$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/23b75267-e060-3ff2-ab61-3a6b5a13ee1d.roa File: 23b75267-e060-3ff2-ab61-3a6b5a13ee1d.roa (raw, json) Hash identifier: nDd1qgVQvWr5wAUWJX3Q7KHrVBal0LkyabiV5vuhzRA= Subject key identifier: 4C:7D:3E:0D:D6:B2:FF:20:D1:3C:62:8D:34:36:4E:2E:48:D3:3A:5B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F19FCF76A5D451EBD14B2F080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/23b75267-e060-3ff2-ab61-3a6b5a13ee1d.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:f7:6a:5d:45:1e:bd:14:b2:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=d4d48eaf-2375-43c8-a303-c28d88422655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fe:32:20:02:eb:90:10:0a:e1:83:55:c2:c7: d8:c2:87:91:c7:e6:1b:31:77:82:83:b0:86:04:17: c1:38:1c:be:c0:55:50:cb:5c:11:e9:b8:25:6d:2c: 0b:8a:b6:23:60:6d:1c:ab:7e:8e:a9:ec:cc:87:44: 85:c6:e7:0a:fa:17:c8:79:a0:a3:be:ec:fe:c6:2d: 18:0f:37:b7:27:5e:ef:5d:69:7b:e5:3e:1b:21:fc: d5:01:c6:c4:b8:13:db:a2:ad:df:e4:2e:d0:56:c5: 97:b1:22:37:5b:71:a3:2d:3e:74:32:7f:4c:7f:00: 21:88:68:44:c2:8f:2f:d2:3f:ab:69:61:14:e0:ff: e1:35:36:c4:6d:5d:af:8a:f5:6d:d9:e8:b0:cb:dd: 71:08:40:e5:13:fc:e7:bc:ac:2d:8f:f2:ab:8a:c2: 6f:1f:f6:1c:c0:06:78:50:22:37:a4:ac:0b:40:41: dc:71:da:05:5f:d1:7f:87:c3:f8:bc:48:ea:4e:57: 08:2f:1a:c2:13:ef:a9:50:73:a9:a5:3c:18:a7:6f: 4d:05:d4:ab:5c:33:12:21:70:ff:88:82:6d:ee:2a: 93:f6:02:ca:c6:30:a9:48:8e:b5:9c:e0:2b:7b:6f: f6:e9:50:42:1c:28:45:fa:9b:c8:cb:8b:f7:36:01: df:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7D:3E:0D:D6:B2:FF:20:D1:3C:62:8D:34:36:4E:2E:48:D3:3A:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/23b75267-e060-3ff2-ab61-3a6b5a13ee1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:55:79:ed:e9:38:99:8d:b1:68:ab:bb:6a:0b:18:66:09:f8: 0f:81:9f:e1:d6:ae:78:13:88:9b:6e:c5:3b:9e:50:5f:a0:b7: 67:76:a4:13:dc:5c:b0:6b:86:50:dd:f3:d1:e9:7f:cd:a8:44: d2:da:8b:3e:ba:e1:5b:f4:68:8c:fb:49:ba:cc:79:a0:6c:2e: aa:ab:35:7a:c2:a4:a3:e4:83:08:a4:f2:ee:73:bb:74:bc:d3: df:33:a7:f2:70:1a:fb:75:2f:eb:8d:fa:c5:e4:18:d3:31:c0: 1b:66:30:a3:c6:43:d8:96:3d:9d:cb:8e:37:63:1d:09:55:a4: a8:73:d7:62:2e:f1:1a:17:39:af:7c:81:51:d2:26:bc:07:38: 42:07:cd:8a:39:0c:43:06:4c:f9:68:b8:5c:35:81:22:80:91: 60:1d:e1:ff:97:a5:3d:d0:54:a6:b8:6a:c3:07:83:e2:d0:bc: dc:80:41:d6:61:e6:c0:97:58:d4:e7:f5:75:49:6e:ec:83:66: f1:7b:e4:c7:f1:56:4e:8c:67:a6:cb:29:b1:46:c8:ad:c8:18: 43:c3:de:52:77:60:ad:47:bc:f9:53:46:5a:8d:03:26:75:0b: 61:17:e1:b8:e8:cc:9a:e5:8a:44:fe:b7:f5:a7:94:40:87:96: 50:ad:66:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/PdqXUUevRSy8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk ZDRkNDhlYWYtMjM3NS00M2M4LWEzMDMtYzI4ZDg4NDIyNjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv4yIALrkBAK4YNVwsfYwoeRx+YbMXeCg7CG BBfBOBy+wFVQy1wR6bglbSwLirYjYG0cq36OqezMh0SFxucK+hfIeaCjvuz+xi0Y Dze3J17vXWl75T4bIfzVAcbEuBPboq3f5C7QVsWXsSI3W3GjLT50Mn9MfwAhiGhE wo8v0j+raWEU4P/hNTbEbV2vivVt2eiwy91xCEDlE/znvKwtj/KrisJvH/YcwAZ4 UCI3pKwLQEHccdoFX9F/h8P4vEjqTlcILxrCE++pUHOppTwYp29NBdSrXDMSIXD/ iIJt7iqT9gLKxjCpSI61nOAre2/26VBCHChF+pvIy4v3NgHfJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEx9Pg3Wsv8g0TxijTQ2Ti5I0zpbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjNiNzUyNjctZTA2MC0z ZmYyLWFiNjEtM2E2YjVhMTNlZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJVee3pOJmNsWiru2oLGGYJ+A+Bn+HWrngTiJtuxTueUF+gt2d2pBPc XLBrhlDd89Hpf82oRNLaiz664Vv0aIz7SbrMeaBsLqqrNXrCpKPkgwik8u5zu3S8 098zp/JwGvt1L+uN+sXkGNMxwBtmMKPGQ9iWPZ3LjjdjHQlVpKhz12Iu8RoXOa98 gVHSJrwHOEIHzYo5DEMGTPlouFw1gSKAkWAd4f+XpT3QVKa4asMHg+LQvNyAQdZh 5sCXWNTn9XVJbuyDZvF75MfxVk6MZ6bLKbFGyK3IGEPD3lJ3YK1HvPlTRlqNAyZ1 C2EX4bjozJrlikT+t/WnlECHllCtZjs= -----END CERTIFICATE-----Generated at Tue Sep 29 15:23:52 2026 by rpki-client