$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/433f4626-f5a4-3f5b-8402-ad0e6744411a.roa File: 433f4626-f5a4-3f5b-8402-ad0e6744411a.roa (raw, json) Hash identifier: gFRIIM78v9yIOcxEDrReyq9QuBTwRuMSC2sBiK7CygQ= Subject key identifier: E6:38:00:B2:6B:75:26:E9:DF:DC:47:52:C2:3C:BA:B6:1A:8D:E6:00 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F2957C8DF1FEBA3581A5C0380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/433f4626-f5a4-3f5b-8402-ad0e6744411a.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 8069 IP address blocks: 20.33.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:c8:df:1f:eb:a3:58:1a:5c:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=313f49d8-a4ee-4519-9645-1decd16b24a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7a:51:69:43:43:5c:05:17:46:d3:28:e7:10: a9:1a:de:43:ac:76:31:e5:0a:1a:09:ad:7c:36:eb: ac:b1:63:01:cf:40:01:18:e9:41:0b:d3:83:d6:f9: e8:1e:15:e1:f9:de:d9:49:43:34:8f:a6:8b:94:51: 1c:48:08:62:70:68:65:e5:7c:c7:e5:2e:0c:c8:ba: 1a:ad:9b:b9:23:45:ea:d3:83:ac:0a:e4:14:11:a6: ae:9c:39:e5:29:0b:af:6a:fe:8e:04:4a:24:bb:2c: 83:51:1b:50:05:02:8e:f3:4a:66:bd:fd:40:16:83: 13:55:4e:b0:c7:f5:1e:a3:55:3e:4d:bc:20:9f:2b: f6:73:66:6f:51:ac:76:0e:ee:25:17:06:50:cc:63: 9f:a8:8e:8f:e7:55:b4:03:9f:70:f7:2d:f3:7f:64: 13:2a:be:45:f5:3a:da:b2:4c:c7:77:f2:04:91:55: 99:19:9d:a5:1b:60:13:87:58:70:16:eb:9d:b4:f0: f5:80:b1:d0:2c:15:45:fe:da:1d:ac:aa:83:b1:0c: ab:87:5e:48:43:e1:54:50:85:4e:6b:78:22:60:a7: 63:a0:1e:32:6a:59:4d:69:4b:fd:85:5a:8e:20:47: 1f:ea:15:55:44:bb:0f:b7:22:f1:fe:0a:dd:84:49: 31:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:38:00:B2:6B:75:26:E9:DF:DC:47:52:C2:3C:BA:B6:1A:8D:E6:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/433f4626-f5a4-3f5b-8402-ad0e6744411a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:33:86:3f:db:48:ce:7c:35:e3:47:a9:4d:35:b1:bd:90:73: b7:50:24:21:85:3f:f2:74:f2:2c:84:ef:1a:57:a0:54:fc:e4: 63:fc:9b:1d:5a:fb:23:41:78:3f:09:4e:ee:12:ec:66:61:03: 3c:68:89:cc:02:d9:ac:4c:08:6d:83:fe:89:5f:2e:67:95:7d: a2:ed:3f:85:17:ab:91:c9:84:71:27:61:23:09:0a:d0:37:b5: 39:51:87:8f:18:4a:7b:86:87:71:61:71:bc:5f:10:c1:3f:26: 91:99:f8:b8:14:e7:24:13:13:4c:0c:c6:af:e7:aa:ea:1e:21: 3d:3e:1f:e2:11:c7:50:4a:2f:09:bc:e1:7f:95:b7:a0:77:b5: cd:8f:f7:e2:f0:3d:93:57:36:2d:7e:32:b7:20:95:ad:0b:24: 8a:1d:f7:a7:f5:f2:11:ee:ad:6f:87:28:77:6e:f5:8e:34:b8: a0:1e:6c:b9:80:e9:fe:05:c2:e6:0b:6a:63:fe:ad:78:f6:53: 38:80:87:77:56:72:34:97:84:61:12:49:72:5a:f0:06:6d:69: 31:77:0f:b2:8f:d2:32:6a:69:0a:53:00:0f:5d:73:55:31:90: f4:a5:62:f2:e5:07:0f:ea:9d:20:cf:1a:a7:0f:cb:a6:7f:7d: 6b:69:7b:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV8jfH+ujWBpcA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk MzEzZjQ5ZDgtYTRlZS00NTE5LTk2NDUtMWRlY2QxNmIyNGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3pRaUNDXAUXRtMo5xCpGt5DrHYx5QoaCa18 NuussWMBz0ABGOlBC9OD1vnoHhXh+d7ZSUM0j6aLlFEcSAhicGhl5XzH5S4MyLoa rZu5I0Xq04OsCuQUEaaunDnlKQuvav6OBEokuyyDURtQBQKO80pmvf1AFoMTVU6w x/Ueo1U+Tbwgnyv2c2ZvUax2Du4lFwZQzGOfqI6P51W0A59w9y3zf2QTKr5F9Tra skzHd/IEkVWZGZ2lG2ATh1hwFuudtPD1gLHQLBVF/todrKqDsQyrh15IQ+FUUIVO a3giYKdjoB4yallNaUv9hVqOIEcf6hVVRLsPtyLx/grdhEkxvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOY4ALJrdSbp39xHUsI8urYajeYAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDMzZjQ2MjYtZjVhNC0z ZjViLTg0MDItYWQwZTY3NDQ0MTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGszhj/bSM58NeNHqU01sb2Qc7dQJCGFP/J08iyE7xpXoFT85GP8mx1a +yNBeD8JTu4S7GZhAzxoicwC2axMCG2D/olfLmeVfaLtP4UXq5HJhHEnYSMJCtA3 tTlRh48YSnuGh3FhcbxfEME/JpGZ+LgU5yQTE0wMxq/nquoeIT0+H+IRx1BKLwm8 4X+Vt6B3tc2P9+LwPZNXNi1+Mrcgla0LJIod96f18hHurW+HKHdu9Y40uKAebLmA 6f4FwuYLamP+rXj2UziAh3dWcjSXhGESSXJa8AZtaTF3D7KP0jJqaQpTAA9dc1Ux kPSlYvLlBw/qnSDPGqcPy6Z/fWtpe+c= -----END CERTIFICATE-----Generated at Sat Oct 10 16:00:38 2026 by rpki-client