$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/67363bc5-afc2-3ebd-99c4-8fe80b1aaef3.roa File: 67363bc5-afc2-3ebd-99c4-8fe80b1aaef3.roa (raw, json) Hash identifier: 0Lj7RSszvHSlvaeiGjZNJt42N6z7G43qNR2CM6ta+VE= Subject key identifier: F1:C5:94:80:FB:90:A8:B4:69:33:51:8B:8F:78:7C:B5:4E:FF:AF:E5 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F19FCF7153FDF0B816B965380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/67363bc5-afc2-3ebd-99c4-8fe80b1aaef3.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:f7:15:3f:df:0b:81:6b:96:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=e957a987-0f28-4397-b497-80d73ff5dbc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cc:a9:60:79:72:a6:69:79:86:62:11:5d:d6: 4b:23:fb:eb:65:3e:7d:b7:41:c3:75:c4:59:89:8f: b2:3f:c8:02:76:5c:e3:e3:aa:cc:45:65:e0:e9:5d: 86:9f:6c:b8:ce:49:9b:5c:12:8e:fb:e4:52:94:81: 98:c0:59:0f:dd:d8:98:c0:1d:bf:a8:02:3f:65:fa: 10:2d:93:ea:b7:46:a9:4d:73:85:ca:21:b1:6b:af: 1c:25:7a:26:a0:97:e0:97:77:e0:33:13:8e:27:e6: d8:4b:0f:80:62:1a:e5:42:28:03:f8:1a:27:8a:e2: d0:c6:51:93:85:cb:fe:26:c8:35:13:39:f9:b9:bd: d8:a7:f7:57:2b:f9:26:e5:ad:1a:4f:15:0e:1c:b5: 12:02:8a:85:a6:14:89:43:85:cc:f9:3f:d5:1f:d2: 59:40:b2:dd:71:37:63:aa:96:bf:8a:8d:2a:82:e5: c5:21:c9:b9:68:7b:ac:35:95:ad:ad:d6:72:45:1e: 11:9c:ca:e4:e5:f7:ce:07:99:47:ac:ca:93:a7:7d: 26:f1:e9:1a:37:fb:f6:8b:3f:99:11:1e:48:5b:64: 3c:2f:cc:f1:91:84:03:12:50:40:ae:fd:bf:96:62: dc:36:3f:9a:da:19:a8:62:f8:52:b5:f9:ec:7d:c6: 60:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C5:94:80:FB:90:A8:B4:69:33:51:8B:8F:78:7C:B5:4E:FF:AF:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/67363bc5-afc2-3ebd-99c4-8fe80b1aaef3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:96:fa:4b:7c:0f:6b:cb:4d:cc:b9:51:24:d0:0a:ca:47:7a: b1:c3:13:97:71:a5:59:74:ee:4c:51:02:43:bf:80:db:30:9e: 0e:af:1f:00:7f:14:06:cf:d9:d1:26:ed:08:52:81:9d:6e:cb: ae:4e:e7:c9:f5:e2:c3:06:76:1f:64:dd:24:32:6b:c1:8a:70: 35:b9:95:d7:92:8e:0f:2d:55:13:4f:ae:1e:1d:8a:ac:c1:3e: 2e:5d:37:15:c5:9e:bd:dd:9c:11:d9:2b:3e:46:78:e3:a0:18: ae:e2:79:7f:a3:ef:0f:7a:dd:61:d3:54:21:55:56:52:de:2c: 75:14:75:cc:b9:0f:c4:1e:40:f0:b8:eb:b1:e2:4a:fb:f0:fb: ee:48:8b:53:a9:7a:12:4d:95:fe:a9:78:34:a3:77:d0:f5:e8: 6b:01:d4:fa:6d:51:46:50:51:47:f3:11:ed:f1:c2:69:2f:e2: f4:1b:08:8c:7b:ab:a1:31:07:8c:0d:23:ff:62:95:7f:13:60: 69:4b:4d:ad:dc:dd:fb:c0:a6:1c:e3:90:73:29:cc:0f:76:c5: 97:a0:26:57:c0:e0:a6:4a:ae:91:8c:44:6f:eb:e3:39:c2:4b: 1d:83:e6:d6:0e:5d:e3:54:d8:cc:00:83:bb:23:66:81:df:d4: 8a:90:34:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/PcVP98LgWuWU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk ZTk1N2E5ODctMGYyOC00Mzk3LWI0OTctODBkNzNmZjVkYmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysypYHlypml5hmIRXdZLI/vrZT59t0HDdcRZ iY+yP8gCdlzj46rMRWXg6V2Gn2y4zkmbXBKO++RSlIGYwFkP3diYwB2/qAI/ZfoQ LZPqt0apTXOFyiGxa68cJXomoJfgl3fgMxOOJ+bYSw+AYhrlQigD+BoniuLQxlGT hcv+Jsg1Ezn5ub3Yp/dXK/km5a0aTxUOHLUSAoqFphSJQ4XM+T/VH9JZQLLdcTdj qpa/io0qguXFIcm5aHusNZWtrdZyRR4RnMrk5ffOB5lHrMqTp30m8ekaN/v2iz+Z ER5IW2Q8L8zxkYQDElBArv2/lmLcNj+a2hmoYvhStfnsfcZgkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHFlID7kKi0aTNRi494fLVO/6/lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjczNjNiYzUtYWZjMi0z ZWJkLTk5YzQtOGZlODBiMWFhZWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCF1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaW+kt8D2vLTcy5USTQCspHerHDE5dxpVl07kxRAkO/gNswng6vHwB/ FAbP2dEm7QhSgZ1uy65O58n14sMGdh9k3SQya8GKcDW5ldeSjg8tVRNPrh4diqzB Pi5dNxXFnr3dnBHZKz5GeOOgGK7ieX+j7w963WHTVCFVVlLeLHUUdcy5D8QeQPC4 67HiSvvw++5Ii1OpehJNlf6peDSjd9D16GsB1PptUUZQUUfzEe3xwmkv4vQbCIx7 q6ExB4wNI/9ilX8TYGlLTa3c3fvAphzjkHMpzA92xZegJlfA4KZKrpGMRG/r4znC Sx2D5tYOXeNU2MwAg7sjZoHf1IqQNGg= -----END CERTIFICATE-----Generated at Tue Sep 29 00:46:04 2026 by rpki-client