$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c80d730-c27b-37ad-b9bc-220b32e6a0b1.roa File: 6c80d730-c27b-37ad-b9bc-220b32e6a0b1.roa (raw, json) Hash identifier: MpCA+/sZNOvC4l1U/I6PcxS/r1JCWc7aoIvvSFmzxNk= Subject key identifier: 02:51:1A:2F:9A:A5:70:3B:F9:BE:9A:4B:5A:AA:7B:79:E0:D0:CF:6E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F2957C8382F3EBCE769E6AB80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c80d730-c27b-37ad-b9bc-220b32e6a0b1.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 8069 IP address blocks: 20.33.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:c8:38:2f:3e:bc:e7:69:e6:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=451bfdca-844c-426d-8e15-07b2a32d4164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f8:32:3b:e1:02:cf:cf:7c:73:38:43:dd:82: d8:60:34:14:70:11:81:2b:61:b1:d9:1b:9f:0c:cc: f4:b1:1f:f0:83:c5:04:49:e5:cf:51:f7:61:e8:36: 4a:67:dd:63:f7:2e:05:5b:83:32:26:86:40:cc:5d: ff:39:b1:aa:91:29:24:2b:3a:e0:05:79:d4:03:28: a2:bc:36:0b:4d:60:4b:6a:90:85:3f:c6:cc:2e:68: bd:01:85:c2:09:0a:68:10:ba:88:88:f4:13:0a:b3: e1:35:2c:33:00:c0:d2:fd:99:17:1c:52:58:e4:76: f8:cc:ce:5d:06:ef:9d:e2:99:e7:94:d8:87:b3:7f: 77:2d:37:af:5f:be:44:32:28:5e:d0:3c:9c:74:4a: e0:44:7b:40:63:f1:28:8a:0d:53:90:92:ee:0e:44: 44:e9:aa:c3:a1:50:07:5f:19:43:bc:0d:14:81:01: 9d:a2:fb:b0:33:57:7f:bb:89:27:b5:80:3b:88:0d: dc:3d:db:bb:a1:2b:cc:25:f0:65:9e:55:76:27:56: d4:e0:9f:0f:95:b4:62:6f:0f:ad:d1:bb:6e:45:e7: 36:47:8f:d2:72:ef:32:44:18:92:96:37:6c:8e:57: 40:63:24:29:74:40:ad:d0:41:8f:43:3a:67:50:94: 1a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:51:1A:2F:9A:A5:70:3B:F9:BE:9A:4B:5A:AA:7B:79:E0:D0:CF:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c80d730-c27b-37ad-b9bc-220b32e6a0b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:65:d5:0c:8d:07:97:a3:fb:dc:48:ee:91:7c:71:69:a3:c5: 9f:ed:7a:88:9b:20:00:62:0d:cf:6d:27:fa:85:97:32:df:d0: 6d:a5:cb:6f:a0:60:9e:45:a3:9d:a7:49:17:1e:a7:f4:65:a6: 0d:9b:e2:d6:07:a0:0b:14:1a:43:2b:86:3f:fc:91:0b:e3:b9: b5:ed:53:6a:d0:4c:74:da:27:d9:36:37:3a:a4:05:a4:18:ca: d1:41:c5:8d:45:c4:d8:42:60:bb:90:e5:9e:ae:64:b7:13:32: 4f:8f:ba:d0:ec:78:07:37:11:96:b6:df:e2:31:e6:ce:35:1f: 59:79:33:67:a1:9b:1b:f1:f1:c3:ca:f4:3e:bd:4b:4a:6c:35: cb:d8:cb:4d:0d:85:f4:3d:68:16:ae:20:a5:46:8f:25:90:f0: 8c:49:43:c1:db:a5:fe:fd:02:41:85:72:a2:00:32:74:33:15: 36:db:64:1a:f6:7c:a6:56:f0:30:85:4e:68:9e:ca:37:7f:93: 51:18:e8:86:31:ff:6d:7c:31:45:58:67:9c:81:47:21:e7:a4: 12:6f:71:2e:85:3d:3c:09:5c:f0:80:7d:34:ce:17:ad:e4:df: 51:3d:da:95:e7:31:8c:9e:a4:b1:29:35:0f:ea:9b:51:ab:e0: 14:ed:0a:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV8g4Lz6852nmq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk NDUxYmZkY2EtODQ0Yy00MjZkLThlMTUtMDdiMmEzMmQ0MTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfgyO+ECz898czhD3YLYYDQUcBGBK2Gx2Ruf DMz0sR/wg8UESeXPUfdh6DZKZ91j9y4FW4MyJoZAzF3/ObGqkSkkKzrgBXnUAyii vDYLTWBLapCFP8bMLmi9AYXCCQpoELqIiPQTCrPhNSwzAMDS/ZkXHFJY5Hb4zM5d Bu+d4pnnlNiHs393LTevX75EMihe0DycdErgRHtAY/Eoig1TkJLuDkRE6arDoVAH XxlDvA0UgQGdovuwM1d/u4kntYA7iA3cPdu7oSvMJfBlnlV2J1bU4J8PlbRibw+t 0btuRec2R4/Scu8yRBiSljdsjldAYyQpdECt0EGPQzpnUJQa8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJRGi+apXA7+b6aS1qqe3ng0M9uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmM4MGQ3MzAtYzI3Yi0z N2FkLWI5YmMtMjIwYjMyZTZhMGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxl1QyNB5ej+9xI7pF8cWmjxZ/teoibIABiDc9tJ/qFlzLf0G2ly2+g YJ5Fo52nSRcep/Rlpg2b4tYHoAsUGkMrhj/8kQvjubXtU2rQTHTaJ9k2NzqkBaQY ytFBxY1FxNhCYLuQ5Z6uZLcTMk+PutDseAc3EZa23+Ix5s41H1l5M2ehmxvx8cPK 9D69S0psNcvYy00NhfQ9aBauIKVGjyWQ8IxJQ8Hbpf79AkGFcqIAMnQzFTbbZBr2 fKZW8DCFTmieyjd/k1EY6IYx/218MUVYZ5yBRyHnpBJvcS6FPTwJXPCAfTTOF63k 31E92pXnMYyepLEpNQ/qm1Gr4BTtCrA= -----END CERTIFICATE-----Generated at Tue Sep 29 02:54:45 2026 by rpki-client