$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e569e8-37ad-3469-895e-315f10771e8c.roa File: f5e569e8-37ad-3469-895e-315f10771e8c.roa (raw, json) Hash identifier: UKE5zCxAsuBpYWiPudKCbMXvVh4rciw4uF7SjSABXKc= Subject key identifier: EC:E7:C8:5D:EA:F2:2E:67:C3:4E:77:79:0C:92:C0:64:2C:6F:70:67 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F497AA4472F6D2765DD24D0C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e569e8-37ad-3469-895e-315f10771e8c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:a4:47:2f:6d:27:65:dd:24:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=389778c2-6222-40ef-a433-854afa17f097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:de:a7:b8:7f:ef:0c:a0:01:32:18:95:d4:ac: 48:3d:06:31:0e:90:1e:56:5b:67:5a:65:ec:58:65: f9:80:bd:ed:69:2c:b2:c8:1c:0a:38:52:ec:ab:4f: 54:19:a0:54:cc:30:b4:04:16:dd:93:cf:1a:8f:d3: 45:78:66:89:a9:da:38:de:f0:e9:12:3c:0b:9a:dc: a6:dd:33:1f:7d:be:30:ce:91:3a:2a:d8:92:76:47: 8d:6a:af:66:25:85:6f:77:88:c0:66:82:4b:d5:10: 78:e0:cc:03:57:54:66:60:36:c4:5c:10:74:3f:58: 77:d9:a1:8a:17:a6:ab:18:4f:6c:60:0a:b2:c0:43: bc:26:3f:7f:56:f5:c8:5d:0a:92:98:44:f2:e9:ac: 6e:59:da:35:c0:3c:41:65:c4:ca:bf:9e:a6:1a:64: 3d:8e:aa:f6:86:fd:ab:db:5f:6a:26:26:6a:f9:5e: f3:d1:65:b8:c1:0b:3c:c5:05:ec:b8:07:45:01:0e: da:3b:46:c2:60:05:2c:ac:42:58:84:a5:6e:c8:9f: 5f:bf:e6:b8:61:f9:0c:ec:3e:01:ee:98:fe:4c:f9: 73:03:b5:7e:70:99:eb:ac:4c:1d:70:5f:e1:f5:7a: a4:bc:25:b5:48:04:e5:fd:4d:e5:68:d7:83:44:1e: d3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E7:C8:5D:EA:F2:2E:67:C3:4E:77:79:0C:92:C0:64:2C:6F:70:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e569e8-37ad-3469-895e-315f10771e8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:8f:e4:60:0d:31:23:99:d6:e2:b4:84:8e:2d:73:96:7f:46: 55:70:8a:72:83:dc:ce:d6:ae:3d:f4:31:3f:74:65:1b:cc:52: 16:9f:0b:58:22:5a:f6:90:72:1c:42:43:ed:0b:9a:57:b5:7c: 51:2b:19:c6:41:c5:d1:36:c3:5c:04:76:1a:f4:4e:ab:d7:97: 49:35:e2:34:52:7f:7d:0b:aa:db:c9:c0:b0:fd:a5:53:b3:7f: 74:d8:2e:23:81:bc:9e:64:3e:7d:ca:a9:e9:97:a1:4b:04:36: 0b:6b:bc:9f:cf:1f:74:9f:13:56:ae:94:fd:0a:e3:b6:ef:07: 1e:44:89:32:cb:40:97:99:b5:a4:aa:a6:b9:bc:4d:19:76:c2: c9:55:fe:51:a8:da:85:67:17:89:c0:0e:3e:7c:3e:e5:8b:23: c3:c9:15:20:e4:26:14:74:4c:6c:7a:8a:c7:95:e4:3f:01:fb: 3c:34:a0:f4:16:61:35:86:66:ed:3d:1a:20:7e:10:b6:f5:fe: ac:8f:d1:06:38:67:65:c5:15:a9:99:0a:ec:aa:a7:64:45:46: c1:f9:3d:93:25:b1:f7:6c:12:4e:01:53:dc:a6:a5:02:e7:5f: 4c:06:b9:e9:b0:cf:0d:a2:de:35:45:87:91:f0:09:6e:00:52: c8:5a:01:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeqRHL20nZd0k0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Mzg5Nzc4YzItNjIyMi00MGVmLWE0MzMtODU0YWZhMTdmMDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt6nuH/vDKABMhiV1KxIPQYxDpAeVltnWmXs WGX5gL3taSyyyBwKOFLsq09UGaBUzDC0BBbdk88aj9NFeGaJqdo43vDpEjwLmtym 3TMffb4wzpE6KtiSdkeNaq9mJYVvd4jAZoJL1RB44MwDV1RmYDbEXBB0P1h32aGK F6arGE9sYAqywEO8Jj9/VvXIXQqSmETy6axuWdo1wDxBZcTKv56mGmQ9jqr2hv2r 219qJiZq+V7z0WW4wQs8xQXsuAdFAQ7aO0bCYAUsrEJYhKVuyJ9fv+a4YfkM7D4B 7pj+TPlzA7V+cJnrrEwdcF/h9XqkvCW1SATl/U3laNeDRB7TnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOznyF3q8i5nw053eQySwGQsb3BnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjVlNTY5ZTgtMzdhZC0z NDY5LTg5NWUtMzE1ZjEwNzcxZThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+P5GANMSOZ1uK0hI4tc5Z/RlVwinKD3M7Wrj30MT90ZRvMUhafC1gi WvaQchxCQ+0Lmle1fFErGcZBxdE2w1wEdhr0TqvXl0k14jRSf30LqtvJwLD9pVOz f3TYLiOBvJ5kPn3KqemXoUsENgtrvJ/PH3SfE1aulP0K47bvBx5EiTLLQJeZtaSq prm8TRl2wslV/lGo2oVnF4nADj58PuWLI8PJFSDkJhR0TGx6iseV5D8B+zw0oPQW YTWGZu09GiB+ELb1/qyP0QY4Z2XFFamZCuyqp2RFRsH5PZMlsfdsEk4BU9ympQLn X0wGuemwzw2i3jVFh5HwCW4AUshaAZ0= -----END CERTIFICATE-----Generated at Sat Oct 10 15:46:39 2026 by rpki-client