$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/20052b8d-9195-30ba-9869-f02f78771f7c.roa File: 20052b8d-9195-30ba-9869-f02f78771f7c.roa (raw, json) Hash identifier: pi/NZb2Haa4nUAmk+86NPNaDa46Y2G/kVP0pso3/nI4= Subject key identifier: C4:23:BE:55:B2:A4:5E:F6:37:B7:A6:A7:AD:AA:71:CE:1B:9B:15:56 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F3A17D8F1681FACA1B2EBE2C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/20052b8d-9195-30ba-9869-f02f78771f7c.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:d8:f1:68:1f:ac:a1:b2:eb:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=e3a95597-4ae5-4cca-89c9-3c2dcfe9031c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8a:12:8c:69:b8:f5:a9:4f:29:42:93:38:42: 83:79:63:30:ae:42:83:27:30:14:d9:b9:12:94:8f: 4e:fd:66:d3:50:30:5c:24:59:7b:38:f6:74:95:0f: d7:3c:73:ef:af:69:86:ac:41:54:ad:2f:4d:e3:71: b3:19:9e:31:e3:67:e5:c3:8d:f4:d5:51:31:cd:43: 76:ed:e0:fc:2d:e1:4b:4b:86:36:23:b9:40:79:45: 15:1f:57:ac:12:2f:13:a2:e2:82:d1:3e:3f:17:5b: 80:f2:28:4d:a7:a9:47:53:64:fa:de:1d:dd:e4:ff: 84:aa:df:cd:21:8b:31:ef:6c:3a:e8:31:d7:3e:dc: 31:8a:5a:5d:fe:1f:03:4c:c2:ef:63:c9:2f:2b:91: 6c:ab:40:67:27:1f:94:78:df:ed:65:77:c8:9b:be: 12:ed:8f:92:13:e4:6b:a4:85:1d:8b:d2:12:bb:1c: 0c:c8:ec:7b:24:93:70:78:50:27:7b:6a:ba:c8:3f: ff:3b:a9:62:48:e5:f7:74:89:4b:82:08:ea:2b:fe: f5:e9:bc:b2:cc:e0:08:1a:1a:a0:1d:00:d1:46:89: 54:46:04:79:ab:ac:79:19:c8:eb:23:6b:67:1f:a7: c6:e8:25:f4:4e:ff:73:1e:b6:1b:c0:7c:7d:93:94: b5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:23:BE:55:B2:A4:5E:F6:37:B7:A6:A7:AD:AA:71:CE:1B:9B:15:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/20052b8d-9195-30ba-9869-f02f78771f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:7f:a6:e1:f1:cf:80:14:c3:f9:60:b5:c3:4e:5f:69:69:95: d9:75:b7:79:96:06:ca:30:bf:79:cb:ad:24:dd:70:44:5f:ff: f8:42:51:67:fd:45:c5:a1:b8:09:77:9b:7e:0c:e6:58:eb:6a: 6b:87:e0:99:61:02:01:a3:08:32:1d:d2:a8:9a:d8:a7:de:36: aa:76:8b:c8:ed:30:42:83:b1:05:d0:4f:9d:e6:d7:3a:49:fb: 09:01:3c:aa:f4:24:ea:4c:7a:16:fa:82:c8:1c:a0:5f:36:4c: 35:37:89:ae:57:20:78:03:ae:c6:d0:07:e1:2a:93:2e:95:cc: d6:c8:91:2e:d5:3c:53:30:1e:0e:c4:3b:e7:d2:9e:5e:fe:76: 2d:24:16:28:a2:45:f8:39:75:33:a9:5d:cf:c9:71:f7:b5:6c: cb:c3:10:ab:61:32:ae:bf:b4:c0:f2:7b:a2:29:92:53:93:23: fa:ce:af:0d:25:29:73:5c:37:97:0e:ce:fc:cc:d8:f8:de:0c: 10:7f:d2:5b:b9:28:c8:96:1a:94:f7:8b:b9:bb:e9:47:4e:12: f2:95:07:27:9e:37:82:41:32:d4:ac:4e:6f:20:d2:a1:4d:2e: 3b:54:31:a1:18:5b:b7:59:95:81:ee:96:8b:7d:88:32:78:88: 32:14:f5:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F9jxaB+sobLr4sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk ZTNhOTU1OTctNGFlNS00Y2NhLTg5YzktM2MyZGNmZTkwMzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIoSjGm49alPKUKTOEKDeWMwrkKDJzAU2bkS lI9O/WbTUDBcJFl7OPZ0lQ/XPHPvr2mGrEFUrS9N43GzGZ4x42flw4301VExzUN2 7eD8LeFLS4Y2I7lAeUUVH1esEi8TouKC0T4/F1uA8ihNp6lHU2T63h3d5P+Eqt/N IYsx72w66DHXPtwxilpd/h8DTMLvY8kvK5Fsq0BnJx+UeN/tZXfIm74S7Y+SE+Rr pIUdi9ISuxwMyOx7JJNweFAne2q6yD//O6liSOX3dIlLggjqK/716byyzOAIGhqg HQDRRolURgR5q6x5GcjrI2tnH6fG6CX0Tv9zHrYbwHx9k5S1WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQjvlWypF72N7emp62qcc4bmxVWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjAwNTJiOGQtOTE5NS0z MGJhLTk4NjktZjAyZjc4NzcxZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZ/puHxz4AUw/lgtcNOX2lpldl1t3mWBsowv3nLrSTdcERf//hCUWf9 RcWhuAl3m34M5ljramuH4JlhAgGjCDId0qia2KfeNqp2i8jtMEKDsQXQT53m1zpJ +wkBPKr0JOpMehb6gsgcoF82TDU3ia5XIHgDrsbQB+Eqky6VzNbIkS7VPFMwHg7E O+fSnl7+di0kFiiiRfg5dTOpXc/Jcfe1bMvDEKthMq6/tMDye6IpklOTI/rOrw0l KXNcN5cOzvzM2PjeDBB/0lu5KMiWGpT3i7m76UdOEvKVByeeN4JBMtSsTm8g0qFN LjtUMaEYW7dZlYHulot9iDJ4iDIU9fI= -----END CERTIFICATE-----Generated at Sun Oct 11 08:57:09 2026 by rpki-client