$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/df8b7abc-0a4f-3be9-b3e3-c5086883b738.roa File: df8b7abc-0a4f-3be9-b3e3-c5086883b738.roa (raw, json) Hash identifier: XQC/A+/b19z7NsbO7/t+UUyGxNouLyErwHg0XbKPQJo= Subject key identifier: 54:1E:1B:A7:07:0A:F5:4F:55:6F:CC:D7:A7:D6:82:5A:3A:44:ED:C2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F497757FBAF34DDFA5C0F5D40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/df8b7abc-0a4f-3be9-b3e3-c5086883b738.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:57:fb:af:34:dd:fa:5c:0f:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=77c19a74-c84c-4ca4-8669-1f5998e3cbc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c6:7a:75:0c:46:c6:52:2e:4b:39:81:d5:6c: 75:3f:24:14:4b:22:47:e0:c6:26:d1:d5:1c:3d:ad: 61:b0:f4:e8:a1:de:96:19:06:b4:c1:4a:6a:26:de: 9f:07:4f:f2:98:0d:18:1b:5c:d0:22:d0:66:bf:95: 9e:54:3b:4e:c9:a8:22:3c:dc:93:64:96:0d:d7:d0: 17:72:d8:b2:0e:59:62:cd:6e:02:2b:01:10:a5:8b: 70:e7:bb:ad:1a:c1:b9:b6:8c:aa:0b:dd:98:e2:74: b2:f0:62:b0:ac:e4:8a:2e:e0:5b:26:38:f3:c9:d1: 68:87:55:c3:d1:0e:a9:c9:ab:1a:2c:12:2d:d7:a7: fa:1c:24:5f:17:03:9c:82:2a:b6:e1:39:5d:7d:62: 97:45:fb:fb:81:42:75:fb:8d:e2:54:14:c4:60:8e: 58:9d:8b:e6:3b:c8:09:1f:6c:01:ad:7d:40:51:90: 89:12:9d:bf:4f:1c:95:73:33:8b:d8:d8:01:20:81: d5:b3:d9:9f:84:65:ab:0a:11:e9:45:26:96:3a:51: 0c:24:4f:dd:ac:92:7b:32:e9:53:17:82:68:84:69: 51:91:00:3b:4e:f8:4f:b8:95:9f:52:cf:95:73:c9: 20:f5:33:f2:ea:0a:fd:37:3f:3f:0f:8a:14:9d:e6: 0c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:1E:1B:A7:07:0A:F5:4F:55:6F:CC:D7:A7:D6:82:5A:3A:44:ED:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/df8b7abc-0a4f-3be9-b3e3-c5086883b738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:28:c0:bd:d7:98:b7:06:a0:84:39:40:4a:53:7e:f5:97:72: e9:86:8a:c7:b8:42:c2:5b:9f:26:93:f4:62:c1:83:89:6d:3d: 21:51:1e:83:8a:1e:d8:6b:8c:8b:a6:84:21:a1:60:51:f7:d1: a9:fa:0a:b6:78:4d:63:7c:15:b9:31:2b:85:7f:aa:74:74:2a: 5e:8f:b3:e3:c5:2c:25:68:bb:c5:cf:2d:25:3f:30:a9:7b:fc: 5b:de:fb:6a:e9:fa:2f:de:b8:a7:d8:e2:85:6c:34:d9:a9:fe: dc:76:d7:3a:b4:f8:fc:67:3c:ed:d3:84:38:64:7b:1f:00:fa: 17:fa:23:c1:86:b0:ea:fa:38:26:7a:ac:de:9b:6b:90:2d:cb: 7c:ce:bf:69:d2:3a:7a:82:5f:b8:62:37:93:36:58:89:8c:06: 36:85:bc:fd:9d:56:1c:a2:15:ea:ab:54:6f:ff:27:8f:fc:02: 3a:df:a7:c2:54:68:18:9e:97:98:c6:49:84:cb:8f:29:cd:6d: 14:f9:fb:59:fd:a7:44:65:aa:a5:66:ec:7b:16:52:bf:79:ad: 78:5e:92:55:cb:ff:dd:b7:5d:42:56:12:2e:6f:47:bc:4c:c2: 9c:0e:71:dd:e0:31:c0:dc:dc:64:cb:ef:f2:ac:47:29:c0:2b: 03:72:45:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd1f7rzTd+lwPXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzdjMTlhNzQtYzg0Yy00Y2E0LTg2NjktMWY1OTk4ZTNjYmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsZ6dQxGxlIuSzmB1Wx1PyQUSyJH4MYm0dUc Pa1hsPTood6WGQa0wUpqJt6fB0/ymA0YG1zQItBmv5WeVDtOyagiPNyTZJYN19AX ctiyDllizW4CKwEQpYtw57utGsG5toyqC92Y4nSy8GKwrOSKLuBbJjjzydFoh1XD 0Q6pyasaLBIt16f6HCRfFwOcgiq24TldfWKXRfv7gUJ1+43iVBTEYI5YnYvmO8gJ H2wBrX1AUZCJEp2/TxyVczOL2NgBIIHVs9mfhGWrChHpRSaWOlEMJE/drJJ7MulT F4JohGlRkQA7TvhPuJWfUs+Vc8kg9TPy6gr9Nz8/D4oUneYMPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQeG6cHCvVPVW/M16fWglo6RO3CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGY4YjdhYmMtMGE0Zi0z YmU5LWIzZTMtYzUwODY4ODNiNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYowL3XmLcGoIQ5QEpTfvWXcumGise4QsJbnyaT9GLBg4ltPSFRHoOK HthrjIumhCGhYFH30an6CrZ4TWN8FbkxK4V/qnR0Kl6Ps+PFLCVou8XPLSU/MKl7 /Fve+2rp+i/euKfY4oVsNNmp/tx21zq0+PxnPO3ThDhkex8A+hf6I8GGsOr6OCZ6 rN6ba5Aty3zOv2nSOnqCX7hiN5M2WImMBjaFvP2dVhyiFeqrVG//J4/8Ajrfp8JU aBiel5jGSYTLjynNbRT5+1n9p0RlqqVm7HsWUr95rXheklXL/923XUJWEi5vR7xM wpwOcd3gMcDc3GTL7/KsRynAKwNyRYA= -----END CERTIFICATE-----Generated at Tue Sep 29 12:22:41 2026 by rpki-client