$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4a91552d-6deb-3e19-805b-ab52062a7fcd.roa File: 4a91552d-6deb-3e19-805b-ab52062a7fcd.roa (raw, json) Hash identifier: 3C9VfO9OspdV4GtJuiUZeFJlP4tC3ANLOWbLYZUANtg= Subject key identifier: F0:BB:7D:DA:C0:ED:2F:FE:39:76:84:B1:31:01:F4:E3:E8:59:71:8F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F2957C85BF5D87B70F1A57780 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4a91552d-6deb-3e19-805b-ab52062a7fcd.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 8069 IP address blocks: 20.33.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:c8:5b:f5:d8:7b:70:f1:a5:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=c1eb3e40-6410-48b6-8a8a-ea7cb8300f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ea:cf:42:cd:54:64:46:29:3c:79:bb:49:8b: e2:bd:71:b6:27:c5:04:b7:ae:2a:2f:7b:df:6a:a9: 9b:b8:8e:01:bd:40:71:4c:bb:4c:12:da:60:0c:79: 02:7e:7b:6b:f0:87:61:ee:10:26:99:4a:88:e3:27: 4d:1c:70:1e:e3:bf:aa:25:7b:91:c0:80:7b:c9:44: 73:e4:6d:21:41:b1:ec:57:d7:1f:31:29:9a:57:f4: b7:f7:1c:9c:38:33:30:63:83:5f:ca:16:2c:f1:d6: 8f:c5:ba:47:aa:bb:fd:8f:34:2c:36:f7:3e:6c:7b: a3:10:1a:62:50:10:84:c7:6e:d4:ac:fd:0f:81:df: f3:a2:87:d7:a4:12:92:8e:2d:de:cb:59:8f:1c:dc: 28:48:39:50:f7:7e:82:29:d7:c5:2f:47:bb:16:cf: 22:cb:df:f5:e3:80:d4:f8:f8:8d:91:51:68:f1:4f: 05:96:1b:5f:89:36:87:a8:bf:a0:63:f6:3e:b8:9d: a8:e5:7e:ab:8a:46:e5:6b:18:63:8a:ac:81:a9:6a: f1:6c:cc:a3:42:34:c6:f4:09:64:99:1e:27:9c:bf: 87:62:eb:fe:43:11:79:28:d9:63:3b:68:28:f2:fc: 7d:a2:67:dd:16:c6:7d:5a:57:8a:b3:54:d7:f3:64: 43:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BB:7D:DA:C0:ED:2F:FE:39:76:84:B1:31:01:F4:E3:E8:59:71:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4a91552d-6deb-3e19-805b-ab52062a7fcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:e1:94:44:99:10:f0:74:9a:2e:2d:00:5f:61:eb:a8:f2:9e: e6:24:5b:fc:55:71:05:d0:dc:71:f3:db:3b:b9:0a:40:46:ca: 5e:4a:e1:12:b2:95:fd:d1:27:a1:86:70:56:0a:12:0c:cf:a1: 73:46:fa:41:af:a9:d9:18:45:41:41:9a:bb:83:ed:89:87:e9: 05:0d:22:6d:ca:14:e6:3c:bd:5d:74:fc:47:61:d0:e8:aa:57: 0f:72:83:be:73:e6:8c:d7:56:48:45:52:21:77:bd:8c:74:4c: 93:3e:34:51:47:c2:bb:ad:f1:b3:93:ea:c0:47:6d:ad:8e:88: 64:18:ed:aa:76:a2:9e:51:a5:a2:11:8c:cc:49:b6:28:3d:d3: 92:07:54:25:cb:55:94:d6:43:16:20:ee:9f:15:ba:f1:8c:a4: 18:cb:33:fe:34:a7:83:f9:2b:b3:e9:30:e2:b2:14:e1:60:c9: c7:a7:e6:3d:4f:c7:3f:eb:e8:69:8f:a8:d9:80:f3:2d:74:a4: 5f:0b:5c:52:38:ac:71:74:d4:1b:57:fa:02:53:34:0c:a9:c2: a2:80:ba:7c:41:a9:8b:22:c1:70:03:14:d3:ca:22:c1:96:f0: 6d:f5:b6:c7:a8:a3:43:b4:99:a5:e2:ab:de:5d:7f:1d:3e:02: d3:bc:5c:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV8hb9dh7cPGld4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk YzFlYjNlNDAtNjQxMC00OGI2LThhOGEtZWE3Y2I4MzAwZjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAherPQs1UZEYpPHm7SYvivXG2J8UEt64qL3vf aqmbuI4BvUBxTLtMEtpgDHkCfntr8Idh7hAmmUqI4ydNHHAe47+qJXuRwIB7yURz 5G0hQbHsV9cfMSmaV/S39xycODMwY4NfyhYs8daPxbpHqrv9jzQsNvc+bHujEBpi UBCEx27UrP0Pgd/zoofXpBKSji3ey1mPHNwoSDlQ936CKdfFL0e7Fs8iy9/144DU +PiNkVFo8U8FlhtfiTaHqL+gY/Y+uJ2o5X6rikblaxhjiqyBqWrxbMyjQjTG9Alk mR4nnL+HYuv+QxF5KNljO2go8vx9omfdFsZ9WleKs1TX82RDUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPC7fdrA7S/+OXaEsTEB9OPoWXGPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGE5MTU1MmQtNmRlYi0z ZTE5LTgwNWItYWI1MjA2MmE3ZmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjhlESZEPB0mi4tAF9h66jynuYkW/xVcQXQ3HHz2zu5CkBGyl5K4RKy lf3RJ6GGcFYKEgzPoXNG+kGvqdkYRUFBmruD7YmH6QUNIm3KFOY8vV10/Edh0Oiq Vw9yg75z5ozXVkhFUiF3vYx0TJM+NFFHwrut8bOT6sBHba2OiGQY7ap2op5RpaIR jMxJtig905IHVCXLVZTWQxYg7p8VuvGMpBjLM/40p4P5K7PpMOKyFOFgycen5j1P xz/r6GmPqNmA8y10pF8LXFI4rHF01BtX+gJTNAypwqKAunxBqYsiwXADFNPKIsGW 8G31tseoo0O0maXiq95dfx0+AtO8XAY= -----END CERTIFICATE-----Generated at Mon Sep 28 20:58:29 2026 by rpki-client