$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25993c8f-1295-3237-87f5-6f89f9180d01.roa File: 25993c8f-1295-3237-87f5-6f89f9180d01.roa (raw, json) Hash identifier: H8/illpdmHS7K0Wk3gzLvIX/0+1SXGzLuM+rAaGtsNo= Subject key identifier: 06:D1:DA:BB:93:E4:49:19:B8:22:C8:03:4C:3C:11:CA:21:95:48:97 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F2957C850878B701C2E60C3E8 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25993c8f-1295-3237-87f5-6f89f9180d01.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 8069 IP address blocks: 20.33.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:c8:50:87:8b:70:1c:2e:60:c3:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=a1c820a7-1f1a-447a-9571-cfb7c24196ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ba:47:1a:27:a0:8f:96:77:d2:16:fb:3d:cd: fa:9c:68:83:1d:e5:8c:ce:e9:02:a0:e1:e5:df:00: 0e:09:ee:8b:a2:ce:f6:56:be:2c:76:4f:62:e9:d1: fb:77:b0:5e:ac:ae:3c:8d:2a:22:a7:c6:45:4f:ef: f3:af:e1:74:d1:c7:64:79:f8:39:c2:e8:e0:8f:0c: c9:ef:b1:66:18:09:5c:59:4a:0b:35:d4:a9:b6:99: b3:3a:40:f0:e9:5d:49:fc:b9:22:f4:73:4d:b9:14: 8e:36:44:a6:58:84:cd:d5:ec:d8:aa:89:16:91:60: 02:d5:4f:9a:f3:8d:ad:7c:f2:bf:7a:a9:ce:17:18: 7f:3e:5c:71:4b:14:f2:fe:50:a6:9f:de:63:31:05: 88:09:ee:2a:b7:bc:5a:a7:c6:3e:0f:ca:94:6e:d8: ca:3e:4b:b4:be:14:61:e6:e7:36:2a:4e:e8:66:c9: 45:43:36:01:c6:b7:04:a5:10:72:77:c5:2e:11:b2: c5:98:9c:47:9c:36:d7:64:4f:2b:14:91:a3:b3:09: c4:53:9e:fb:ce:37:72:57:23:10:76:08:6f:84:c1: af:29:ee:f7:57:23:7b:ce:e2:6a:94:76:f2:26:9a: f7:76:2e:98:15:b9:60:f9:88:90:ee:fd:7b:44:02: 60:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D1:DA:BB:93:E4:49:19:B8:22:C8:03:4C:3C:11:CA:21:95:48:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25993c8f-1295-3237-87f5-6f89f9180d01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:0b:1f:21:93:1b:f9:cb:3c:5f:36:6d:cd:ce:fe:9f:f5:47: 42:68:f4:bc:24:51:c6:fd:f1:6e:c3:50:4e:91:9b:3c:9f:fd: 8e:5e:7a:46:74:d9:f0:5e:d4:3d:71:c8:f0:ed:b5:9a:be:e1: 8a:43:4e:b4:a0:21:63:31:fa:ca:c3:3c:a4:f3:4c:17:16:c2: 9a:92:36:96:6b:57:2e:55:dd:3e:59:9f:52:8e:5a:fe:ed:96: 6d:38:08:c4:8c:14:09:01:b1:e7:33:78:30:97:d6:d3:70:63: 3e:f4:81:01:79:10:27:27:2d:ed:cf:a7:2c:da:50:3e:15:d9: b7:98:2a:0f:a6:21:68:84:5f:06:ef:80:b3:da:a1:a8:66:f9: c8:ff:70:6d:ad:c6:41:8f:91:52:32:20:bd:02:ac:d4:01:7b: df:1f:c9:fa:af:7f:03:6d:1d:57:b4:09:c8:c1:32:12:cb:26: c9:39:46:a0:95:f2:c8:9b:53:f6:3a:5d:f7:51:6d:86:8f:3d: af:66:70:6e:44:df:0c:43:11:d9:0d:b6:9e:ed:b5:0f:aa:bd: 3c:59:56:ab:00:58:3a:14:5d:5f:7a:4e:47:76:21:45:87:2d: bc:63:1f:f8:e7:4d:45:6b:c3:d8:b8:45:53:ec:04:a0:9a:5e: 5b:48:00:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV8hQh4twHC5gw+gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk YTFjODIwYTctMWYxYS00NDdhLTk1NzEtY2ZiN2MyNDE5NmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrpHGiegj5Z30hb7Pc36nGiDHeWMzukCoOHl 3wAOCe6Los72Vr4sdk9i6dH7d7BerK48jSoip8ZFT+/zr+F00cdkefg5wujgjwzJ 77FmGAlcWUoLNdSptpmzOkDw6V1J/Lki9HNNuRSONkSmWITN1ezYqokWkWAC1U+a 842tfPK/eqnOFxh/PlxxSxTy/lCmn95jMQWICe4qt7xap8Y+D8qUbtjKPku0vhRh 5uc2Kk7oZslFQzYBxrcEpRByd8UuEbLFmJxHnDbXZE8rFJGjswnEU577zjdyVyMQ dghvhMGvKe73VyN7zuJqlHbyJpr3di6YFblg+YiQ7v17RAJgTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbR2ruT5EkZuCLIA0w8EcohlUiXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjU5OTNjOGYtMTI5NS0z MjM3LTg3ZjUtNmY4OWY5MTgwZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFALHyGTG/nLPF82bc3O/p/1R0Jo9LwkUcb98W7DUE6Rmzyf/Y5eekZ0 2fBe1D1xyPDttZq+4YpDTrSgIWMx+srDPKTzTBcWwpqSNpZrVy5V3T5Zn1KOWv7t lm04CMSMFAkBseczeDCX1tNwYz70gQF5ECcnLe3PpyzaUD4V2beYKg+mIWiEXwbv gLPaoahm+cj/cG2txkGPkVIyIL0CrNQBe98fyfqvfwNtHVe0CcjBMhLLJsk5RqCV 8sibU/Y6XfdRbYaPPa9mcG5E3wxDEdkNtp7ttQ+qvTxZVqsAWDoUXV96Tkd2IUWH LbxjH/jnTUVrw9i4RVPsBKCaXltIADE= -----END CERTIFICATE-----Generated at Mon Sep 28 15:15:41 2026 by rpki-client