$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/efb1c1ad-ec2f-3783-baa2-6ea6f6ff3018.roa File: efb1c1ad-ec2f-3783-baa2-6ea6f6ff3018.roa (raw, json) Hash identifier: PkQx7rhQ26m4XeBETKJOZLcJCgRAQiXIErOQl2IvDB8= Subject key identifier: BE:59:04:C5:C1:D6:9C:E0:5B:7B:A1:2E:9C:B2:CB:45:2C:17:E0:87 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F3A17CBD0663A6CAB11A81380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/efb1c1ad-ec2f-3783-baa2-6ea6f6ff3018.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:cb:d0:66:3a:6c:ab:11:a8:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=50266a56-e7ac-4dfb-8a00-118f6ea367bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7b:c7:ee:b6:18:ce:64:d4:f2:94:fa:b0:b8: 7a:13:db:47:de:56:3c:62:5a:91:38:16:7c:0c:a1: 14:64:69:b7:2b:73:85:f7:cb:3b:01:bf:e7:2a:2b: 1c:85:fa:ed:66:c9:7a:c2:45:0e:3e:eb:05:ad:1b: b8:73:8f:ee:42:32:8e:73:77:7d:68:c5:92:51:c3: 72:83:6f:58:d5:4d:f4:93:19:61:2e:e6:6e:ed:b1: 18:db:c0:65:ea:61:5d:43:25:8d:23:d4:45:2a:38: b3:a7:ce:8e:95:70:df:d3:50:a8:9d:3f:a9:e9:a5: fb:1b:80:a2:08:f4:28:e9:3e:2b:b0:d2:27:ba:c3: 3d:2b:20:95:29:c4:be:fc:e8:72:ab:2e:dd:73:0d: ff:fd:a4:a8:6d:07:25:18:31:4a:87:c2:47:5d:4a: 50:5c:4c:26:34:87:47:ff:44:b7:69:08:05:ed:c4: 30:44:7d:86:62:4e:26:77:64:a2:df:5c:18:7b:33: a6:c2:7e:16:70:8e:8f:3c:a5:ae:f1:82:55:66:13: 12:53:d7:51:63:0d:75:f6:4b:4c:5f:ce:07:c6:79: 2a:f4:66:c3:75:f8:7d:a4:cd:87:32:89:f4:97:b2: 19:c6:0e:62:c3:3c:b7:89:fc:b7:f9:d4:6a:9e:7a: 3d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:59:04:C5:C1:D6:9C:E0:5B:7B:A1:2E:9C:B2:CB:45:2C:17:E0:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/efb1c1ad-ec2f-3783-baa2-6ea6f6ff3018.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:4b:4d:79:e3:18:b5:f3:96:f8:16:cd:ae:1f:e3:1f:92:de: a9:7d:f6:24:35:6a:0c:e2:cf:1a:2b:61:0f:3f:af:b2:11:22: 97:2e:ae:64:18:97:04:4b:15:6a:ff:58:22:e8:08:f0:fc:5c: 09:68:13:48:02:8b:74:d5:1a:ce:64:f1:24:4d:df:39:ed:ce: 67:4e:82:84:b6:5a:db:00:50:e2:4a:d0:66:08:46:8b:6f:1e: 75:a1:1d:dd:e7:55:e6:23:40:70:bd:eb:03:8f:37:9d:02:7b: 8b:e8:43:8f:c0:6e:7e:19:89:eb:32:43:d7:f4:3a:67:94:e6: 26:67:2e:27:da:4f:1d:90:e5:7f:b0:14:fe:df:79:ad:7f:b2: 5b:4a:63:39:ed:b6:b7:04:da:94:6f:0a:a2:91:16:eb:d3:9a: a2:01:18:08:cf:72:30:c6:45:ae:dc:dd:ce:ae:8a:d1:e9:80: 88:68:30:0b:15:be:bd:1e:44:36:29:6b:63:ac:fa:a0:06:4f: 81:6c:63:1b:b9:3f:1d:ad:60:9a:ff:7d:f6:a5:c0:ba:40:01: e9:4c:20:b0:82:92:1f:55:b0:fc:13:d8:15:38:9e:fe:9b:4b: cd:62:29:a6:cc:0b:b5:52:1c:46:08:5a:ba:97:83:59:d6:11: 51:07:e2:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8vQZjpsqxGoE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk NTAyNjZhNTYtZTdhYy00ZGZiLThhMDAtMTE4ZjZlYTM2N2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinvH7rYYzmTU8pT6sLh6E9tH3lY8YlqROBZ8 DKEUZGm3K3OF98s7Ab/nKischfrtZsl6wkUOPusFrRu4c4/uQjKOc3d9aMWSUcNy g29Y1U30kxlhLuZu7bEY28Bl6mFdQyWNI9RFKjizp86OlXDf01ConT+p6aX7G4Ci CPQo6T4rsNInusM9KyCVKcS+/Ohyqy7dcw3//aSobQclGDFKh8JHXUpQXEwmNIdH /0S3aQgF7cQwRH2GYk4md2Si31wYezOmwn4WcI6PPKWu8YJVZhMSU9dRYw119ktM X84Hxnkq9GbDdfh9pM2HMon0l7IZxg5iwzy3ify3+dRqnno9wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5ZBMXB1pzgW3uhLpyyy0UsF+CHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWZiMWMxYWQtZWMyZi0z NzgzLWJhYTItNmVhNmY2ZmYzMDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdLTXnjGLXzlvgWza4f4x+S3ql99iQ1agzizxorYQ8/r7IRIpcurmQY lwRLFWr/WCLoCPD8XAloE0gCi3TVGs5k8SRN3zntzmdOgoS2WtsAUOJK0GYIRotv HnWhHd3nVeYjQHC96wOPN50Ce4voQ4/Abn4ZiesyQ9f0OmeU5iZnLifaTx2Q5X+w FP7fea1/sltKYznttrcE2pRvCqKRFuvTmqIBGAjPcjDGRa7c3c6uitHpgIhoMAsV vr0eRDYpa2Os+qAGT4FsYxu5Px2tYJr/ffalwLpAAelMILCCkh9VsPwT2BU4nv6b S81iKabMC7VSHEYIWrqXg1nWEVEH4sY= -----END CERTIFICATE-----Generated at Sun Sep 27 08:52:13 2026 by rpki-client