ba:bb:43:61:5e:8b:1c:6a:41:d5:f8:a5:6e:8a:96:72:78: 99:21:48:1a:cb:33:70:de:b2:a3:24:17:aa:38:39:ad:5b:36: 89:78:15:9e:91:37:be:b3:e0:d3:11:b0:e7:b1:43:27:3c:f8: 65:76:ec:09:29:8a:9c:cd:fd:a2:b5:90:10:16:53:46:24:59: a3:83:61:8e:92:13:e6:c9:f8:18:3e:87:85:42:a0:72:7e:c9: f9:c1:8a:7b:05:8f:52:68:68:29:9b:ac:e5:f9:94:51:39:64: f3:08:eb:cb:9d:ed:0b:7c:29:ac:47:a5:39:ef:e1:12:7f:41: de:77:02:e2:a2:38:41:2c:53:53:8b:1a:18:f9:bf:22:0e:fe: f5:77:f7:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV8h/sLPii/rOjxwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk MzFjYzFmNGItMzdhOS00ZDUwLWFkNjEtNTdiMDI3YmZmNGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSjjzxKEUUDUmQXLuCvGnf4LEjKeoRAXI9jd 1ciDlD5eH1Xz1Ubx68qOfFy3s+Ebykko3bK+egjJgb1S4XsdHn+ghcteC3mEk6JH IQYp066pk4YfpRDsm5aO+lndaYR+es1WTKskD3ddOtXh/KfC69vQFjXc9k1V9R+3 /HuMc22XvJuMmn73ihQn93BlrOMgNlhY3TooFJIl4mal0xBbtWqA/ZRnZ80eoVtx wfd2K5cGMTqeuLNbYENloJ/BEPOfl2m81T25uVtwICy/xzFZL9NbXG8whD22D/7H wLVWtUPCQ+/vlygSrpvxFMI/bjFeoOqgy++i6tHbLpEQn8SDOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPF2NKO0WwuYhf07FDeLqcf1npFdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDBhNzIyNWYtMjA0Ny0z OTQ0LWEyM2QtNDY5ZWFiOWRmMGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOrajt1QFhlNKWKW4gGtMCUoEAPmgSWZWnqszSaStiLejZhYsJyuotW oA0uod4vdT5lnC55nTcMQE6BvhCnVP+fG1PrMPAQqn13prT5roX41qumTQCtOSqo qqWCmI6WbehvVU+bX31hso9/HV66u0NhXoscakHV+KVuipZyeJkhSBrLM3DesqMk F6o4Oa1bNol4FZ6RN76z4NMRsOexQyc8+GV27AkpipzN/aK1kBAWU0YkWaODYY6S E+bJ+Bg+h4VCoHJ+yfnBinsFj1JoaCmbrOX5lFE5ZPMI68ud7Qt8KaxHpTnv4RJ/ Qd53AuKiOEEsU1OLGhj5vyIO/vV390M= -----END CERTIFICATE-----Generated at Mon Sep 28 23:33:51 2026 by rpki-client