$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1013a95f-fd72-3dce-bfb5-521c56744daa.roa File: 1013a95f-fd72-3dce-bfb5-521c56744daa.roa (raw, json) Hash identifier: WGqzqfmGc3GnCv5wbSTDfaSE+Emm2c4Kuzi81RT3kM0= Subject key identifier: B4:61:2B:F0:95:43:A8:C9:F7:4F:AC:F0:10:3B:CD:65:AC:12:36:B5 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F497AA52BF23C32C3D3B91FC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1013a95f-fd72-3dce-bfb5-521c56744daa.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:a5:2b:f2:3c:32:c3:d3:b9:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4ef83c54-5a1e-4b0c-9b76-e315ad979be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bb:c3:da:d5:3d:2a:3e:ec:fe:f1:cf:6f:2f: 84:6c:d1:ee:d8:c8:14:d6:77:cc:8e:91:ca:2b:80: 80:b7:a0:11:57:af:5c:de:07:e6:67:b2:1d:bb:53: e3:dd:2c:65:91:37:ea:6a:96:41:67:32:ac:4b:85: 06:dd:31:52:a3:07:44:e1:44:fb:7d:8a:37:12:89: 85:16:35:a4:5a:c8:ae:20:46:c5:19:56:c4:c1:39: f3:05:25:ea:33:12:02:e1:20:42:c0:a1:8f:3a:6c: 9a:28:90:74:a1:25:bd:e6:4b:01:ce:d2:5a:f8:75: a1:20:b4:71:dc:33:73:61:eb:5f:66:eb:bb:c2:61: 29:12:fb:91:eb:e5:ee:b2:7c:48:66:78:4c:d7:99: cd:6f:18:52:72:b8:62:0a:75:56:d2:25:93:e9:86: cf:e2:35:ba:e8:91:b1:02:a8:5d:fa:a8:a3:3f:a4: 57:32:b4:b9:04:a9:14:a1:6d:c7:d8:04:0c:c5:4c: e1:2b:d8:fc:a6:a2:97:c7:1c:1c:db:2a:69:49:2b: 91:90:ac:eb:b9:a8:04:cd:9a:35:c3:a0:6e:52:2f: e4:eb:24:57:a7:0a:77:ce:72:2b:c5:94:01:17:a3: e4:31:3a:b7:52:db:6f:40:9e:a8:3d:7f:77:10:42: 3d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:61:2B:F0:95:43:A8:C9:F7:4F:AC:F0:10:3B:CD:65:AC:12:36:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1013a95f-fd72-3dce-bfb5-521c56744daa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:78:f4:97:0d:23:6d:a5:b0:66:34:fb:54:89:58:dc:05:e4: 30:ea:ed:85:fb:3a:5f:5b:f8:da:6d:11:dd:e5:98:97:d3:2e: 9c:5a:3b:20:12:a6:f2:fa:60:52:84:d7:a0:7b:fe:a2:ae:40: c5:e6:d2:c1:bb:ba:04:b6:ef:77:c1:4d:68:de:ed:c9:1b:49: 4b:57:aa:24:cb:eb:44:bc:ac:76:74:5b:70:d9:a7:cc:f4:97: 96:57:f9:63:b6:96:98:dd:58:ea:d5:47:9b:4f:d2:b3:e3:a3: fd:d5:a0:73:b1:be:fe:ec:09:2c:34:d1:bb:73:51:9e:3b:47: 5d:c5:f9:9c:d2:f4:79:1f:3d:71:7a:ba:6b:b2:ce:ee:d9:c7: b5:4a:13:df:cb:78:54:84:2b:37:19:0c:88:ce:ee:c7:7b:38: a2:e9:c1:ea:3a:93:42:50:8d:15:6c:dd:7f:85:21:83:f3:42: c5:a3:3c:bf:c3:24:f5:ac:de:3a:5b:32:a5:78:dd:6d:30:f3: 59:ea:96:a7:6e:47:8d:e6:ce:82:72:aa:fc:7c:ef:da:05:23: a0:6a:a3:d9:cc:17:96:00:4d:a1:3d:db:71:ed:72:40:3f:88: 40:96:ca:9d:71:2d:19:24:c3:69:30:7d:98:e9:d1:0b:a3:e6: 2f:e0:50:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeqUr8jwyw9O5H8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGVmODNjNTQtNWExZS00YjBjLTliNzYtZTMxNWFkOTc5YmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLvD2tU9Kj7s/vHPby+EbNHu2MgU1nfMjpHK K4CAt6ARV69c3gfmZ7Idu1Pj3SxlkTfqapZBZzKsS4UG3TFSowdE4UT7fYo3EomF FjWkWsiuIEbFGVbEwTnzBSXqMxIC4SBCwKGPOmyaKJB0oSW95ksBztJa+HWhILRx 3DNzYetfZuu7wmEpEvuR6+XusnxIZnhM15nNbxhScrhiCnVW0iWT6YbP4jW66JGx Aqhd+qijP6RXMrS5BKkUoW3H2AQMxUzhK9j8pqKXxxwc2yppSSuRkKzruagEzZo1 w6BuUi/k6yRXpwp3znIrxZQBF6PkMTq3UttvQJ6oPX93EEI9VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRhK/CVQ6jJ90+s8BA7zWWsEja1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTAxM2E5NWYtZmQ3Mi0z ZGNlLWJmYjUtNTIxYzU2NzQ0ZGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHV49JcNI22lsGY0+1SJWNwF5DDq7YX7Ol9b+NptEd3lmJfTLpxaOyAS pvL6YFKE16B7/qKuQMXm0sG7ugS273fBTWje7ckbSUtXqiTL60S8rHZ0W3DZp8z0 l5ZX+WO2lpjdWOrVR5tP0rPjo/3VoHOxvv7sCSw00btzUZ47R13F+ZzS9HkfPXF6 umuyzu7Zx7VKE9/LeFSEKzcZDIjO7sd7OKLpweo6k0JQjRVs3X+FIYPzQsWjPL/D JPWs3jpbMqV43W0w81nqlqduR43mzoJyqvx879oFI6Bqo9nMF5YATaE923HtckA/ iECWyp1xLRkkw2kwfZjp0Quj5i/gUFA= -----END CERTIFICATE-----Generated at Tue Sep 29 02:46:48 2026 by rpki-client