$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/44452d33-9f71-38a1-8ce2-f9548e3b6b7e.roa File: 44452d33-9f71-38a1-8ce2-f9548e3b6b7e.roa (raw, json) Hash identifier: VkywmUqAaDfXOqZTncphtZ352J5HwNYDPLZw8c08aRg= Subject key identifier: 8F:36:2F:12:F8:B9:B9:25:0C:54:0B:41:D2:B5:57:A5:77:2F:1A:D4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F3A17C8071A2273CF7DD5A4B0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/44452d33-9f71-38a1-8ce2-f9548e3b6b7e.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:c8:07:1a:22:73:cf:7d:d5:a4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=4fa69223-dec5-4fd2-84de-6ab763f0a0cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:00:df:d6:5b:6e:e0:27:44:92:fe:c8:da:f4: 86:d9:70:d2:b2:67:ae:11:ca:38:ff:76:5b:c1:11: 79:cb:d7:1e:ba:e1:0e:b8:24:31:5c:11:5d:cf:30: 20:82:b2:f1:7d:86:b5:c6:6e:85:a1:be:ef:3e:98: 2e:43:ac:7d:c8:d6:8a:f5:69:ad:31:6d:22:03:0f: 2b:f0:91:8a:d5:55:d6:5b:39:31:b9:4b:59:6f:4b: 8c:3d:ef:7d:7d:77:54:5a:b1:b4:13:d3:dc:aa:6a: 2f:25:ca:a7:db:bd:d6:c4:c5:b7:82:56:ce:65:57: 28:ad:a7:a9:58:38:10:46:ba:b1:01:a9:78:99:6f: 3b:e8:92:ce:e7:27:fd:10:e9:d4:a8:79:c3:53:21: 3f:41:8a:07:c6:11:25:b0:87:61:e9:2c:69:f8:8b: 2c:1e:28:50:e9:1f:27:33:54:c9:91:4c:7c:cb:02: 07:f5:81:9e:2f:2c:49:c8:e6:94:bf:30:69:0f:41: a4:d2:70:2f:f5:af:f1:40:ac:c6:9c:04:bf:7c:e6: 2c:a5:b3:17:3b:20:ae:fd:62:2b:65:e9:e1:4d:37: 04:aa:c4:df:04:19:c6:61:b8:a4:2e:9d:c1:53:17: 03:bf:5c:0f:4d:d7:85:b7:f1:ec:5d:c6:65:a9:f1: 96:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:36:2F:12:F8:B9:B9:25:0C:54:0B:41:D2:B5:57:A5:77:2F:1A:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/44452d33-9f71-38a1-8ce2-f9548e3b6b7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:25:4f:ad:7d:77:30:f5:1c:29:c8:62:a3:5a:26:87:4c:36: 15:b9:8f:53:26:22:d7:b0:66:84:14:be:3c:39:b3:98:5a:eb: 7e:14:e3:45:db:62:f7:0f:c1:de:6e:cd:31:df:29:4b:31:51: 78:f1:85:6e:48:e0:b5:1d:b3:0b:20:18:bb:28:b2:36:6e:59: 32:b4:b7:ea:cd:da:80:a8:96:73:e6:f7:a9:30:b5:ac:27:04: c5:d4:c0:3a:02:98:d6:47:26:0c:ed:87:3e:cc:85:e3:ae:d7: 15:4b:ab:23:c7:2d:b1:7e:7e:72:a2:1d:8f:a7:f4:0e:0a:af: fe:01:40:71:e8:9d:8e:cb:e9:16:f2:8a:ef:72:da:9d:6d:b5: fe:cb:42:bd:0b:19:9b:32:70:fe:78:db:e8:c0:ff:7b:3f:8a: cb:4f:29:a0:25:4e:68:f5:ae:9c:53:16:d7:96:36:05:be:c1: ad:db:e4:79:56:53:da:45:0d:bd:9d:75:c5:c4:1d:32:c7:43: de:84:c6:b5:91:09:7b:02:fe:7f:9f:f9:9d:f1:2e:46:52:28: fe:ed:72:f2:d4:42:81:eb:28:27:79:c6:92:88:e7:47:fc:3f: b8:e6:4c:e1:92:26:95:52:26:39:05:8e:90:ad:50:e8:14:79: 9d:78:c2:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8gHGiJzz33VpLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk NGZhNjkyMjMtZGVjNS00ZmQyLTg0ZGUtNmFiNzYzZjBhMGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwDf1ltu4CdEkv7I2vSG2XDSsmeuEco4/3Zb wRF5y9ceuuEOuCQxXBFdzzAggrLxfYa1xm6Fob7vPpguQ6x9yNaK9WmtMW0iAw8r 8JGK1VXWWzkxuUtZb0uMPe99fXdUWrG0E9PcqmovJcqn273WxMW3glbOZVcoraep WDgQRrqxAal4mW876JLO5yf9EOnUqHnDUyE/QYoHxhElsIdh6Sxp+IssHihQ6R8n M1TJkUx8ywIH9YGeLyxJyOaUvzBpD0Gk0nAv9a/xQKzGnAS/fOYspbMXOyCu/WIr ZenhTTcEqsTfBBnGYbikLp3BUxcDv1wPTdeFt/HsXcZlqfGWvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI82LxL4ubklDFQLQdK1V6V3LxrUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDQ0NTJkMzMtOWY3MS0z OGExLThjZTItZjk1NDhlM2I2YjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwlT619dzD1HCnIYqNaJodMNhW5j1MmItewZoQUvjw5s5ha634U40Xb YvcPwd5uzTHfKUsxUXjxhW5I4LUdswsgGLsosjZuWTK0t+rN2oColnPm96kwtawn BMXUwDoCmNZHJgzthz7MheOu1xVLqyPHLbF+fnKiHY+n9A4Kr/4BQHHonY7L6Rby iu9y2p1ttf7LQr0LGZsycP542+jA/3s/istPKaAlTmj1rpxTFteWNgW+wa3b5HlW U9pFDb2ddcXEHTLHQ96ExrWRCXsC/n+f+Z3xLkZSKP7tcvLUQoHrKCd5xpKI50f8 P7jmTOGSJpVSJjkFjpCtUOgUeZ14wrA= -----END CERTIFICATE-----Generated at Sun Oct 11 17:34:53 2026 by rpki-client