$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c6e160e3-34d1-3b1f-bb5b-b2f34cecf1c0.roa File: c6e160e3-34d1-3b1f-bb5b-b2f34cecf1c0.roa (raw, json) Hash identifier: Elx7tS06QtI+WGf/qbT5iTYXdAxVPF3rJzjujfp57pg= Subject key identifier: 43:7A:94:03:3E:94:9A:74:64:06:71:5F:2B:23:3A:74:E5:08:85:4E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F2ABD24BCA8BD8D290FF9E528 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c6e160e3-34d1-3b1f-bb5b-b2f34cecf1c0.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:24:bc:a8:bd:8d:29:0f:f9:e5:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=c48926f8-c02b-42fa-a9dc-b8b4d2de82df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:82:f2:22:95:4a:60:7c:3b:1c:9d:d5:2d:cd: 9d:4b:ae:d6:bf:77:73:5a:7c:2e:99:b0:6c:33:1e: 47:91:69:26:24:a1:51:9f:b0:e8:d4:5e:a8:a6:58: ff:2e:68:d0:2a:45:a7:36:14:6e:da:06:cc:e4:c0: 96:b6:6a:9e:aa:b3:74:d8:f2:82:ac:2b:b0:48:2a: 6b:a7:c1:bc:fc:c2:04:c1:b6:56:8c:d1:78:4c:f2: 16:c8:31:cf:68:19:6a:ed:59:12:06:e0:b4:26:ad: 70:e5:32:11:3e:d5:bc:96:a0:5b:cb:ea:1b:76:69: 90:d0:bc:70:48:29:c1:08:7b:4e:22:10:08:81:8e: 41:52:d8:13:87:c9:e0:48:2e:d8:99:92:03:0b:ef: 26:fe:01:8a:9c:59:1b:cd:be:c8:a6:51:e7:ea:79: d2:6a:90:09:1d:ce:e5:a4:64:50:ad:69:d3:70:db: d6:d8:d3:aa:95:de:a6:86:2b:c2:2d:2d:39:1c:e7: 52:25:b7:8b:0a:31:d7:22:ad:6e:41:7e:6b:ac:48: 50:28:05:4d:dd:fc:1f:8a:61:94:c7:4d:53:76:f8: 21:e4:37:c1:76:82:6f:5e:cf:16:b9:ba:49:da:e6: 20:c9:7f:26:1b:a8:d2:64:08:4f:69:57:bf:ae:e2: 78:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7A:94:03:3E:94:9A:74:64:06:71:5F:2B:23:3A:74:E5:08:85:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c6e160e3-34d1-3b1f-bb5b-b2f34cecf1c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:6b:0a:20:93:b3:89:45:5a:4c:10:f9:88:4d:72:36:da:6c: 41:7a:09:25:fd:5b:e4:68:bc:10:bc:2d:94:b9:02:8b:2d:81: fc:6f:ed:67:cc:cf:1e:c3:9f:75:3b:b9:26:db:a8:2c:d5:ee: 38:47:7a:97:15:11:60:67:93:51:a6:ee:61:88:de:0e:8c:95: 21:7c:4b:ad:df:c7:57:1e:c7:5a:9c:d3:7a:78:b5:81:05:a3: 04:33:d3:56:24:f3:ed:f4:7c:e8:9e:43:27:02:d4:20:b3:33: 36:1b:80:f2:70:77:50:04:b9:80:bb:6c:bc:01:8e:83:71:d9: 99:bd:12:1d:bf:ff:5f:e2:4b:38:da:92:09:29:a5:72:7f:d8: 2d:23:db:fc:d6:49:ed:d7:32:c2:5a:4b:9e:99:14:fd:b6:7e: 50:ca:a6:b9:fc:90:51:4d:41:a2:50:8e:d3:30:dd:90:0a:bf: 91:55:12:5d:1f:23:3d:21:cb:94:d2:9a:86:13:e1:9c:57:d5: d7:80:8a:13:fa:ae:26:4d:26:a0:69:72:94:bb:63:27:95:8e: 29:25:8f:3a:cc:fa:87:10:ec:09:c5:44:99:7c:14:1d:43:f4: d6:33:ed:c0:92:c1:af:19:bf:5e:41:ce:01:80:a5:46:13:8d: 4e:07:d7:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvSS8qL2NKQ/55SgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk YzQ4OTI2ZjgtYzAyYi00MmZhLWE5ZGMtYjhiNGQyZGU4MmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoLyIpVKYHw7HJ3VLc2dS67Wv3dzWnwumbBs Mx5HkWkmJKFRn7Do1F6oplj/LmjQKkWnNhRu2gbM5MCWtmqeqrN02PKCrCuwSCpr p8G8/MIEwbZWjNF4TPIWyDHPaBlq7VkSBuC0Jq1w5TIRPtW8lqBby+obdmmQ0Lxw SCnBCHtOIhAIgY5BUtgTh8ngSC7YmZIDC+8m/gGKnFkbzb7IplHn6nnSapAJHc7l pGRQrWnTcNvW2NOqld6mhivCLS05HOdSJbeLCjHXIq1uQX5rrEhQKAVN3fwfimGU x01Tdvgh5DfBdoJvXs8WubpJ2uYgyX8mG6jSZAhPaVe/ruJ4ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEN6lAM+lJp0ZAZxXysjOnTlCIVOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzZlMTYwZTMtMzRkMS0z YjFmLWJiNWItYjJmMzRjZWNmMWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNrCiCTs4lFWkwQ+YhNcjbabEF6CSX9W+RovBC8LZS5Aostgfxv7WfM zx7Dn3U7uSbbqCzV7jhHepcVEWBnk1Gm7mGI3g6MlSF8S63fx1cex1qc03p4tYEF owQz01Yk8+30fOieQycC1CCzMzYbgPJwd1AEuYC7bLwBjoNx2Zm9Eh2//1/iSzja kgkppXJ/2C0j2/zWSe3XMsJaS56ZFP22flDKprn8kFFNQaJQjtMw3ZAKv5FVEl0f Iz0hy5TSmoYT4ZxX1deAihP6riZNJqBpcpS7YyeVjikljzrM+ocQ7AnFRJl8FB1D 9NYz7cCSwa8Zv15BzgGApUYTjU4H1+0= -----END CERTIFICATE-----Generated at Mon Sep 28 21:10:51 2026 by rpki-client