$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/02a83350-670d-3cb6-afe2-eff642f4f27c.roa File: 02a83350-670d-3cb6-afe2-eff642f4f27c.roa (raw, json) Hash identifier: woLNd8ZsgBwJ0gS31S4nDfSaJess1SqMpgF7ifIyaL0= Subject key identifier: F7:D8:AC:BB:D8:44:3E:67:D8:36:01:0C:15:78:31:55:BA:65:F0:DD Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F2957C88B9FC8A5EB80FEAC00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/02a83350-670d-3cb6-afe2-eff642f4f27c.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 8069 IP address blocks: 20.33.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:c8:8b:9f:c8:a5:eb:80:fe:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=ecb65e8a-79c4-4cdf-86dc-243695c4fc1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a7:82:0e:bb:51:26:74:9d:de:dc:5b:8c:c8: 5f:72:ff:da:dc:23:9c:9d:c4:30:83:12:fd:4a:03: f2:dd:28:31:b9:da:d9:b4:c2:9e:94:a7:fb:29:a6: aa:33:18:3f:0e:d0:0e:3d:fe:3a:da:3b:de:09:b8: 21:27:ee:16:8c:75:97:a6:f6:4b:60:e8:20:a2:99: 69:26:89:8c:af:98:f9:fb:ab:41:b0:e2:6e:61:d0: cb:1d:78:a9:34:bc:cd:af:08:bd:07:52:72:ef:52: 78:f8:c9:18:ed:30:89:e0:5f:86:16:3f:df:c0:ce: 4d:11:2e:2a:fd:cf:a7:b8:ec:c7:78:84:2b:44:51: 50:b8:f5:6c:85:ea:9e:5b:ea:21:8a:eb:86:5e:fe: 0d:35:bd:89:5b:f8:49:58:f1:f4:da:f0:49:7b:f6: 95:5e:93:f0:f4:67:0b:4c:7e:a6:ef:41:9d:46:a8: 72:fd:0a:a3:62:ce:b4:5f:bc:e1:16:d4:1c:c5:19: cb:7e:ef:ff:b5:4b:02:2d:ef:b2:03:1e:50:2c:34: e1:8f:f9:41:e5:0b:29:f8:6c:60:7e:77:41:37:70: 5d:85:43:e9:88:dc:55:a7:d7:71:d3:47:3f:ce:c6: a6:5e:51:c6:ed:06:b2:bc:15:7b:e4:ba:6e:95:18: 77:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D8:AC:BB:D8:44:3E:67:D8:36:01:0C:15:78:31:55:BA:65:F0:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/02a83350-670d-3cb6-afe2-eff642f4f27c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:14:c7:8a:40:d0:af:9a:18:cd:03:d8:5e:9b:d6:4f:55:32: de:2b:82:8c:99:63:b2:a9:e4:ef:26:ff:2f:4c:60:f1:61:66: 3b:70:92:62:b0:ac:d7:76:78:87:17:ae:47:fd:a9:f3:dc:99: 57:3f:ba:f9:7c:5a:f8:29:af:a4:2e:39:9c:8a:90:f7:0c:8c: db:ea:54:9b:77:b1:cd:5e:43:cb:16:68:fb:1d:31:71:4a:07: 23:01:c0:73:37:92:03:99:5f:8c:92:b5:10:da:90:31:a7:c9: 00:05:a9:ce:f4:a4:c3:33:6f:5a:ed:17:7d:bf:0c:f8:99:4f: 27:bd:d1:31:23:69:ef:94:c4:05:39:2e:39:4c:1b:ec:09:ba: c2:86:42:88:d4:fa:d0:fb:3c:d8:4e:b1:a2:1c:25:fa:70:78: 38:8a:98:76:f0:ff:6f:74:3c:60:45:23:f7:d8:09:13:ec:35: 24:0d:bb:eb:ec:5d:2e:d3:15:8c:05:c9:81:93:42:40:6a:d0: 2d:56:74:14:37:75:9a:04:cb:cc:aa:41:8d:b2:58:62:3f:a0: ca:d3:68:8b:ec:1a:1c:c3:89:34:3a:d8:de:62:c6:49:be:3b: 7f:b0:28:ce:a3:30:32:44:c0:bd:50:67:d6:bc:18:a2:a3:f3: 84:3c:de:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV8iLn8il64D+rAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk ZWNiNjVlOGEtNzljNC00Y2RmLTg2ZGMtMjQzNjk1YzRmYzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKeCDrtRJnSd3txbjMhfcv/a3COcncQwgxL9 SgPy3SgxudrZtMKelKf7KaaqMxg/DtAOPf462jveCbghJ+4WjHWXpvZLYOggoplp JomMr5j5+6tBsOJuYdDLHXipNLzNrwi9B1Jy71J4+MkY7TCJ4F+GFj/fwM5NES4q /c+nuOzHeIQrRFFQuPVsheqeW+ohiuuGXv4NNb2JW/hJWPH02vBJe/aVXpPw9GcL TH6m70GdRqhy/QqjYs60X7zhFtQcxRnLfu//tUsCLe+yAx5QLDThj/lB5Qsp+Gxg fndBN3BdhUPpiNxVp9dx00c/zsamXlHG7QayvBV75LpulRh3/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfYrLvYRD5n2DYBDBV4MVW6ZfDdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDJhODMzNTAtNjcwZC0z Y2I2LWFmZTItZWZmNjQyZjRmMjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkUx4pA0K+aGM0D2F6b1k9VMt4rgoyZY7Kp5O8m/y9MYPFhZjtwkmKw rNd2eIcXrkf9qfPcmVc/uvl8Wvgpr6QuOZyKkPcMjNvqVJt3sc1eQ8sWaPsdMXFK ByMBwHM3kgOZX4yStRDakDGnyQAFqc70pMMzb1rtF32/DPiZTye90TEjae+UxAU5 LjlMG+wJusKGQojU+tD7PNhOsaIcJfpweDiKmHbw/290PGBFI/fYCRPsNSQNu+vs XS7TFYwFyYGTQkBq0C1WdBQ3dZoEy8yqQY2yWGI/oMrTaIvsGhzDiTQ62N5ixkm+ O3+wKM6jMDJEwL1QZ9a8GKKj84Q83lw= -----END CERTIFICATE-----Generated at Mon Sep 28 21:15:34 2026 by rpki-client