$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/33f05718-5754-32b3-9d3f-e96f5e5fccd4.roa File: 33f05718-5754-32b3-9d3f-e96f5e5fccd4.roa (raw, json) Hash identifier: STanSl2FgSmhsnDA8tbyNN4qXTwxogFGxjZgLNgXfaw= Subject key identifier: 2B:E3:92:0A:A2:59:E5:FE:86:43:50:E8:11:BB:F8:64:65:97:3B:B5 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F89A88854BCDD1250BFC73E00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/33f05718-5754-32b3-9d3f-e96f5e5fccd4.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 8069 IP address blocks: 20.153.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:88:54:bc:dd:12:50:bf:c7:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=2a2897aa-b084-4040-afdc-a39a2b0a5235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:94:b5:de:e0:61:80:47:64:10:dc:bd:49:07: 6b:1e:8f:3a:7f:75:5f:97:c2:b1:2d:ac:b3:39:7b: f8:ab:bb:3d:91:5c:68:a7:e2:5d:4f:de:03:d2:b4: 64:3a:28:64:af:c7:0c:8c:71:59:24:9b:24:5d:88: 61:19:18:3a:c6:9c:a1:a1:60:1d:c4:35:81:b2:06: 69:de:12:b8:4c:33:ee:24:7b:1c:25:d0:82:f3:71: cf:b1:66:30:61:dd:b0:2a:5f:65:e1:da:c8:66:0a: a1:fd:9e:4c:a5:c7:93:d2:cc:c6:25:ce:79:e9:cf: e0:3c:6c:8c:d0:46:dd:0f:77:a6:97:70:71:dc:fe: 5a:6e:bc:99:88:22:bc:87:ee:af:78:84:fe:89:1d: 43:b1:a5:67:7d:cd:82:54:99:19:6a:fd:1f:58:0b: cd:ad:6c:08:63:2a:66:19:5c:f2:40:c2:5a:b0:5b: 44:80:37:b7:72:61:82:cb:e3:32:0a:57:1b:33:fa: c9:4a:4f:bc:cf:6e:82:51:83:3b:01:bb:bd:84:01: 95:69:19:c4:f7:c5:ee:5f:85:ad:73:b7:bd:68:59: 22:31:c5:4f:1f:da:2d:bb:d6:7f:79:f0:9d:cf:c5: 8f:53:b1:94:90:66:d6:5a:b9:8a:fb:b4:14:66:34: ac:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E3:92:0A:A2:59:E5:FE:86:43:50:E8:11:BB:F8:64:65:97:3B:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/33f05718-5754-32b3-9d3f-e96f5e5fccd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:8d:68:a1:9f:15:92:64:43:a3:28:d3:53:22:f7:51:be:b6: a0:9a:0e:17:38:63:89:12:5a:7a:96:6d:f0:1f:55:b0:3c:09: 9e:6d:47:24:77:31:7c:df:5a:68:8e:5e:c2:f2:40:ff:28:97: 2a:20:36:d0:f4:e4:0c:c4:cc:b2:4d:09:29:29:69:ac:c5:fc: 8d:0b:d3:ad:90:dd:64:78:87:87:a3:35:2c:8e:9f:2a:1e:e1: 3a:c9:b5:9d:5a:dc:19:bd:fd:ea:77:c1:f9:57:69:a0:d3:22: 03:9c:61:6f:f2:0f:72:20:37:76:ea:cb:01:fd:b0:f8:1f:98: 36:1b:b8:4f:ea:ef:f4:fd:dc:fb:4f:f8:dc:0d:52:cb:83:9a: da:96:78:85:82:6b:fb:35:63:b0:bd:64:85:02:90:04:ac:59: 56:59:11:55:0d:cb:e4:f4:3f:5f:93:f8:fe:a2:ea:cc:fe:19: 3d:e7:b6:43:47:ce:a4:8c:2e:ce:e0:22:80:d3:ed:87:3b:35: 9d:87:8e:f8:2e:df:7a:6c:f2:ab:41:c3:f3:a5:c1:94:12:c0: d1:4d:63:7e:da:50:b5:49:39:8a:a6:b5:80:13:15:d0:2f:5a: 84:ee:1e:1a:50:cc:ac:df:a3:69:4e:bd:1d:c5:3f:8a:6a:21: 1c:44:62:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqIhUvN0SUL/HPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk MmEyODk3YWEtYjA4NC00MDQwLWFmZGMtYTM5YTJiMGE1MjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipS13uBhgEdkENy9SQdrHo86f3Vfl8KxLayz OXv4q7s9kVxop+JdT94D0rRkOihkr8cMjHFZJJskXYhhGRg6xpyhoWAdxDWBsgZp 3hK4TDPuJHscJdCC83HPsWYwYd2wKl9l4drIZgqh/Z5MpceT0szGJc556c/gPGyM 0EbdD3eml3Bx3P5abryZiCK8h+6veIT+iR1DsaVnfc2CVJkZav0fWAvNrWwIYypm GVzyQMJasFtEgDe3cmGCy+MyClcbM/rJSk+8z26CUYM7Abu9hAGVaRnE98XuX4Wt c7e9aFkiMcVPH9otu9Z/efCdz8WPU7GUkGbWWrmK+7QUZjSsMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvjkgqiWeX+hkNQ6BG7+GRllzu1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzNmMDU3MTgtNTc1NC0z MmIzLTlkM2YtZTk2ZjVlNWZjY2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJnIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6NaKGfFZJkQ6Mo01Mi91G+tqCaDhc4Y4kSWnqWbfAfVbA8CZ5tRyR3 MXzfWmiOXsLyQP8olyogNtD05AzEzLJNCSkpaazF/I0L062Q3WR4h4ejNSyOnyoe 4TrJtZ1a3Bm9/ep3wflXaaDTIgOcYW/yD3IgN3bqywH9sPgfmDYbuE/q7/T93PtP +NwNUsuDmtqWeIWCa/s1Y7C9ZIUCkASsWVZZEVUNy+T0P1+T+P6i6sz+GT3ntkNH zqSMLs7gIoDT7Yc7NZ2Hjvgu33ps8qtBw/OlwZQSwNFNY37aULVJOYqmtYATFdAv WoTuHhpQzKzfo2lOvR3FP4pqIRxEYhY= -----END CERTIFICATE-----Generated at Sun Oct 25 14:36:51 2026 by rpki-client