$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/70cbfac7-7845-3c22-8003-b419f184ca4b.roa File: 70cbfac7-7845-3c22-8003-b419f184ca4b.roa (raw, json) Hash identifier: 7kwpiD+uvyua7VM2LHw0/SoEpBRmye3vhd5WrmPxXUs= Subject key identifier: F9:5E:EA:80:78:B7:64:D4:64:5A:F9:CF:76:CD:00:EA:6C:8B:58:05 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F2957C84410A175570F684B90 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/70cbfac7-7845-3c22-8003-b419f184ca4b.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 8069 IP address blocks: 20.33.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:c8:44:10:a1:75:57:0f:68:4b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=d828944e-5cae-4749-9491-05ffa47dfc1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:50:bb:1d:73:d7:4b:f5:29:46:41:21:ad:62: 93:4a:bd:3a:34:90:01:41:19:b5:6c:04:39:3a:76: fd:76:81:58:8e:04:3d:56:93:cc:80:b2:ae:b9:fe: ea:44:76:48:12:0e:a9:7a:5b:ba:2e:61:3c:d1:cf: 03:21:73:eb:36:26:cd:c6:73:15:a7:28:e1:2c:dc: b7:4f:e2:db:d5:5d:03:7f:40:1b:86:d1:91:0a:6f: 94:25:0e:8f:32:31:ab:0f:1f:ad:d9:5b:df:ec:0e: 51:52:69:91:a1:73:4c:d4:b1:1d:ac:e2:59:7f:77: c1:70:f7:34:b6:c6:29:81:1c:ee:ae:22:c2:ee:2c: d8:24:9b:fe:86:26:d2:46:76:2b:96:87:d4:6a:2d: d7:4a:e0:8d:ff:4a:0d:c1:43:c5:22:62:66:4d:6d: c1:04:a8:af:89:27:f4:3c:1a:76:b2:16:57:1c:5d: e5:be:75:24:d0:a5:b8:34:d0:9a:6d:61:70:86:91: 4d:6e:18:d0:57:34:0a:2c:c0:4f:c8:4b:1a:ad:47: cb:18:01:84:2e:bc:b1:0c:f8:00:5e:a8:b0:7e:b0: f0:b1:5e:e4:bc:1b:ba:36:fe:2a:45:c3:fa:b6:ef: c6:5d:90:bb:f6:a7:f1:41:db:db:8b:cd:ce:4c:86: c6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:5E:EA:80:78:B7:64:D4:64:5A:F9:CF:76:CD:00:EA:6C:8B:58:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/70cbfac7-7845-3c22-8003-b419f184ca4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:fb:b1:37:62:57:83:c4:7f:6c:a0:5f:bb:89:79:cc:44:b7: 09:31:d7:87:fa:f9:94:0c:2b:cb:a5:00:39:74:5c:6b:9e:2d: f7:7a:21:6f:2a:c1:d4:42:70:79:b9:fb:d4:c4:95:1c:d8:b7: 4e:a5:61:e8:ba:a1:28:9b:e5:f3:78:df:26:84:7f:ae:bc:d3: a5:45:e2:a8:f4:e1:47:5a:0e:3b:d9:9f:11:03:fe:b0:c8:a1: 0f:e1:77:7b:a6:59:db:cf:f3:e7:33:28:7c:38:2b:19:71:c7: 53:5e:b1:6a:f0:9d:76:5e:82:03:8c:eb:38:3d:7e:37:20:53: 4c:e6:75:7e:de:14:92:c6:13:46:b6:ae:76:9d:72:f2:26:59: 15:2e:68:f2:d7:48:0d:db:0c:74:e7:56:0e:ba:3b:fb:17:ed: 12:69:0c:c2:17:31:30:e7:c5:e8:ed:d9:1b:81:0e:18:8f:6b: 5a:ca:09:90:35:e2:79:20:d8:c3:15:50:cb:96:14:56:8f:2b: 0e:98:6f:4e:60:6a:41:f6:16:27:21:1e:ef:80:32:1c:db:bb: 2e:63:02:21:0f:87:f7:5f:2a:ff:dd:de:05:2f:50:4a:1b:1d: 48:c1:50:bf:3d:90:89:c9:c0:0e:af:b8:ea:26:c7:73:a3:83: 93:c2:01:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV8hEEKF1Vw9oS5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk ZDgyODk0NGUtNWNhZS00NzQ5LTk0OTEtMDVmZmE0N2RmYzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVC7HXPXS/UpRkEhrWKTSr06NJABQRm1bAQ5 Onb9doFYjgQ9VpPMgLKuuf7qRHZIEg6pelu6LmE80c8DIXPrNibNxnMVpyjhLNy3 T+Lb1V0Df0AbhtGRCm+UJQ6PMjGrDx+t2Vvf7A5RUmmRoXNM1LEdrOJZf3fBcPc0 tsYpgRzuriLC7izYJJv+hibSRnYrlofUai3XSuCN/0oNwUPFImJmTW3BBKiviSf0 PBp2shZXHF3lvnUk0KW4NNCabWFwhpFNbhjQVzQKLMBPyEsarUfLGAGELryxDPgA XqiwfrDwsV7kvBu6Nv4qRcP6tu/GXZC79qfxQdvbi83OTIbGhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPle6oB4t2TUZFr5z3bNAOpsi1gFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzBjYmZhYzctNzg0NS0z YzIyLTgwMDMtYjQxOWYxODRjYTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCExMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAH7sTdiV4PEf2ygX7uJecxEtwkx14f6+ZQMK8ulADl0XGueLfd6IW8q wdRCcHm5+9TElRzYt06lYei6oSib5fN43yaEf66806VF4qj04UdaDjvZnxED/rDI oQ/hd3umWdvP8+czKHw4Kxlxx1NesWrwnXZeggOM6zg9fjcgU0zmdX7eFJLGE0a2 rnadcvImWRUuaPLXSA3bDHTnVg66O/sX7RJpDMIXMTDnxejt2RuBDhiPa1rKCZA1 4nkg2MMVUMuWFFaPKw6Yb05gakH2FichHu+AMhzbuy5jAiEPh/dfKv/d3gUvUEob HUjBUL89kInJwA6vuOomx3Ojg5PCAc0= -----END CERTIFICATE-----Generated at Mon Sep 28 20:57:14 2026 by rpki-client