$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7ef2643f-2ef0-3242-9320-0ac22ae783f3.roa File: 7ef2643f-2ef0-3242-9320-0ac22ae783f3.roa (raw, json) Hash identifier: BwK/OdDEhjR5X3QJwRhIXVtCVQ5fu3IxLl95XsDTJKw= Subject key identifier: 35:FE:29:3F:24:7C:A5:9B:84:01:A1:B7:C7:2A:DB:BC:81:14:0F:24 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F49775BE4F21C747D05B30E00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7ef2643f-2ef0-3242-9320-0ac22ae783f3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:5b:e4:f2:1c:74:7d:05:b3:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=54d4f354-0a94-4d2a-8546-19a68ee5d59e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:39:04:81:37:4c:a6:60:d9:24:58:be:a3:37: 8f:14:30:16:e9:33:d7:b4:c5:d8:41:3c:23:d2:24: e2:60:21:56:6b:3b:33:16:a0:f2:3d:bc:0e:7d:01: 4b:c7:fa:bf:d4:aa:8e:b8:d4:3e:88:53:cc:fd:df: 5e:f6:dd:f0:6f:9a:ca:59:6c:3e:fd:c8:60:96:6e: a5:6d:be:5d:48:b8:1c:4d:1a:1f:61:11:be:ac:32: 35:a7:5e:62:10:e8:2b:4d:33:76:1c:3f:86:34:10: 6a:70:41:5c:9a:a9:ba:0e:34:49:c3:cc:9d:fd:79: e2:ff:56:56:90:7c:36:e9:f2:35:e2:a9:c1:0c:2f: a2:d2:0e:e2:c1:f6:3e:1e:29:8c:b7:a1:cb:21:53: 44:7e:53:f0:b5:2b:dc:d7:c3:85:cc:1b:d1:7c:cf: c3:18:5e:a1:01:95:07:a0:f1:e4:cd:13:aa:74:a7: 5b:79:6b:72:19:ef:53:9d:07:9a:97:ba:ee:31:09: 86:7a:de:a3:4a:fa:32:db:03:6c:21:eb:2f:6c:ad: e7:80:2c:f0:ff:90:88:99:1e:ce:dc:c3:de:3c:73: 0b:b3:af:75:ab:70:a8:19:2c:b2:73:fa:9d:64:87: 41:4e:c0:54:e1:d9:8b:f3:5e:e9:84:70:7d:78:2d: 84:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FE:29:3F:24:7C:A5:9B:84:01:A1:B7:C7:2A:DB:BC:81:14:0F:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7ef2643f-2ef0-3242-9320-0ac22ae783f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ac:31:46:1f:fa:88:8c:c6:08:7b:fa:a2:8f:cd:bc:3d:08: 64:d6:90:6e:39:ed:01:f3:18:7b:5a:27:93:70:8c:24:f9:81: 84:fc:61:95:c3:59:1a:b2:ef:a5:1d:e0:88:ca:a1:69:71:d2: e5:db:39:be:60:2f:d3:93:80:de:f6:f0:73:cc:e7:3e:0e:c7: cf:2c:25:d7:30:c7:54:89:41:a1:9b:6e:d3:89:06:df:07:91: 15:e0:08:97:64:e8:e1:8e:42:62:a0:ba:4b:a2:ba:bb:de:14: d5:ce:6b:5c:4f:b7:69:bc:c5:22:c1:e0:c9:97:4d:53:f2:2e: 63:28:ce:59:a5:87:42:38:56:d2:7b:bf:8b:12:40:d1:b0:4f: 29:4d:65:c8:32:47:a5:be:40:a1:5b:ca:1e:40:7a:54:d3:cf: 93:35:e2:33:15:fb:a8:be:1a:18:8b:5e:a3:d1:77:77:d5:e2: fe:a1:0b:03:84:c1:8d:e9:b9:35:f3:2d:e6:82:21:99:2f:c5: 2e:9c:28:18:c1:24:f3:0b:4c:2f:86:b5:c3:02:4f:6a:14:5b: 37:9f:cf:ca:c2:d3:c3:44:78:80:9a:bc:c7:d2:6c:b9:a6:65: 0d:7d:88:f0:ee:8b:e1:b7:f4:bf:61:1e:c3:41:13:b6:d6:ee: 03:ee:04:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd1vk8hx0fQWzDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTRkNGYzNTQtMGE5NC00ZDJhLTg1NDYtMTlhNjhlZTVkNTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTkEgTdMpmDZJFi+ozePFDAW6TPXtMXYQTwj 0iTiYCFWazszFqDyPbwOfQFLx/q/1KqOuNQ+iFPM/d9e9t3wb5rKWWw+/chglm6l bb5dSLgcTRofYRG+rDI1p15iEOgrTTN2HD+GNBBqcEFcmqm6DjRJw8yd/Xni/1ZW kHw26fI14qnBDC+i0g7iwfY+HimMt6HLIVNEflPwtSvc18OFzBvRfM/DGF6hAZUH oPHkzROqdKdbeWtyGe9TnQeal7ruMQmGet6jSvoy2wNsIesvbK3ngCzw/5CImR7O 3MPePHMLs691q3CoGSyyc/qdZIdBTsBU4dmL817phHB9eC2EXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDX+KT8kfKWbhAGht8cq27yBFA8kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2VmMjY0M2YtMmVmMC0z MjQyLTkzMjAtMGFjMjJhZTc4M2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEusMUYf+oiMxgh7+qKPzbw9CGTWkG457QHzGHtaJ5NwjCT5gYT8YZXD WRqy76Ud4IjKoWlx0uXbOb5gL9OTgN728HPM5z4Ox88sJdcwx1SJQaGbbtOJBt8H kRXgCJdk6OGOQmKgukuiurveFNXOa1xPt2m8xSLB4MmXTVPyLmMozlmlh0I4VtJ7 v4sSQNGwTylNZcgyR6W+QKFbyh5AelTTz5M14jMV+6i+GhiLXqPRd3fV4v6hCwOE wY3puTXzLeaCIZkvxS6cKBjBJPMLTC+GtcMCT2oUWzefz8rC08NEeICavMfSbLmm ZQ19iPDui+G39L9hHsNBE7bW7gPuBIw= -----END CERTIFICATE-----Generated at Mon Sep 28 20:11:34 2026 by rpki-client