$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2c93a2fe-59c9-3004-aace-53a40166520d.roa File: 2c93a2fe-59c9-3004-aace-53a40166520d.roa (raw, json) Hash identifier: Muu2Jzem0rJuJcDlupruQeU6PZ30xdNCEQlio7gQV7Y= Subject key identifier: E3:D2:F7:6C:7E:4D:E8:02:C8:8E:C8:FA:DA:13:1A:41:B4:E1:98:DA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F497F1DFD565BA3E1B177AA00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2c93a2fe-59c9-3004-aace-53a40166520d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:1d:fd:56:5b:a3:e1:b1:77:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b0c47db8-b693-4931-b342-ddfe493ee0d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3a:22:78:03:57:d0:65:d8:11:d3:f1:fb:b0: 26:40:16:bd:37:ef:b5:94:42:36:7f:58:23:8b:b0: 20:53:7f:5e:7a:8c:33:6f:5d:8f:40:82:f4:f2:08: 96:36:fd:03:3f:44:2a:6c:50:c5:d3:74:40:f5:ff: ec:7e:1d:e4:f1:2a:d3:8e:d4:fe:a2:3c:ba:de:c4: 9b:0c:87:1a:2c:ef:b6:e4:04:0f:da:e8:cb:6e:ba: bd:2b:0c:44:94:66:1a:1e:4a:b1:8a:25:8f:86:3f: 66:27:b9:41:97:df:95:c1:54:7a:34:84:34:35:24: 88:90:fd:f0:e4:f3:bd:19:ca:d0:4e:5d:bd:59:c1: 77:21:33:77:64:2e:be:b0:5c:61:9d:c8:f3:51:d6: af:90:84:30:0b:18:84:cd:6b:59:1a:47:a3:9c:a0: 96:5d:8d:f3:46:6a:2e:9b:12:fa:fc:d8:e9:14:9f: a6:26:ab:04:51:e1:90:45:fa:25:d4:8f:8c:b2:0c: 42:ac:f2:3c:f8:63:5a:ab:93:d4:b1:2e:30:af:e6: 34:d5:89:96:e2:42:59:23:70:63:01:73:e2:fe:a6: 40:fb:4c:78:f4:39:e3:c2:0a:e1:83:98:23:2a:b4: 55:e0:90:11:11:35:b5:44:ea:d2:d7:26:11:86:6c: 65:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D2:F7:6C:7E:4D:E8:02:C8:8E:C8:FA:DA:13:1A:41:B4:E1:98:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2c93a2fe-59c9-3004-aace-53a40166520d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:4b:e4:a6:ba:2c:e2:22:13:47:2c:fa:23:30:68:59:fa:71: d9:45:aa:57:15:3d:bd:c3:36:b2:5c:12:5b:e9:08:f0:ff:ea: 07:25:18:26:d5:32:67:48:5b:3d:69:b1:84:fc:16:6b:bc:70: e1:08:c6:66:02:f4:45:47:d3:81:51:d1:11:18:b7:42:e6:7a: 87:4a:c1:c3:38:f3:19:1b:31:e1:7a:c0:1f:e8:d2:73:c7:cf: b3:54:83:17:a0:bd:70:09:73:e1:d2:62:03:11:7e:55:2c:0b: d5:0b:92:1e:79:d6:f0:f7:96:26:6c:1a:ac:19:0f:6e:8b:48: 51:53:21:95:bc:06:22:56:10:3a:ab:c9:ff:25:6c:a7:c6:87: 6c:81:27:cd:ff:e2:e8:a3:1a:16:b5:0e:d3:a2:7d:20:f6:19: 65:d4:31:f9:aa:bb:9f:36:4b:bc:04:fc:92:ae:1d:73:ad:87: 44:3f:6e:69:5e:4c:27:ca:8f:16:d5:7d:69:de:94:e5:42:66: da:a3:f1:66:37:70:6c:79:cb:44:95:65:d0:96:33:55:66:4f: ba:10:fd:ec:f0:af:53:78:e8:a7:7b:b6:4b:eb:73:ff:9a:58: 42:27:c0:82:50:81:4b:55:39:dd:d5:9e:65:ac:93:bb:63:e8: 4d:e0:c8:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jfx39Vluj4bF3qgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjBjNDdkYjgtYjY5My00OTMxLWIzNDItZGRmZTQ5M2VlMGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDoieANX0GXYEdPx+7AmQBa9N++1lEI2f1gj i7AgU39eeowzb12PQIL08giWNv0DP0QqbFDF03RA9f/sfh3k8SrTjtT+ojy63sSb DIcaLO+25AQP2ujLbrq9KwxElGYaHkqxiiWPhj9mJ7lBl9+VwVR6NIQ0NSSIkP3w 5PO9GcrQTl29WcF3ITN3ZC6+sFxhncjzUdavkIQwCxiEzWtZGkejnKCWXY3zRmou mxL6/NjpFJ+mJqsEUeGQRfol1I+MsgxCrPI8+GNaq5PUsS4wr+Y01YmW4kJZI3Bj AXPi/qZA+0x49Dnjwgrhg5gjKrRV4JARETW1ROrS1yYRhmxllQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPS92x+TegCyI7I+toTGkG04ZjaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMmM5M2EyZmUtNTljOS0z MDA0LWFhY2UtNTNhNDAxNjY1MjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9L5Ka6LOIiE0cs+iMwaFn6cdlFqlcVPb3DNrJcElvpCPD/6gclGCbV MmdIWz1psYT8Fmu8cOEIxmYC9EVH04FR0REYt0LmeodKwcM48xkbMeF6wB/o0nPH z7NUgxegvXAJc+HSYgMRflUsC9ULkh551vD3liZsGqwZD26LSFFTIZW8BiJWEDqr yf8lbKfGh2yBJ83/4uijGha1DtOifSD2GWXUMfmqu582S7wE/JKuHXOth0Q/bmle TCfKjxbVfWnelOVCZtqj8WY3cGx5y0SVZdCWM1VmT7oQ/ezwr1N46Kd7tkvrc/+a WEInwIJQgUtVOd3VnmWsk7tj6E3gyKI= -----END CERTIFICATE-----Generated at Fri Oct 9 02:21:48 2026 by rpki-client