$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/09cc467f-7aad-3430-a565-0591d1cc6aab.roa File: 09cc467f-7aad-3430-a565-0591d1cc6aab.roa (raw, json) Hash identifier: YtQVkkQJGgHE7409CmoNOryS1ngYwCfwto9mEO4qofk= Subject key identifier: DB:48:C2:93:D8:18:E4:5C:2E:0C:CE:13:32:C8:40:93:50:80:AC:DC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F3FAD43B801B9140CA78BBE00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/09cc467f-7aad-3430-a565-0591d1cc6aab.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:43:b8:01:b9:14:0c:a7:8b:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=7cac3638-9fe7-437b-98a1-6029a3902a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9b:f8:40:e4:0a:38:ca:9d:ff:06:fc:21:0f: d6:2e:9d:b2:83:a8:16:e6:e8:e1:48:ae:ff:1d:45: 06:f6:a9:22:1e:da:86:aa:ff:d9:e2:d1:83:19:15: 66:14:56:de:8c:23:1f:13:0b:8a:f0:f4:00:93:08: 11:42:e2:df:f3:aa:4a:f3:99:1e:e6:0e:e1:17:54: 41:e7:57:42:90:f1:cd:9a:15:84:20:37:25:1f:51: 7f:e4:1f:17:05:ce:6c:3e:99:16:5d:3a:aa:00:a9: 61:84:7c:d4:04:3d:63:b7:d9:7b:dd:28:51:19:ad: ed:84:de:6b:a5:34:ea:05:60:d9:a0:b5:79:53:27: 16:e8:b6:36:1e:d4:1e:fa:6a:b9:b6:6b:d9:86:40: 03:1e:a0:98:b0:a6:f8:2f:b0:a7:67:27:e7:d8:4d: 02:1c:48:fc:b3:82:90:3a:a5:b9:39:41:db:c5:84: d3:06:f9:58:e1:59:39:64:58:5a:e9:e3:20:92:37: ce:36:c8:cc:0e:39:25:28:70:e2:10:83:e2:32:64: aa:ef:2d:74:7f:f5:27:36:aa:2b:1c:db:1d:64:21: 88:ea:27:31:c6:27:a5:e2:f8:5f:c0:40:cf:1b:20: 5e:d7:51:58:5e:2c:53:5f:6d:4a:dc:49:77:62:97: e8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:48:C2:93:D8:18:E4:5C:2E:0C:CE:13:32:C8:40:93:50:80:AC:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/09cc467f-7aad-3430-a565-0591d1cc6aab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:24:f2:f2:72:36:0e:a1:87:ae:77:de:de:bd:5c:a8:2d:73: 9c:db:53:f4:03:f9:51:8a:68:e6:06:46:62:6c:90:63:4c:8a: 0d:d2:27:bc:6e:39:f3:9a:c4:f0:13:11:85:82:f2:ef:f3:07: 45:a7:4f:2c:d9:2e:28:8b:08:30:ba:ba:bd:7b:0d:c7:c8:ba: 44:d5:b4:8e:d6:29:95:01:84:d6:97:d3:f1:81:cb:37:e0:d6: 85:91:0f:59:36:35:82:27:71:23:b7:55:87:ef:b6:f6:d1:13: f6:6b:e7:ec:18:a8:8e:fa:a4:7f:95:df:d1:dc:97:76:1b:d0: ed:0a:1e:de:3b:99:de:91:3b:f4:a1:f4:11:ff:50:31:43:f6: 8a:42:84:c3:e3:0a:c0:0b:49:83:de:6b:20:de:53:eb:4a:20: 7a:c1:e8:86:3d:23:7e:46:e0:33:a9:3e:c4:ea:1b:f8:28:39: 09:fb:6e:72:e5:3a:35:6d:29:04:85:c6:a5:62:db:0a:7c:04: 56:9d:05:0f:f0:4a:b2:09:63:a6:82:e9:7a:b5:d9:bc:39:4c: 91:46:98:30:87:56:ff:69:98:b2:69:85:a4:a9:2e:fa:f7:88: 2e:62:ef:c5:2f:71:38:78:4f:4b:8e:0d:f2:25:55:20:85:eb: 98:76:b2:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rUO4AbkUDKeLvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk N2NhYzM2MzgtOWZlNy00MzdiLTk4YTEtNjAyOWEzOTAyYTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJv4QOQKOMqd/wb8IQ/WLp2yg6gW5ujhSK7/ HUUG9qkiHtqGqv/Z4tGDGRVmFFbejCMfEwuK8PQAkwgRQuLf86pK85ke5g7hF1RB 51dCkPHNmhWEIDclH1F/5B8XBc5sPpkWXTqqAKlhhHzUBD1jt9l73ShRGa3thN5r pTTqBWDZoLV5UycW6LY2HtQe+mq5tmvZhkADHqCYsKb4L7CnZyfn2E0CHEj8s4KQ OqW5OUHbxYTTBvlY4Vk5ZFha6eMgkjfONsjMDjklKHDiEIPiMmSq7y10f/UnNqor HNsdZCGI6icxxiel4vhfwEDPGyBe11FYXixTX21K3El3YpfoeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtIwpPYGORcLgzOEzLIQJNQgKzcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDljYzQ2N2YtN2FhZC0z NDMwLWE1NjUtMDU5MWQxY2M2YWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEok8vJyNg6hh6533t69XKgtc5zbU/QD+VGKaOYGRmJskGNMig3SJ7xu OfOaxPATEYWC8u/zB0WnTyzZLiiLCDC6ur17DcfIukTVtI7WKZUBhNaX0/GByzfg 1oWRD1k2NYIncSO3VYfvtvbRE/Zr5+wYqI76pH+V39Hcl3Yb0O0KHt47md6RO/Sh 9BH/UDFD9opChMPjCsALSYPeayDeU+tKIHrB6IY9I35G4DOpPsTqG/goOQn7bnLl OjVtKQSFxqVi2wp8BFadBQ/wSrIJY6aC6Xq12bw5TJFGmDCHVv9pmLJphaSpLvr3 iC5i78UvcTh4T0uODfIlVSCF65h2ss4= -----END CERTIFICATE-----Generated at Mon Sep 28 21:15:44 2026 by rpki-client