$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5611583f-0381-377c-8dab-8bb3ddb62332.roa File: 5611583f-0381-377c-8dab-8bb3ddb62332.roa (raw, json) Hash identifier: RJBk0dUkdkC4K0Dee8DCjEKsnSOboGCRur7kbWIX25U= Subject key identifier: 4D:66:4E:E0:4F:44:E2:A5:F2:74:11:BB:84:F0:E5:45:5C:F6:C4:31 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F1897AF1CB1302DAAEBAF6AC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5611583f-0381-377c-8dab-8bb3ddb62332.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:af:1c:b1:30:2d:aa:eb:af:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=5998c83a-8354-4d4d-9e67-b86d80c47cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:64:63:f1:0c:ea:a6:4b:ca:dc:38:71:ef:ae: 4c:25:4b:95:04:b2:63:a5:1b:93:ab:67:42:8c:86: 04:04:64:11:71:b2:d3:b3:ee:f3:5f:13:47:91:ec: 9a:72:a5:9d:dd:7c:f5:37:d7:90:85:4e:fb:8f:4c: 02:3d:fa:e7:9d:c5:b0:be:b5:25:1d:8d:be:0f:e9: ef:64:1d:d5:5e:39:d8:b2:ce:a1:db:39:56:2b:da: ad:57:d6:a7:c7:5e:fc:a2:a8:d4:ac:0a:f6:7b:22: a4:6a:aa:7e:fa:19:22:bb:14:14:83:d9:6f:a6:83: d6:e2:f9:6c:5e:ee:aa:21:7e:f5:8d:ae:44:88:df: cf:24:e2:23:80:de:52:0f:7f:17:e8:a1:6f:9a:b5: 04:ca:0d:8e:44:4f:4f:72:d9:39:0c:18:ec:e0:0e: 21:37:d1:70:68:00:0e:52:e2:1c:35:74:d4:3e:83: 2a:35:6c:5d:68:60:e7:61:58:a2:4c:68:28:6a:29: 82:32:92:17:eb:29:16:53:93:d9:13:7d:9d:c3:f4: 3b:34:c6:db:1e:2b:a4:54:07:1c:0e:5c:cf:c2:c1: 68:a8:86:fc:47:09:9e:ca:3d:2e:4e:96:be:1e:ea: 50:b9:6c:15:97:79:e3:5f:82:d6:82:1e:82:2f:52: 26:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:66:4E:E0:4F:44:E2:A5:F2:74:11:BB:84:F0:E5:45:5C:F6:C4:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5611583f-0381-377c-8dab-8bb3ddb62332.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:2e:61:eb:fe:60:48:3f:b5:91:b2:5b:54:e2:7b:32:3a:e7: 61:10:1e:63:c9:28:dc:fd:c0:11:1a:d9:88:b4:27:73:19:07: 35:27:0a:2f:2b:3a:59:02:e9:5b:fe:bf:f8:e5:f8:2b:f6:31: 7b:43:00:5d:40:f2:8d:5e:f5:7d:60:aa:ae:1d:df:73:74:fa: c7:8b:76:c0:f5:f6:31:1a:07:e5:5c:1f:cb:5a:2b:fe:a9:b2: 32:b0:de:88:95:3c:db:a7:7e:c1:39:e1:d9:c9:55:f2:17:3e: fe:6f:74:29:41:2e:66:0e:a6:32:3f:c6:3d:78:b8:e1:43:06: f7:0e:41:74:ab:24:1d:02:0f:d3:5a:74:53:2a:21:14:f4:e2: b4:b8:95:ef:ba:20:0f:fc:ee:dc:eb:19:4b:f3:88:ad:d0:c2: 0d:37:16:07:b1:e5:d0:ca:60:c8:9b:7a:ad:65:6a:ae:b2:b2: ef:01:49:8e:90:00:27:7e:ed:5b:60:bb:f1:af:99:c4:f2:48: 6e:c6:18:86:e0:a4:0b:38:e1:26:3a:a0:c5:6b:75:51:6f:d6: fc:8c:b7:a5:22:6f:48:09:67:b6:b1:0b:64:07:7f:c3:4f:a4: 91:39:04:b6:05:78:62:3b:9b:3c:aa:f5:98:35:e4:17:80:f1: e3:66:14:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl68csTAtquuvasAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk NTk5OGM4M2EtODM1NC00ZDRkLTllNjctYjg2ZDgwYzQ3Y2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmRj8QzqpkvK3Dhx765MJUuVBLJjpRuTq2dC jIYEBGQRcbLTs+7zXxNHkeyacqWd3Xz1N9eQhU77j0wCPfrnncWwvrUlHY2+D+nv ZB3VXjnYss6h2zlWK9qtV9anx178oqjUrAr2eyKkaqp++hkiuxQUg9lvpoPW4vls Xu6qIX71ja5EiN/PJOIjgN5SD38X6KFvmrUEyg2ORE9Pctk5DBjs4A4hN9FwaAAO UuIcNXTUPoMqNWxdaGDnYViiTGgoaimCMpIX6ykWU5PZE32dw/Q7NMbbHiukVAcc DlzPwsFoqIb8Rwmeyj0uTpa+HupQuWwVl3njX4LWgh6CL1ImVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1mTuBPROKl8nQRu4Tw5UVc9sQxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTYxMTU4M2YtMDM4MS0z NzdjLThkYWItOGJiM2RkYjYyMzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8uYev+YEg/tZGyW1TiezI652EQHmPJKNz9wBEa2Yi0J3MZBzUnCi8r OlkC6Vv+v/jl+Cv2MXtDAF1A8o1e9X1gqq4d33N0+seLdsD19jEaB+VcH8taK/6p sjKw3oiVPNunfsE54dnJVfIXPv5vdClBLmYOpjI/xj14uOFDBvcOQXSrJB0CD9Na dFMqIRT04rS4le+6IA/87tzrGUvziK3Qwg03Fgex5dDKYMibeq1laq6ysu8BSY6Q ACd+7Vtgu/GvmcTySG7GGIbgpAs44SY6oMVrdVFv1vyMt6Uib0gJZ7axC2QHf8NP pJE5BLYFeGI7mzyq9Zg15BeA8eNmFLk= -----END CERTIFICATE-----Generated at Mon Sep 28 14:58:27 2026 by rpki-client