$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4765031d-1fb0-368a-b723-e6788ae0b6c0.roa File: 4765031d-1fb0-368a-b723-e6788ae0b6c0.roa (raw, json) Hash identifier: essWDHbq4k2Orl1NhNw3Ee2LqZy/ZOc7a9BOjNdt7lM= Subject key identifier: BB:DA:50:98:31:27:5C:0F:B2:3C:16:E7:4A:DC:27:C2:A4:8D:01:D7 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F2957C8D3382CBA1EA1B5A800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4765031d-1fb0-368a-b723-e6788ae0b6c0.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 8069 IP address blocks: 20.33.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:c8:d3:38:2c:ba:1e:a1:b5:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=5cf5ffaa-180e-4048-9bd5-6e3e7a1e5dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5a:08:af:31:70:5d:72:fd:95:fd:19:36:b6: 3a:31:46:d2:fd:10:58:48:4b:ee:0d:59:29:b6:28: db:53:42:4c:6a:07:d5:b0:c9:c5:db:49:f7:e7:ea: 84:40:73:97:de:bd:0e:be:e0:46:32:13:eb:90:74: 0e:24:a4:da:85:1b:bc:d7:23:0c:6d:1e:90:ff:2f: c7:a8:40:98:26:21:2c:5f:14:66:62:d2:1e:1a:9a: 05:0f:b2:55:29:7c:22:7f:20:b4:08:82:52:57:db: e4:e4:12:3e:f7:df:70:d5:13:b2:17:3b:eb:60:9b: 93:4b:15:42:75:3a:90:7d:1e:1d:29:8b:53:68:13: f1:53:f8:cf:c5:5d:17:9b:85:79:20:76:55:ba:08: df:87:80:75:9c:b2:26:f4:b8:e3:da:30:84:b2:95: 15:b9:90:9b:2a:e0:e0:37:8c:4e:30:a2:6b:61:67: 76:fe:3d:90:33:67:87:de:63:6b:7b:94:b3:27:5a: 55:2a:07:35:36:2d:9a:cd:05:09:a5:a5:fd:aa:59: e7:91:06:39:d7:82:43:d8:22:e4:01:6c:d3:73:e2: 05:cb:a3:8f:d3:4e:f3:b0:3c:36:5d:60:57:c7:48: c7:0f:f7:77:94:71:c2:27:2e:ae:57:15:14:5d:9f: 0f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DA:50:98:31:27:5C:0F:B2:3C:16:E7:4A:DC:27:C2:A4:8D:01:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4765031d-1fb0-368a-b723-e6788ae0b6c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:a4:59:46:84:0b:23:3f:d3:fd:b6:00:f3:84:5e:82:73:56: a4:c6:8e:93:00:f0:86:1f:12:c3:6a:37:a3:9a:b6:d0:a7:5a: 8d:4e:1e:e9:e2:e8:49:cc:4d:1a:ab:aa:75:62:77:3f:03:4d: 43:f5:96:be:ae:05:1f:bb:95:cf:12:7f:3b:8c:c2:d1:47:af: 52:21:08:f3:f1:7a:a1:55:ff:bb:b3:93:4d:a8:a3:15:e9:16: 57:e6:34:3b:f7:7b:7a:56:97:de:d5:c6:f1:07:3f:49:3d:a1: 6d:b0:6d:c6:9b:e0:51:30:12:dd:46:c7:72:6f:93:6c:86:ce: d0:b3:f7:4c:1f:c9:10:b1:f4:1b:d5:2f:1f:4c:0f:e9:f1:6d: 4b:f1:7c:f6:5e:8b:1a:b4:6b:a6:c9:4d:0c:0b:c9:be:87:ff: 71:21:6e:1e:44:8a:21:dc:46:1f:8f:5d:6b:a0:29:b3:c4:8e: 94:1a:f5:78:02:26:48:3a:82:e5:0d:1f:49:bd:33:eb:58:35: 88:5a:bd:8e:74:32:44:8b:18:8e:bc:13:55:87:56:59:e4:19: c2:8f:2b:ad:fc:a4:16:a6:f5:b7:56:d0:12:7e:5c:dd:9d:86: 6a:86:b2:97:a3:81:6f:a0:37:6a:e8:c0:8f:a3:56:bc:ce:78: 82:7d:db:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV8jTOCy6HqG1qAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk NWNmNWZmYWEtMTgwZS00MDQ4LTliZDUtNmUzZTdhMWU1ZGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVoIrzFwXXL9lf0ZNrY6MUbS/RBYSEvuDVkp tijbU0JMagfVsMnF20n35+qEQHOX3r0OvuBGMhPrkHQOJKTahRu81yMMbR6Q/y/H qECYJiEsXxRmYtIeGpoFD7JVKXwifyC0CIJSV9vk5BI+999w1ROyFzvrYJuTSxVC dTqQfR4dKYtTaBPxU/jPxV0Xm4V5IHZVugjfh4B1nLIm9Ljj2jCEspUVuZCbKuDg N4xOMKJrYWd2/j2QM2eH3mNre5SzJ1pVKgc1Ni2azQUJpaX9qlnnkQY514JD2CLk AWzTc+IFy6OP007zsDw2XWBXx0jHD/d3lHHCJy6uVxUUXZ8PIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvaUJgxJ1wPsjwW50rcJ8KkjQHXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDc2NTAzMWQtMWZiMC0z NjhhLWI3MjMtZTY3ODhhZTBiNmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSkWUaECyM/0/22APOEXoJzVqTGjpMA8IYfEsNqN6OattCnWo1OHuni 6EnMTRqrqnVidz8DTUP1lr6uBR+7lc8SfzuMwtFHr1IhCPPxeqFV/7uzk02ooxXp FlfmNDv3e3pWl97VxvEHP0k9oW2wbcab4FEwEt1Gx3Jvk2yGztCz90wfyRCx9BvV Lx9MD+nxbUvxfPZeixq0a6bJTQwLyb6H/3Ehbh5EiiHcRh+PXWugKbPEjpQa9XgC Jkg6guUNH0m9M+tYNYhavY50MkSLGI68E1WHVlnkGcKPK638pBam9bdW0BJ+XN2d hmqGspejgW+gN2rowI+jVrzOeIJ922M= -----END CERTIFICATE-----Generated at Mon Sep 28 18:10:08 2026 by rpki-client