$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5372288-b2a4-3d59-81bc-41226acf8120.roa File: b5372288-b2a4-3d59-81bc-41226acf8120.roa (raw, json) Hash identifier: xHomqZfJebfaARKGYs+TbtADgLqVeo8DxloYMolEaB8= Subject key identifier: 50:FB:F9:35:0F:F2:DD:03:63:48:83:89:FF:E4:52:63:FB:FF:3E:2C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F5E62C91967D21CE1D0E9A320 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5372288-b2a4-3d59-81bc-41226acf8120.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 8069 IP address blocks: 20.33.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:c9:19:67:d2:1c:e1:d0:e9:a3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=3834322f-39ac-4b90-9f29-bf369e48413a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6d:ca:16:d6:46:29:9e:aa:e9:db:4e:59:22: de:1e:ca:a1:ed:fa:a3:07:45:97:cf:b7:2e:6e:38: cd:f6:a0:4c:8a:4a:6f:57:f7:01:49:68:b3:16:a3: 4e:cc:c1:48:dd:a1:70:aa:20:55:d1:2c:a0:8d:de: 0a:a7:f7:31:47:5c:20:fe:2b:73:27:47:13:c0:a6: 8d:9e:ec:2c:7d:6c:d6:42:17:84:6b:72:b5:68:db: 85:9d:ae:93:33:9d:a5:bd:ac:d7:5a:85:8e:ae:70: 4f:62:26:f5:a3:b6:5d:bc:9e:4b:7b:af:87:10:a9: 8b:40:64:7e:60:7e:aa:c0:16:07:7d:76:e7:f6:82: 6b:d3:5b:4f:cf:90:dd:18:4a:2f:9e:2b:7d:c5:26: 97:ff:69:0a:11:67:d5:db:ab:82:6c:95:d8:d4:f1: 5b:ac:9f:61:2a:ea:83:57:b4:ab:7e:28:8d:a8:90: 99:dc:15:3b:a3:46:56:f1:c4:ca:37:80:04:f7:cb: cd:e5:17:86:56:a0:c7:16:2f:56:b9:5f:29:d5:c6: ad:c3:bb:2d:58:1c:7f:31:52:af:e5:cd:f3:46:34: e5:4c:03:cb:60:aa:e7:6c:fa:34:06:91:ed:4a:a2: 4f:53:92:5d:bb:9a:ad:7b:d8:df:44:2a:4a:9c:5d: b0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:FB:F9:35:0F:F2:DD:03:63:48:83:89:FF:E4:52:63:FB:FF:3E:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5372288-b2a4-3d59-81bc-41226acf8120.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:b2:a4:a5:75:5f:35:77:be:2a:b6:a3:3e:55:73:6d:44:ac: d7:6c:93:2c:14:51:6f:40:f0:14:41:11:68:13:f1:46:45:c0: c9:50:45:02:ae:df:54:c7:1c:c6:d6:c0:45:73:3d:41:8c:72: da:b4:44:8d:b6:f9:3c:cb:a3:4e:48:19:01:13:d6:8e:36:fb: 66:bc:c6:58:71:a8:4e:a1:12:15:97:15:e1:c5:95:cb:f0:5a: 2a:87:82:ac:d8:0e:61:9e:55:3d:23:6a:5d:15:86:bf:3c:ba: 54:bc:db:c7:39:35:1c:62:d9:74:da:f5:e8:bd:e8:00:8f:11: ed:7e:71:e3:2a:50:2c:2f:b3:23:b9:bf:4b:60:fb:b5:76:9a: 60:79:81:b6:f6:67:00:d8:c2:bb:f6:a1:e6:2b:fd:50:2f:bb: aa:b9:65:a7:cf:04:67:f3:b2:e3:90:07:f6:b8:53:cb:58:e3: 28:b3:ae:93:80:c0:7e:c3:18:e2:bc:6e:42:7a:19:e3:08:c1: 9b:01:ba:cb:93:6e:e8:95:2b:00:5b:ef:b2:b5:75:1f:31:27: b0:7b:45:f5:40:0d:f7:45:cc:77:b7:b4:12:bc:1e:55:ba:d4: c1:a4:72:65:3a:9f:88:48:77:c4:c4:d9:a1:0b:f5:6f:a5:ae: 84:43:53:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYskZZ9Ic4dDpoyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk MzgzNDMyMmYtMzlhYy00YjkwLTlmMjktYmYzNjllNDg0MTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg23KFtZGKZ6q6dtOWSLeHsqh7fqjB0WXz7cu bjjN9qBMikpvV/cBSWizFqNOzMFI3aFwqiBV0Sygjd4Kp/cxR1wg/itzJ0cTwKaN nuwsfWzWQheEa3K1aNuFna6TM52lvazXWoWOrnBPYib1o7ZdvJ5Le6+HEKmLQGR+ YH6qwBYHfXbn9oJr01tPz5DdGEovnit9xSaX/2kKEWfV26uCbJXY1PFbrJ9hKuqD V7SrfiiNqJCZ3BU7o0ZW8cTKN4AE98vN5ReGVqDHFi9WuV8p1catw7stWBx/MVKv 5c3zRjTlTAPLYKrnbPo0BpHtSqJPU5Jdu5qte9jfRCpKnF2w2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFD7+TUP8t0DY0iDif/kUmP7/z4sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjUzNzIyODgtYjJhNC0z ZDU5LTgxYmMtNDEyMjZhY2Y4MTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaypKV1XzV3viq2oz5Vc21ErNdskywUUW9A8BRBEWgT8UZFwMlQRQKu 31THHMbWwEVzPUGMctq0RI22+TzLo05IGQET1o42+2a8xlhxqE6hEhWXFeHFlcvw WiqHgqzYDmGeVT0jal0Vhr88ulS828c5NRxi2XTa9ei96ACPEe1+ceMqUCwvsyO5 v0tg+7V2mmB5gbb2ZwDYwrv2oeYr/VAvu6q5ZafPBGfzsuOQB/a4U8tY4yizrpOA wH7DGOK8bkJ6GeMIwZsBusuTbuiVKwBb77K1dR8xJ7B7RfVADfdFzHe3tBK8HlW6 1MGkcmU6n4hId8TE2aEL9W+lroRDU9I= -----END CERTIFICATE-----Generated at Sat Oct 3 11:09:52 2026 by rpki-client