$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b500f9ea-1f0a-3934-963e-3f57b3b70047.roa File: b500f9ea-1f0a-3934-963e-3f57b3b70047.roa (raw, json) Hash identifier: 0ycACblFdNG8o4VGfgajVcYq31DdVBgh22gVEov07PA= Subject key identifier: 1B:DF:77:28:90:13:5F:E1:9F:FD:29:84:E8:3F:82:28:21:70:F4:0D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F5E62C93F65474E8ADBD2AF80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b500f9ea-1f0a-3934-963e-3f57b3b70047.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 8069 IP address blocks: 20.33.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:c9:3f:65:47:4e:8a:db:d2:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=6adade31-e7cc-4c19-9ed9-65eb8d9a46fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:72:c3:eb:84:e0:89:61:00:0f:c0:4c:a7:f5: 30:85:70:39:64:35:dc:cd:58:7f:73:62:b5:16:20: 03:51:3b:a7:c8:58:8c:31:58:94:54:d9:95:13:e2: 3b:3e:31:fc:8d:03:63:0e:12:7b:0b:2a:d3:cb:d9: 3c:12:d2:b2:5f:3a:30:1d:b2:f3:07:f9:50:c6:18: 12:7b:c5:ae:7b:99:13:5c:be:ab:f8:bf:34:fa:00: 38:1a:d7:2b:6a:9e:e3:cf:0c:c1:57:11:8c:9d:3d: 12:e3:5b:96:d8:f0:cb:13:dd:fb:07:d4:f9:92:00: 51:17:f0:10:cb:4b:71:8e:09:1f:a0:ae:cd:8a:a8: a6:d8:f4:07:58:82:26:a5:7c:7c:d0:da:2f:2c:57: 6f:5e:b2:66:ad:e9:df:24:51:54:14:c6:86:9b:00: d9:d2:38:3a:b3:c1:4d:62:bd:4c:c9:03:78:2e:62: f2:2f:fc:0a:15:22:17:f1:52:5e:99:02:4c:0f:d8: 88:78:38:a0:08:0a:9b:10:19:54:68:7d:40:a4:9c: 51:35:19:08:e7:96:bb:58:d3:ed:5d:1c:8a:03:32: 8d:0e:7a:bf:e8:a7:db:39:8a:26:26:b7:6b:e4:b3: 30:95:28:4c:52:1a:72:dc:f7:51:4c:53:f5:c1:d6: ac:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:DF:77:28:90:13:5F:E1:9F:FD:29:84:E8:3F:82:28:21:70:F4:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b500f9ea-1f0a-3934-963e-3f57b3b70047.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:fa:97:c9:02:2d:8d:4e:5c:05:11:06:3a:c5:61:b3:b0:9f: 4a:14:9d:a1:53:7d:cb:14:58:d1:43:85:d9:c8:7a:1b:ba:99: e2:4d:02:38:fd:84:dc:48:74:28:9e:ce:a8:ba:80:fa:5e:f2: 63:96:d5:07:8b:e3:4a:80:81:0d:73:27:24:c9:87:cc:d9:c3: 15:9f:e9:9f:46:56:ec:80:b3:56:e0:e3:61:04:ec:76:43:b8: 2c:d9:87:10:28:fd:27:d0:f5:e3:55:88:a8:db:19:4f:47:82: e2:4a:42:2a:80:9b:e7:ca:8a:7a:1f:26:4d:69:90:d8:08:50: 7e:37:af:ea:8e:ea:79:f4:88:e3:93:fd:7a:9c:ab:26:2e:ea: 20:c3:70:ee:97:65:05:1c:a9:04:ce:1b:73:e1:8c:3e:48:75: 41:f6:90:4c:c7:13:36:1e:13:b8:64:47:21:fc:44:20:a4:7b: 85:7b:25:b8:95:19:91:80:45:63:51:d7:7b:f0:47:e9:1d:44: 10:2b:8e:24:0a:0a:96:4e:28:92:4e:c9:64:e4:47:5c:9f:60: 01:d6:d1:19:8a:ae:86:00:3f:ef:42:ca:ba:97:18:9f:40:67: 65:b7:c8:97:32:fa:7d:3b:9f:3a:2e:0a:25:33:4c:c3:ae:a1: f5:c8:33:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYsk/ZUdOitvSr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk NmFkYWRlMzEtZTdjYy00YzE5LTllZDktNjVlYjhkOWE0NmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3LD64TgiWEAD8BMp/UwhXA5ZDXczVh/c2K1 FiADUTunyFiMMViUVNmVE+I7PjH8jQNjDhJ7CyrTy9k8EtKyXzowHbLzB/lQxhgS e8Wue5kTXL6r+L80+gA4Gtcrap7jzwzBVxGMnT0S41uW2PDLE937B9T5kgBRF/AQ y0txjgkfoK7Niqim2PQHWIImpXx80NovLFdvXrJmrenfJFFUFMaGmwDZ0jg6s8FN Yr1MyQN4LmLyL/wKFSIX8VJemQJMD9iIeDigCAqbEBlUaH1ApJxRNRkI55a7WNPt XRyKAzKNDnq/6KfbOYomJrdr5LMwlShMUhpy3PdRTFP1wdaskwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvfdyiQE1/hn/0phOg/gighcPQNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjUwMGY5ZWEtMWYwYS0z OTM0LTk2M2UtM2Y1N2IzYjcwMDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCERMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEj6l8kCLY1OXAURBjrFYbOwn0oUnaFTfcsUWNFDhdnIehu6meJNAjj9 hNxIdCiezqi6gPpe8mOW1QeL40qAgQ1zJyTJh8zZwxWf6Z9GVuyAs1bg42EE7HZD uCzZhxAo/SfQ9eNViKjbGU9HguJKQiqAm+fKinofJk1pkNgIUH43r+qO6nn0iOOT /XqcqyYu6iDDcO6XZQUcqQTOG3PhjD5IdUH2kEzHEzYeE7hkRyH8RCCke4V7JbiV GZGARWNR13vwR+kdRBArjiQKCpZOKJJOyWTkR1yfYAHW0RmKroYAP+9CyrqXGJ9A Z2W3yJcy+n07nzouCiUzTMOuofXIM10= -----END CERTIFICATE-----Generated at Sat Oct 3 21:15:04 2026 by rpki-client