$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/32e61f71-42cb-3aa3-8fdc-307cc164b9ec.roa File: 32e61f71-42cb-3aa3-8fdc-307cc164b9ec.roa (raw, json) Hash identifier: cDV54VSjvC25b1HfmTwJvo1mWsPLz+vVnyz0nJ5PRR8= Subject key identifier: 46:35:EE:49:1C:BB:29:70:6D:11:8A:1F:B2:5D:0E:2D:C8:FE:FF:EB Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F62930B8FE16C4D2305719200 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/32e61f71-42cb-3aa3-8fdc-307cc164b9ec.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 8069 IP address blocks: 20.33.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:0b:8f:e1:6c:4d:23:05:71:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=42162e8a-ac59-450d-8426-873dd388c526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4b:d4:eb:5b:9e:cc:0f:61:4b:f0:7c:dd:38: 4c:17:99:61:90:a0:18:d9:fc:e0:98:29:9b:90:68: b3:f5:5a:1c:85:ce:42:24:8c:24:34:4f:51:5b:31: db:af:e2:ef:cf:18:45:32:47:44:f2:a4:04:cf:4d: f8:ea:64:67:85:3c:e1:08:56:29:e6:eb:5d:c4:32: 76:a9:86:c5:05:e4:2d:0e:dc:84:d9:39:82:22:3b: b3:7a:7a:ee:16:54:e1:a4:96:3c:16:75:23:fe:24: a6:c8:27:f1:03:55:4b:96:39:a4:f2:24:ee:9b:4e: 7d:60:d8:e8:0e:f9:90:1e:7c:09:17:bf:a9:72:c0: 3e:8e:ad:a4:80:ed:f7:ee:cc:34:f4:e4:a5:c3:6c: 9f:2e:b1:92:ef:0a:ef:f3:35:73:70:1d:4d:82:47: d0:52:59:30:6e:78:a4:63:58:2f:7c:49:aa:3a:71: a1:14:ba:f0:30:48:af:1e:85:75:5a:ec:d8:da:d8: f3:b2:88:8e:11:ac:73:d6:dd:79:95:0d:b9:45:34: 0a:72:39:10:96:d1:ee:da:1f:7c:60:c6:4c:da:4f: 0f:a0:8d:5c:02:f1:84:9d:c0:58:01:76:90:91:21: 34:f2:e7:69:f3:2a:a3:58:f5:74:5e:0b:09:6f:1b: 5b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:35:EE:49:1C:BB:29:70:6D:11:8A:1F:B2:5D:0E:2D:C8:FE:FF:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/32e61f71-42cb-3aa3-8fdc-307cc164b9ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:56:dd:c1:e4:8b:1c:65:b4:86:80:d3:ee:72:fa:5e:1e:12: e8:2a:63:3b:92:81:7d:f8:54:86:09:cb:ed:60:6c:00:e1:37: 96:b0:72:cb:9d:f5:d1:5b:cb:96:95:93:50:9b:d0:75:2d:1d: 58:bb:53:49:76:3f:b1:3b:a5:32:5c:da:9f:df:d2:27:8d:db: 67:1a:a5:e2:5d:87:bc:df:64:e5:84:71:4a:47:fd:8c:89:0b: 7b:41:ab:47:7b:c2:d2:6d:11:c6:5c:e6:b8:4e:5f:40:9d:71: 00:48:04:a5:8f:96:d6:2b:39:e3:9a:ad:b9:95:e2:15:5b:6c: b0:23:a1:b3:ab:10:c9:9a:d8:10:05:22:18:f0:ab:a1:f3:cc: 5a:6d:1c:54:05:09:14:6e:aa:d1:9c:db:56:bf:b8:14:fe:57: c3:80:c5:31:ac:37:17:66:54:04:fe:44:e8:34:b1:cb:53:96: 59:1b:be:e1:12:dd:b4:5f:26:76:fa:32:76:29:b2:7e:38:85: 18:e2:ac:bf:30:f1:af:d1:34:c7:0a:c1:72:e5:b9:3b:4b:53: db:bd:04:3b:68:85:c0:13:bd:06:28:e5:2a:df:ea:d1:90:7a: 78:d1:e7:15:ac:f2:d7:10:fe:ed:c0:93:d3:70:10:73:ec:a7: 91:51:9c:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwuP4WxNIwVxkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NDIxNjJlOGEtYWM1OS00NTBkLTg0MjYtODczZGQzODhjNTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEvU61uezA9hS/B83ThMF5lhkKAY2fzgmCmb kGiz9Vochc5CJIwkNE9RWzHbr+LvzxhFMkdE8qQEz0346mRnhTzhCFYp5utdxDJ2 qYbFBeQtDtyE2TmCIjuzenruFlThpJY8FnUj/iSmyCfxA1VLljmk8iTum059YNjo DvmQHnwJF7+pcsA+jq2kgO337sw09OSlw2yfLrGS7wrv8zVzcB1NgkfQUlkwbnik Y1gvfEmqOnGhFLrwMEivHoV1WuzY2tjzsoiOEaxz1t15lQ25RTQKcjkQltHu2h98 YMZM2k8PoI1cAvGEncBYAXaQkSE08udp8yqjWPV0XgsJbxtb+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEY17kkcuylwbRGKH7JdDi3I/v/rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzJlNjFmNzEtNDJjYi0z YWEzLThmZGMtMzA3Y2MxNjRiOWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCFmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5W3cHkixxltIaA0+5y+l4eEugqYzuSgX34VIYJy+1gbADhN5awcsud 9dFby5aVk1Cb0HUtHVi7U0l2P7E7pTJc2p/f0ieN22capeJdh7zfZOWEcUpH/YyJ C3tBq0d7wtJtEcZc5rhOX0CdcQBIBKWPltYrOeOarbmV4hVbbLAjobOrEMma2BAF Ihjwq6HzzFptHFQFCRRuqtGc21a/uBT+V8OAxTGsNxdmVAT+ROg0sctTllkbvuES 3bRfJnb6MnYpsn44hRjirL8w8a/RNMcKwXLluTtLU9u9BDtohcATvQYo5Srf6tGQ enjR5xWs8tcQ/u3Ak9NwEHPsp5FRnGc= -----END CERTIFICATE-----Generated at Sun Oct 4 07:09:56 2026 by rpki-client