$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f0058f51-71cc-3456-babb-8278aa6adf3e.roa File: f0058f51-71cc-3456-babb-8278aa6adf3e.roa (raw, json) Hash identifier: NfXTZQ6094mVVfd6mF9lef2mTK2TKTVuL8MNUqMtttM= Subject key identifier: 8B:F6:AC:B9:12:7C:E9:58:46:BC:80:2C:B7:C9:D5:B4:2A:7C:1D:E0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F1E2CFC71EC57D649FE544900 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f0058f51-71cc-3456-babb-8278aa6adf3e.roa Signing time: Wed 09 Sep 2026 13:00:11 +0000 ROA not before: Wed 09 Sep 2026 13:00:11 +0000 ROA not after: Tue 08 Dec 2026 14:00:11 +0000 asID: 8069 IP address blocks: 20.33.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:2c:fc:71:ec:57:d6:49:fe:54:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 9 13:00:11 2026 GMT Not After : Dec 8 14:00:11 2026 GMT Subject: CN=271a8922-92e6-45f4-8bd8-a2e73261299c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c8:4d:4e:00:47:a7:34:ce:03:a9:4c:f2:d3: 62:3c:6a:c5:06:9d:1f:b4:49:7f:8f:ba:f6:9c:f8: 40:22:d0:79:55:bd:a0:7d:57:23:55:26:a9:cb:22: d1:c1:c9:a2:81:33:1f:8e:8f:47:ad:e7:4c:1e:07: 1d:4d:f8:4d:b6:90:90:4d:10:db:94:81:2e:d0:cf: b0:ca:7c:c7:a3:09:3d:06:62:28:09:ec:74:a7:0e: f7:8e:92:7a:44:c1:8e:21:6b:f6:af:04:d1:a1:c5: 3b:e4:22:fa:f0:39:cf:6a:0d:d5:f5:fd:7c:6a:79: a1:ca:bf:86:1e:ab:48:c3:7d:c2:39:2f:a6:86:d9: 48:95:6c:ef:5a:90:5f:1a:6b:14:4c:33:ba:d4:93: c8:ab:4f:ad:6e:79:73:bf:0b:50:e2:ab:5e:65:aa: c2:45:5b:bf:2d:70:62:9a:ed:c4:b6:8d:a4:8e:45: 3c:55:c8:b8:14:7b:13:f9:6e:6d:c6:0e:e5:c1:34: 4d:a6:08:d6:90:ed:d3:ac:ee:e0:9f:47:72:e7:27: c3:27:9e:6d:c9:67:4f:30:2e:6a:c9:2a:36:a6:bd: 9a:f6:43:3d:b0:db:d5:b2:ec:be:48:41:24:31:b4: 46:ff:d6:2f:6b:79:de:d5:29:16:a2:cb:b9:26:fa: ea:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F6:AC:B9:12:7C:E9:58:46:BC:80:2C:B7:C9:D5:B4:2A:7C:1D:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f0058f51-71cc-3456-babb-8278aa6adf3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:db:9a:85:76:91:79:47:4d:ec:2c:80:ee:81:12:fd:08:06: 54:25:05:9a:26:5f:3a:1e:27:2c:bf:5d:2e:d1:e7:45:f9:b6: d6:04:89:ca:c0:b8:f3:68:3d:80:44:47:4d:b4:da:c5:61:66: 78:c8:24:9c:78:00:7c:d1:84:27:1b:3a:05:5a:4a:96:11:64: 38:80:89:c5:a4:55:ba:75:22:bc:d3:09:ea:62:4d:02:ff:0a: 98:1e:31:1b:69:49:e5:71:17:2c:c0:0e:59:92:82:73:f1:0f: 90:ba:da:e1:85:3a:39:bd:3a:d3:af:34:58:b1:f6:ef:53:14: cf:ee:56:3f:26:68:95:df:c5:15:ca:12:5d:fa:e7:28:ed:28: 5b:84:39:81:ee:b0:20:dd:96:88:6f:0c:f3:ca:3b:28:6f:b7: d1:87:5a:cc:49:b2:a7:cb:9b:8f:78:ae:ec:1e:8c:6c:eb:d3: 3d:07:fd:44:80:37:97:26:18:1a:75:5d:b7:83:23:85:d2:fb: 00:ad:61:fb:1d:9a:e7:7e:73:55:1b:e8:57:99:f5:ff:6c:7e: 2d:00:18:21:bd:bd:cd:ea:87:60:df:58:ed:a8:ce:7e:34:13: d1:82:a8:fa:03:3f:a3:0b:5e:8b:27:36:57:df:fc:b0:55:a9: 56:08:2a:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eLPxx7FfWSf5USQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk MjcxYTg5MjItOTJlNi00NWY0LThiZDgtYTJlNzMyNjEyOTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8hNTgBHpzTOA6lM8tNiPGrFBp0ftEl/j7r2 nPhAItB5Vb2gfVcjVSapyyLRwcmigTMfjo9HredMHgcdTfhNtpCQTRDblIEu0M+w ynzHowk9BmIoCex0pw73jpJ6RMGOIWv2rwTRocU75CL68DnPag3V9f18anmhyr+G HqtIw33COS+mhtlIlWzvWpBfGmsUTDO61JPIq0+tbnlzvwtQ4qteZarCRVu/LXBi mu3Eto2kjkU8Vci4FHsT+W5txg7lwTRNpgjWkO3TrO7gn0dy5yfDJ55tyWdPMC5q ySo2pr2a9kM9sNvVsuy+SEEkMbRG/9Yva3ne1SkWosu5JvrqSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIv2rLkSfOlYRryALLfJ1bQqfB3gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjAwNThmNTEtNzFjYy0z NDU2LWJhYmItODI3OGFhNmFkZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPbmoV2kXlHTewsgO6BEv0IBlQlBZomXzoeJyy/XS7R50X5ttYEicrA uPNoPYBER0202sVhZnjIJJx4AHzRhCcbOgVaSpYRZDiAicWkVbp1IrzTCepiTQL/ CpgeMRtpSeVxFyzADlmSgnPxD5C62uGFOjm9OtOvNFix9u9TFM/uVj8maJXfxRXK El365yjtKFuEOYHusCDdlohvDPPKOyhvt9GHWsxJsqfLm494ruwejGzr0z0H/USA N5cmGBp1XbeDI4XS+wCtYfsdmud+c1Ub6FeZ9f9sfi0AGCG9vc3qh2DfWO2ozn40 E9GCqPoDP6MLXosnNlff/LBVqVYIKvs= -----END CERTIFICATE-----Generated at Mon Sep 28 21:15:56 2026 by rpki-client