$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/42a19778-ea4d-3e57-a431-0949a44ad4e7.roa File: 42a19778-ea4d-3e57-a431-0949a44ad4e7.roa (raw, json) Hash identifier: 1kigB6eQTsd8EqR+YWzGcicCxjebw7HgMDiNKMwgezM= Subject key identifier: B5:BB:80:B5:CC:C6:EA:F6:64:28:5B:54:4C:D0:61:FF:F5:2F:3E:93 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F2957C8C740A7D667F4594320 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/42a19778-ea4d-3e57-a431-0949a44ad4e7.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 8069 IP address blocks: 20.33.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:c8:c7:40:a7:d6:67:f4:59:43:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=e7e0e228-baf7-4d82-9d03-db9645464ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:20:78:1b:fd:f6:93:cc:11:c1:2a:79:d6:07: 79:2a:32:e9:e9:9e:81:e7:28:d6:1d:ff:57:13:bf: 8f:f8:bb:a8:ac:6b:23:ef:be:9f:48:66:3c:27:ea: 8e:9c:fd:b5:f7:2e:0a:04:3a:e8:ad:88:a4:17:db: 9d:0e:fd:0d:12:1f:36:44:e2:5d:7a:01:e0:ae:a3: 3d:48:48:04:77:d0:c2:f6:f1:2a:2e:fa:05:88:9b: 23:bc:dc:05:cf:53:10:5c:54:b4:74:d6:24:f3:88: b4:18:e6:3c:0c:44:f8:7c:24:1a:44:d5:2c:21:28: 89:c1:1e:7a:a7:cb:d8:03:36:95:f2:60:56:dd:2d: e9:a1:cf:97:a9:c5:74:52:16:07:95:f9:2c:2f:fe: b3:d3:2b:6c:40:6e:10:bd:19:47:5e:50:e0:d9:70: 49:b5:a3:c0:a9:06:e9:f0:ed:6c:7d:db:55:a6:7f: bb:98:3f:f8:e3:10:06:51:a1:ee:4f:1c:02:b9:83: 1c:f3:1e:d9:90:ec:d3:47:a0:af:dd:7f:6b:49:d2: 8b:81:48:94:3e:cb:7b:e7:f2:7a:12:3c:b4:1c:62: 9b:34:19:a3:5e:42:50:23:9d:8c:08:7a:31:69:85: d5:ed:87:1e:74:25:02:85:47:96:cc:ed:98:c4:a5: 8b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BB:80:B5:CC:C6:EA:F6:64:28:5B:54:4C:D0:61:FF:F5:2F:3E:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/42a19778-ea4d-3e57-a431-0949a44ad4e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:b9:fb:41:ea:b7:be:ec:7c:ba:0a:1f:da:bc:9e:64:d9:f5: a0:e8:d8:52:76:81:e8:fe:1d:35:da:e9:b6:3c:ba:e3:74:43: 73:a5:7d:e9:d6:97:62:24:7f:29:13:64:b4:47:ed:8b:a8:ee: 7e:ed:3a:ab:55:de:b1:68:65:54:f6:25:d6:ce:07:20:9e:f3: 0c:fb:ce:e6:b9:26:9a:10:4a:bf:4d:a4:5c:7c:be:df:5c:2a: c8:cd:6a:80:01:7d:bb:b3:21:33:b8:77:9d:9f:18:1b:2f:2a: 98:30:eb:db:84:ad:63:99:7f:6c:61:09:19:08:09:c7:54:4d: 10:36:73:0e:fd:6b:6f:2b:30:dc:8f:5f:c4:b3:fe:85:d8:43: 8c:f6:c8:78:d4:65:0d:6b:6f:b7:bf:19:1b:3a:5f:d4:99:93: 28:da:b6:2e:00:ca:6b:3b:e5:43:cb:45:49:97:ef:4d:84:44: 6d:6c:22:9e:42:63:7b:39:c1:26:e1:9a:61:89:a0:00:6a:b3: 80:9e:43:1c:37:1a:06:12:fd:25:3b:d9:c5:48:74:35:5e:82: ce:f5:75:2d:63:0c:f8:1c:1f:cb:ce:73:8f:75:58:eb:d6:2f: 93:e9:c5:1d:21:a8:59:26:bc:03:c8:7e:d0:32:2e:62:9a:f6: 6b:ef:41:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV8jHQKfWZ/RZQyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk ZTdlMGUyMjgtYmFmNy00ZDgyLTlkMDMtZGI5NjQ1NDY0ZWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+iB4G/32k8wRwSp51gd5KjLp6Z6B5yjWHf9X E7+P+LuorGsj776fSGY8J+qOnP219y4KBDrorYikF9udDv0NEh82ROJdegHgrqM9 SEgEd9DC9vEqLvoFiJsjvNwFz1MQXFS0dNYk84i0GOY8DET4fCQaRNUsISiJwR56 p8vYAzaV8mBW3S3poc+XqcV0UhYHlfksL/6z0ytsQG4QvRlHXlDg2XBJtaPAqQbp 8O1sfdtVpn+7mD/44xAGUaHuTxwCuYMc8x7ZkOzTR6Cv3X9rSdKLgUiUPst75/J6 Ejy0HGKbNBmjXkJQI52MCHoxaYXV7YcedCUChUeWzO2YxKWLywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLW7gLXMxur2ZChbVEzQYf/1Lz6TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDJhMTk3NzgtZWE0ZC0z ZTU3LWE0MzEtMDk0OWE0NGFkNGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAW5+0Hqt77sfLoKH9q8nmTZ9aDo2FJ2gej+HTXa6bY8uuN0Q3OlfenW l2IkfykTZLRH7Yuo7n7tOqtV3rFoZVT2JdbOByCe8wz7zua5JpoQSr9NpFx8vt9c KsjNaoABfbuzITO4d52fGBsvKpgw69uErWOZf2xhCRkICcdUTRA2cw79a28rMNyP X8Sz/oXYQ4z2yHjUZQ1rb7e/GRs6X9SZkyjati4Ayms75UPLRUmX702ERG1sIp5C Y3s5wSbhmmGJoABqs4CeQxw3GgYS/SU72cVIdDVegs71dS1jDPgcH8vOc491WOvW L5PpxR0hqFkmvAPIftAyLmKa9mvvQVo= -----END CERTIFICATE-----Generated at Tue Sep 29 01:17:04 2026 by rpki-client