$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e8355b70-b3ac-3440-a538-b39c041c2270.roa File: e8355b70-b3ac-3440-a538-b39c041c2270.roa (raw, json) Hash identifier: gHVqrPXB4GK0MdvW85rGNFc0PRwu4eEGhJtrCrCOz6E= Subject key identifier: 19:5C:8D:B9:92:4C:AF:CD:93:04:A1:9D:58:79:26:11:E0:58:23:62 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F2ABD24EB478516015F505676 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e8355b70-b3ac-3440-a538-b39c041c2270.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:24:eb:47:85:16:01:5f:50:56:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=6be6a136-d85f-4832-964a-7808f29f46b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bc:a3:ce:0b:67:74:2e:cf:fd:23:9d:59:73: 64:9a:0d:5d:97:7b:29:e8:f0:a7:df:1b:17:11:a0: 0e:48:82:f4:ef:d0:34:41:f8:28:b2:4e:6b:3b:98: 56:56:36:07:5d:6e:70:7d:89:e2:85:8d:ea:ec:63: 81:98:79:ae:ce:78:b4:e2:83:a9:2f:73:62:1b:cd: ec:67:a5:4e:d8:65:97:de:93:46:1d:46:29:7d:99: f8:dd:27:9e:56:a3:5c:f4:71:8e:7a:59:a6:2c:0c: 8a:05:96:4a:ec:02:e8:cf:0a:8e:19:0c:dd:0f:0c: ad:fe:04:20:3d:94:5c:31:54:43:3e:c6:40:55:fc: 33:9e:db:2c:e3:b1:1d:8b:df:71:9f:ec:83:fe:b4: 07:2a:24:4b:09:e4:88:c1:8a:e3:54:42:f1:04:73: 34:9c:7b:1d:ff:44:78:d4:52:11:21:9b:78:27:bb: 9d:f9:af:e8:57:17:13:32:35:16:97:6a:39:87:68: 35:a5:86:d1:60:03:d0:17:0e:4f:0e:8e:ed:a3:95: ab:35:13:0d:40:8f:d1:68:a6:da:33:44:b9:3a:ab: dd:f6:8b:44:1e:9d:52:35:00:69:8c:e7:a0:2b:ce: 5d:ea:6e:b2:3b:86:d2:cb:6a:34:67:fd:00:4c:ed: 65:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:5C:8D:B9:92:4C:AF:CD:93:04:A1:9D:58:79:26:11:E0:58:23:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e8355b70-b3ac-3440-a538-b39c041c2270.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:89:1e:ba:9c:68:a0:0e:48:63:7d:56:9b:8c:bb:35:d1:99: 9c:bd:8d:80:3d:52:24:89:ae:d9:1f:3f:34:11:7c:34:c6:d5: 92:e4:0f:55:23:0f:27:8b:14:d4:f8:ce:2e:80:b4:81:12:88: 88:e4:f8:8e:de:58:e9:63:92:ff:d1:cf:9b:d2:ce:a5:da:13: de:3b:e0:ba:c1:67:d3:d4:40:67:07:4c:65:9c:fe:6a:08:1b: ee:29:94:c5:10:38:49:cd:5a:e2:d9:3d:19:b6:0b:4e:ec:d1: ca:bb:bc:ed:6f:d5:fe:11:ad:42:c1:47:6a:d7:88:30:e1:b7: 98:36:08:4b:17:ec:87:6e:3c:09:94:e4:7d:5c:4b:c5:a0:21: 90:fe:3b:26:4d:83:d3:6b:bb:65:65:79:ec:bb:65:27:cb:86: 41:d2:65:21:5b:20:e8:be:81:40:c3:42:65:f8:dc:89:82:51: 89:1f:a7:eb:92:aa:4e:d1:46:2e:74:7f:80:93:81:68:f9:ff: 44:64:b3:e9:bc:4b:eb:ef:76:0a:53:64:0e:8b:2b:e7:ad:6b: 95:a4:dc:7b:d7:8f:64:cf:69:33:c9:91:c7:ce:02:01:42:fa: 35:9f:4c:6d:a9:c6:73:99:b3:44:37:af:75:f4:bd:a1:7a:67: 3d:b7:67:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvSTrR4UWAV9QVnYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk NmJlNmExMzYtZDg1Zi00ODMyLTk2NGEtNzgwOGYyOWY0NmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7yjzgtndC7P/SOdWXNkmg1dl3sp6PCn3xsX EaAOSIL079A0Qfgosk5rO5hWVjYHXW5wfYnihY3q7GOBmHmuzni04oOpL3NiG83s Z6VO2GWX3pNGHUYpfZn43SeeVqNc9HGOelmmLAyKBZZK7ALozwqOGQzdDwyt/gQg PZRcMVRDPsZAVfwzntss47Edi99xn+yD/rQHKiRLCeSIwYrjVELxBHM0nHsd/0R4 1FIRIZt4J7ud+a/oVxcTMjUWl2o5h2g1pYbRYAPQFw5PDo7to5WrNRMNQI/RaKba M0S5Oqvd9otEHp1SNQBpjOegK85d6m6yO4bSy2o0Z/0ATO1lvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlcjbmSTK/NkwShnVh5JhHgWCNiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTgzNTViNzAtYjNhYy0z NDQwLWE1MzgtYjM5YzA0MWMyMjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCHeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACJHrqcaKAOSGN9VpuMuzXRmZy9jYA9UiSJrtkfPzQRfDTG1ZLkD1Uj DyeLFNT4zi6AtIESiIjk+I7eWOljkv/Rz5vSzqXaE9474LrBZ9PUQGcHTGWc/moI G+4plMUQOEnNWuLZPRm2C07s0cq7vO1v1f4RrULBR2rXiDDht5g2CEsX7IduPAmU 5H1cS8WgIZD+OyZNg9Nru2Vleey7ZSfLhkHSZSFbIOi+gUDDQmX43ImCUYkfp+uS qk7RRi50f4CTgWj5/0Rks+m8S+vvdgpTZA6LK+eta5Wk3HvXj2TPaTPJkcfOAgFC +jWfTG2pxnOZs0Q3r3X0vaF6Zz23Z50= -----END CERTIFICATE-----Generated at Thu Oct 8 16:12:19 2026 by rpki-client