$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3c589ef7-d75d-3bfa-8141-2f00031c4044.roa File: 3c589ef7-d75d-3bfa-8141-2f00031c4044.roa (raw, json) Hash identifier: Z8DjLlYLtJXsSlCmhHnEbR6WwFpnrQgC8uTPpQeErwY= Subject key identifier: F6:50:0E:35:41:BE:FB:02:F9:59:62:16:02:C2:E9:5A:A5:18:C3:E4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F1897B7FE4B0F3DD026182000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3c589ef7-d75d-3bfa-8141-2f00031c4044.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:b7:fe:4b:0f:3d:d0:26:18:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=5ed868c2-5cc2-458b-a8b5-4bffaf40148d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:77:2b:49:70:50:eb:f6:8f:89:d4:d2:b8:87: 0e:de:1a:b6:11:e9:3a:48:ce:10:dd:93:82:74:61: 47:8f:38:1b:c1:fa:76:91:a3:28:e0:a4:e0:01:13: 4e:9c:04:7b:25:c8:12:9d:31:0d:e5:b5:3f:4f:b0: 5a:79:db:a0:97:19:42:f1:ee:43:af:b2:4f:7b:4b: e9:ac:bc:7f:d6:d8:40:b1:75:60:f4:ac:c6:80:da: 84:27:96:e9:33:3e:42:5c:f1:3c:24:2c:7c:96:78: 89:47:90:6e:ce:e0:71:dd:ed:0c:5f:40:a2:c6:b9: 16:35:a5:82:1d:34:82:ef:97:6a:48:5d:c5:c6:0f: 0d:f4:cc:9f:ac:6d:32:e5:e7:fd:c5:c7:8b:33:29: 03:97:8c:ec:b1:d8:35:54:dc:42:50:68:7c:c6:28: 7f:14:6a:29:ae:a1:db:5d:44:de:bc:a2:dc:ed:9a: 16:f5:8c:53:04:d0:dd:8c:d0:25:76:03:f6:ff:31: c3:1f:7a:20:cc:2f:84:41:fd:80:24:01:5a:07:f6: 83:b9:96:d1:0d:44:1f:9f:dc:7f:8a:d4:0b:e0:6e: 45:47:73:fc:61:91:06:aa:8d:1f:45:86:e6:99:86: 47:16:1d:73:33:d2:0f:92:66:25:a3:41:66:30:f3: b6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:50:0E:35:41:BE:FB:02:F9:59:62:16:02:C2:E9:5A:A5:18:C3:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3c589ef7-d75d-3bfa-8141-2f00031c4044.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:ec:17:f8:6f:65:2b:33:c3:30:7d:c5:3c:fc:1b:54:40:42: 7e:4f:25:b0:d6:f1:dd:1b:69:0b:50:d4:a7:11:7e:df:0c:81: c3:d7:32:db:02:3a:3d:67:7b:94:03:89:c0:23:1b:3e:fd:bd: 78:9c:68:a8:94:67:69:09:1b:a5:56:68:bf:83:9a:ac:04:cf: 5f:03:b5:86:25:44:39:bf:ee:5d:ad:a0:9c:21:61:25:72:20: 63:61:d2:7c:9a:88:a4:a8:e8:57:4a:42:20:85:bc:2d:a8:96: 2c:28:f7:d1:88:31:c4:b4:ab:d2:82:01:c2:40:31:bf:45:e2: 9c:06:1c:17:1a:12:59:c1:77:36:e0:65:6d:cf:62:48:e0:82: ae:0a:2e:0f:f4:26:73:50:25:84:3a:23:79:03:19:80:b7:39: c9:15:b7:0f:45:0d:e8:be:4a:36:20:db:d9:0c:ba:a1:99:05: ce:a5:90:a5:bd:b8:ba:f7:93:de:4b:f7:ef:07:96:20:81:e0: 49:6d:8f:7b:58:0f:05:30:b0:20:d6:a9:e9:68:37:60:dd:ab: 08:1f:e3:a3:71:bc:c7:39:36:1e:46:83:3e:0e:22:48:36:dc: 02:bb:fd:d3:39:1a:2f:da:a8:df:f9:11:c7:85:82:a2:ab:54: 93:d0:b4:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl7f+Sw890CYYIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk NWVkODY4YzItNWNjMi00NThiLWE4YjUtNGJmZmFmNDAxNDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXcrSXBQ6/aPidTSuIcO3hq2Eek6SM4Q3ZOC dGFHjzgbwfp2kaMo4KTgARNOnAR7JcgSnTEN5bU/T7BaeduglxlC8e5Dr7JPe0vp rLx/1thAsXVg9KzGgNqEJ5bpMz5CXPE8JCx8lniJR5BuzuBx3e0MX0CixrkWNaWC HTSC75dqSF3Fxg8N9MyfrG0y5ef9xceLMykDl4zssdg1VNxCUGh8xih/FGoprqHb XUTevKLc7ZoW9YxTBNDdjNAldgP2/zHDH3ogzC+EQf2AJAFaB/aDuZbRDUQfn9x/ itQL4G5FR3P8YZEGqo0fRYbmmYZHFh1zM9IPkmYlo0FmMPO2LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZQDjVBvvsC+VliFgLC6VqlGMPkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2M1ODllZjctZDc1ZC0z YmZhLTgxNDEtMmYwMDAzMWM0MDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbsF/hvZSszwzB9xTz8G1RAQn5PJbDW8d0baQtQ1KcRft8MgcPXMtsC Oj1ne5QDicAjGz79vXicaKiUZ2kJG6VWaL+DmqwEz18DtYYlRDm/7l2toJwhYSVy IGNh0nyaiKSo6FdKQiCFvC2oliwo99GIMcS0q9KCAcJAMb9F4pwGHBcaElnBdzbg ZW3PYkjggq4KLg/0JnNQJYQ6I3kDGYC3OckVtw9FDei+SjYg29kMuqGZBc6lkKW9 uLr3k95L9+8HliCB4Eltj3tYDwUwsCDWqeloN2Ddqwgf46NxvMc5Nh5Ggz4OIkg2 3AK7/dM5Gi/aqN/5EceFgqKrVJPQtNA= -----END CERTIFICATE-----Generated at Mon Sep 28 20:08:37 2026 by rpki-client