$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/75001df1-5e21-3546-b115-8de972f910a8.roa File: 75001df1-5e21-3546-b115-8de972f910a8.roa (raw, json) Hash identifier: ucSqu/KlDScpkHylUs0AZ2WHotPg/kLxtzEZBrRfjR0= Subject key identifier: 53:02:B3:54:83:A9:55:0B:13:A8:DF:AB:06:2C:A3:75:0E:7A:66:7E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F2957C8733BF5D66AE997C7C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/75001df1-5e21-3546-b115-8de972f910a8.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 8069 IP address blocks: 20.33.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:c8:73:3b:f5:d6:6a:e9:97:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=eb015e2a-ec10-4f73-8e2d-af4d09143614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:70:1d:23:09:2e:30:1b:d7:a8:9f:6a:e0:8f: 67:ac:5a:64:67:75:2e:c9:0e:99:ef:2f:b9:7b:de: 90:26:b8:a1:f0:15:8f:ae:55:b8:4b:92:17:14:1e: f9:a4:84:78:68:7d:0e:c8:77:0b:97:77:59:db:72: 95:c8:d8:82:7b:27:5e:30:e6:e3:8d:27:d7:7c:e8: 98:01:56:41:24:6b:ac:a3:8e:80:86:18:5d:33:9b: f7:6f:62:c1:a5:f3:68:e1:69:85:01:47:33:45:59: 5f:bb:2a:b1:06:7d:4b:e5:44:2a:0b:95:2a:47:a2: f6:c0:cd:6e:29:93:d7:7a:26:7c:fe:db:24:7b:6f: 68:07:79:52:76:e0:ad:43:37:a9:70:dc:c6:b3:87: cd:a0:0b:60:d5:a5:bc:2f:8f:1b:b5:01:af:b6:f5: f1:9f:24:84:50:7b:44:ea:fd:82:46:38:c2:11:78: 21:c4:05:9a:c0:5b:7f:8f:5a:1c:a4:1f:37:4c:3d: fa:80:bd:08:7b:27:ba:76:0b:78:38:94:b2:39:ee: 66:37:d4:63:22:ed:3c:bd:01:7a:de:17:46:95:a1: b1:6f:c4:dc:f1:c0:ef:fd:78:24:d6:56:bc:74:be: 52:69:38:35:ae:88:51:0d:67:cf:71:5a:d9:09:1a: 13:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:02:B3:54:83:A9:55:0B:13:A8:DF:AB:06:2C:A3:75:0E:7A:66:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/75001df1-5e21-3546-b115-8de972f910a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:63:ca:ee:fe:94:18:fc:62:b0:6e:c9:30:ba:3d:8c:41:ff: 06:65:70:a1:d4:85:93:9e:d1:dd:fb:eb:54:9c:42:7a:af:cb: 22:74:54:c1:23:f8:e6:b5:9d:d6:ce:3a:a4:80:8b:eb:0c:76: 56:94:ca:02:c5:40:95:1e:84:2d:00:1c:42:24:e4:cc:0c:86: cc:88:77:27:78:5c:79:fe:84:d5:08:92:09:c1:57:06:9b:d8: 8a:e2:9a:8b:b2:2e:a3:17:0a:5a:d8:02:db:9f:a9:75:80:c2: 07:db:30:13:5e:75:32:0a:f5:00:b7:88:2c:23:2f:03:c7:72: 1d:84:66:45:a3:52:d1:c1:3c:f4:f0:8c:38:ad:69:ac:cd:fb: a0:a7:2d:01:9f:e9:de:76:06:de:07:49:b3:18:74:a9:a2:42: 55:4d:76:88:c4:f3:c3:cf:46:fd:aa:f1:6d:ed:b3:67:ae:c1: 6f:1b:53:d7:e7:54:73:06:d3:1c:ec:13:b8:62:0b:a1:53:59: a8:19:dc:4c:ec:45:c7:45:64:44:56:f8:54:1a:be:81:74:e2: 40:be:3d:92:7b:cb:ce:06:ee:bf:e8:32:40:9e:ae:ca:a7:4d: d8:f2:13:85:c8:01:3f:2c:5f:d4:63:84:fa:62:fd:aa:87:54: 6e:30:ed:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV8hzO/XWaumXx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk ZWIwMTVlMmEtZWMxMC00ZjczLThlMmQtYWY0ZDA5MTQzNjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHAdIwkuMBvXqJ9q4I9nrFpkZ3UuyQ6Z7y+5 e96QJrih8BWPrlW4S5IXFB75pIR4aH0OyHcLl3dZ23KVyNiCeydeMObjjSfXfOiY AVZBJGuso46AhhhdM5v3b2LBpfNo4WmFAUczRVlfuyqxBn1L5UQqC5UqR6L2wM1u KZPXeiZ8/tske29oB3lSduCtQzepcNzGs4fNoAtg1aW8L48btQGvtvXxnySEUHtE 6v2CRjjCEXghxAWawFt/j1ocpB83TD36gL0Ieye6dgt4OJSyOe5mN9RjIu08vQF6 3hdGlaGxb8Tc8cDv/Xgk1la8dL5SaTg1rohRDWfPcVrZCRoTAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMCs1SDqVULE6jfqwYso3UOemZ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzUwMDFkZjEtNWUyMS0z NTQ2LWIxMTUtOGRlOTcyZjkxMGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBjyu7+lBj8YrBuyTC6PYxB/wZlcKHUhZOe0d3761ScQnqvyyJ0VMEj +Oa1ndbOOqSAi+sMdlaUygLFQJUehC0AHEIk5MwMhsyIdyd4XHn+hNUIkgnBVwab 2IrimouyLqMXClrYAtufqXWAwgfbMBNedTIK9QC3iCwjLwPHch2EZkWjUtHBPPTw jDitaazN+6CnLQGf6d52Bt4HSbMYdKmiQlVNdojE88PPRv2q8W3ts2euwW8bU9fn VHMG0xzsE7hiC6FTWagZ3EzsRcdFZERW+FQavoF04kC+PZJ7y84G7r/oMkCersqn TdjyE4XIAT8sX9RjhPpi/aqHVG4w7XM= -----END CERTIFICATE-----Generated at Mon Sep 28 19:58:30 2026 by rpki-client