$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6bd5db9a-f36f-3176-9d56-0cd93acf873e.roa File: 6bd5db9a-f36f-3176-9d56-0cd93acf873e.roa (raw, json) Hash identifier: SozfitfpGzextRBskjEmjYRAkWr5UQTCsKEdfSEUc98= Subject key identifier: 15:87:CA:86:17:3A:30:D8:2C:79:58:54:A6:51:3D:0C:D3:00:C2:D7 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F305284F3D251A43B81E95A00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6bd5db9a-f36f-3176-9d56-0cd93acf873e.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:84:f3:d2:51:a4:3b:81:e9:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=19951f9c-f63c-414c-85c9-3fb83b6532f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ac:44:f7:39:65:67:9e:64:c7:c0:f8:f9:ec: 65:e1:23:bd:43:7b:a9:0e:91:38:d6:81:59:e6:70: 76:31:16:22:fb:97:67:bc:bc:bb:f8:f5:66:50:c0: c0:87:4c:5c:85:3b:70:47:10:94:f8:76:4e:8b:48: 79:ed:7f:f4:64:57:db:62:d5:0a:f9:b5:73:4a:5b: 89:7a:10:be:96:0c:a6:51:52:b1:a0:7d:9c:3c:34: 8b:32:c3:7d:d7:94:cd:7d:aa:86:76:2a:4d:4a:62: 23:31:4f:89:1f:86:0c:90:4b:79:b9:93:6b:4e:1a: b3:5c:ee:47:3e:5e:59:d6:26:52:b8:8c:03:35:36: c2:76:4f:13:51:47:a4:36:80:79:b5:3c:f4:ce:ba: c6:48:d8:6f:47:b6:b6:da:2e:23:ef:99:30:11:33: 04:17:b1:74:17:b9:63:c6:4d:36:9c:15:63:df:c6: 72:a1:08:29:db:9b:7f:0a:57:de:9a:a1:19:3f:bb: 94:87:9c:f7:1f:59:44:48:7b:ce:a4:74:0a:f0:0f: c8:b8:44:04:90:e2:68:ac:8f:37:49:5c:37:c3:64: 1b:bc:31:87:a8:26:f5:1b:2d:47:36:30:db:d1:42: 6a:45:a0:79:50:1a:5b:3e:5d:05:23:34:9d:8d:b2: 0b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:87:CA:86:17:3A:30:D8:2C:79:58:54:A6:51:3D:0C:D3:00:C2:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6bd5db9a-f36f-3176-9d56-0cd93acf873e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:2e:10:34:ea:a1:08:15:23:50:2f:ac:e4:47:df:a6:21:cf: d6:7e:d2:40:36:6d:71:23:f2:e8:46:ca:48:8c:bc:d0:0e:ec: 5a:15:88:87:3e:a0:e6:b8:8b:57:39:18:36:9c:41:87:95:3d: ec:ab:be:7d:ac:8a:b8:02:66:5a:e0:b3:2d:d9:9d:a4:63:03: 5b:4c:2a:e9:ae:b9:39:19:b4:c3:b4:a4:b8:c3:95:a0:ad:56: 61:df:84:98:c7:73:61:f6:a7:de:55:0c:be:8b:37:13:94:13: 5e:6b:67:b2:d3:86:ca:9c:ef:37:59:c6:57:e3:fe:c4:87:51: ed:55:e5:d9:34:e7:6a:a7:ff:85:b9:7d:0c:52:b7:a5:0b:47: c8:71:3b:ac:35:c1:75:04:bc:7c:e7:4e:7d:c8:eb:ee:06:12: 1a:c1:5f:d4:be:d9:be:72:da:38:ca:c9:ce:53:78:1d:8a:b4: 2f:c7:40:b3:b6:e1:bd:1b:a2:62:db:4c:39:96:b8:da:ab:99: ef:2c:b1:0f:46:e3:4a:b6:6b:f6:3d:11:62:2d:69:d5:0d:ff: 1e:f2:16:74:26:aa:c4:59:e5:53:f8:4c:c7:c7:6a:31:db:08: 3a:01:0c:0f:45:f7:ef:96:1d:0c:0f:02:5c:b5:74:a0:28:a0: 1d:52:9f:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUoTz0lGkO4HpWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk MTk5NTFmOWMtZjYzYy00MTRjLTg1YzktM2ZiODNiNjUzMmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKxE9zllZ55kx8D4+exl4SO9Q3upDpE41oFZ 5nB2MRYi+5dnvLy7+PVmUMDAh0xchTtwRxCU+HZOi0h57X/0ZFfbYtUK+bVzSluJ ehC+lgymUVKxoH2cPDSLMsN915TNfaqGdipNSmIjMU+JH4YMkEt5uZNrThqzXO5H Pl5Z1iZSuIwDNTbCdk8TUUekNoB5tTz0zrrGSNhvR7a22i4j75kwETMEF7F0F7lj xk02nBVj38ZyoQgp25t/ClfemqEZP7uUh5z3H1lESHvOpHQK8A/IuEQEkOJorI83 SVw3w2QbvDGHqCb1Gy1HNjDb0UJqRaB5UBpbPl0FIzSdjbILkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWHyoYXOjDYLHlYVKZRPQzTAMLXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmJkNWRiOWEtZjM2Zi0z MTc2LTlkNTYtMGNkOTNhY2Y4NzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEuEDTqoQgVI1AvrORH36Yhz9Z+0kA2bXEj8uhGykiMvNAO7FoViIc+ oOa4i1c5GDacQYeVPeyrvn2sirgCZlrgsy3ZnaRjA1tMKumuuTkZtMO0pLjDlaCt VmHfhJjHc2H2p95VDL6LNxOUE15rZ7LThsqc7zdZxlfj/sSHUe1V5dk052qn/4W5 fQxSt6ULR8hxO6w1wXUEvHznTn3I6+4GEhrBX9S+2b5y2jjKyc5TeB2KtC/HQLO2 4b0bomLbTDmWuNqrme8ssQ9G40q2a/Y9EWItadUN/x7yFnQmqsRZ5VP4TMfHajHb CDoBDA9F9++WHQwPAly1dKAooB1Sn/8= -----END CERTIFICATE-----Generated at Sun Oct 11 13:47:42 2026 by rpki-client