$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34bf3447-2505-34e1-be37-4e4a4628389b.roa File: 34bf3447-2505-34e1-be37-4e4a4628389b.roa (raw, json) Hash identifier: 1+f0iw/hxLESnLceCybURwCt4/jTcTuRgLvSZGoUb44= Subject key identifier: 2C:34:60:DF:D4:A8:64:37:79:7C:4A:AD:BA:FD:5F:E2:6C:89:86:ED Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F778326D08CF774C00F7FA300 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34bf3447-2505-34e1-be37-4e4a4628389b.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:26:d0:8c:f7:74:c0:0f:7f:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=bb7033dc-20d1-4c94-9118-3c4de8694471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bb:1d:a3:a6:00:74:96:e7:f3:94:24:8f:ce: c7:50:9d:fd:b2:48:ac:9e:70:36:a9:f2:7f:b4:f3: c7:1c:e1:fd:81:fb:70:95:4c:4b:e8:65:42:5a:04: 8c:80:96:3e:36:bc:dc:46:98:a7:56:76:b1:9b:51: 9a:26:3a:79:98:45:4c:a2:c7:ea:74:5b:5a:af:6d: eb:66:a9:44:ed:0c:b9:73:4a:b3:45:53:ec:f2:a2: 1c:3d:9a:ff:19:ba:28:2a:c1:ed:98:bf:c5:c1:3c: db:0a:28:11:72:03:03:c0:5a:2d:f0:14:a4:aa:0b: 7f:af:9f:1e:1d:17:c5:5f:27:8c:64:bc:83:cc:6d: e9:ed:f9:95:f8:e7:fb:6e:9d:b8:2c:84:55:7e:67: f7:0a:bb:99:c2:55:82:26:24:ce:07:6f:3f:5d:db: f4:ed:39:8d:7f:4d:44:08:6a:29:fc:e7:c6:18:02: c8:8d:e3:0a:1e:0d:f1:bc:35:e9:8b:00:26:e1:75: 49:ef:77:4a:fe:94:2f:b8:ae:4c:ec:28:35:a3:fe: c0:7d:b4:9a:2a:5d:ca:b4:36:02:1f:d7:45:c5:67: be:ca:92:82:06:00:38:dc:6c:07:45:de:61:1a:ec: b9:03:2b:af:7b:f3:f0:fd:38:8a:55:fa:eb:87:1e: 8a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:34:60:DF:D4:A8:64:37:79:7C:4A:AD:BA:FD:5F:E2:6C:89:86:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34bf3447-2505-34e1-be37-4e4a4628389b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:77:0b:2e:f3:28:f3:a0:f8:9f:ef:3e:f3:24:04:95:0a:03: b0:6f:9a:30:d7:e2:30:b5:3f:17:74:22:b9:05:cd:c5:bf:e5: 64:20:ac:d3:43:d8:c1:9b:2d:55:6d:d1:cf:c6:6f:3e:a0:dc: 9f:a7:41:a3:8a:6b:8b:fd:48:f2:13:21:da:14:de:45:b4:8d: 74:c7:db:59:5a:76:01:91:73:77:af:77:05:a4:e1:89:68:77: 07:67:05:0d:05:e8:a7:56:2f:be:f2:05:e4:24:4a:d6:fc:58: 22:c0:c2:e1:80:2e:74:93:50:a2:89:4b:4b:06:8e:f0:32:18: d1:0b:66:a1:26:52:b3:0a:25:b9:a1:0b:93:3f:08:28:0d:24: 10:de:18:ad:ad:18:b4:c7:03:ee:84:9e:82:84:e6:28:1a:c2: 65:68:d9:43:4e:f7:48:87:7d:c1:42:57:44:39:5e:df:b7:29: de:9c:9b:a4:c3:aa:dd:a1:77:2d:b2:95:75:93:d5:d4:88:89: 3b:c5:5d:fb:1d:50:df:ce:1a:97:3f:f6:f9:a0:8a:e9:9c:5c: 1e:f7:57:ff:92:b1:ff:5c:57:58:ec:4b:8e:36:3b:98:be:b7: 64:a7:9b:31:b1:dc:a5:78:2e:0a:38:e6:5c:bb:2f:ba:5a:2b: 1c:a3:48:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gybQjPd0wA9/owAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk YmI3MDMzZGMtMjBkMS00Yzk0LTkxMTgtM2M0ZGU4Njk0NDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLsdo6YAdJbn85Qkj87HUJ39skisnnA2qfJ/ tPPHHOH9gftwlUxL6GVCWgSMgJY+NrzcRpinVnaxm1GaJjp5mEVMosfqdFtar23r ZqlE7Qy5c0qzRVPs8qIcPZr/GbooKsHtmL/FwTzbCigRcgMDwFot8BSkqgt/r58e HRfFXyeMZLyDzG3p7fmV+Of7bp24LIRVfmf3CruZwlWCJiTOB28/Xdv07TmNf01E CGop/OfGGALIjeMKHg3xvDXpiwAm4XVJ73dK/pQvuK5M7Cg1o/7AfbSaKl3KtDYC H9dFxWe+ypKCBgA43GwHRd5hGuy5Ayuve/Pw/TiKVfrrhx6KCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCw0YN/UqGQ3eXxKrbr9X+JsiYbtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzRiZjM0NDctMjUwNS0z NGUxLWJlMzctNGU0YTQ2MjgzODliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCHkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAp3Cy7zKPOg+J/vPvMkBJUKA7BvmjDX4jC1Pxd0IrkFzcW/5WQgrNND 2MGbLVVt0c/Gbz6g3J+nQaOKa4v9SPITIdoU3kW0jXTH21ladgGRc3evdwWk4Ylo dwdnBQ0F6KdWL77yBeQkStb8WCLAwuGALnSTUKKJS0sGjvAyGNELZqEmUrMKJbmh C5M/CCgNJBDeGK2tGLTHA+6EnoKE5igawmVo2UNO90iHfcFCV0Q5Xt+3Kd6cm6TD qt2hdy2ylXWT1dSIiTvFXfsdUN/OGpc/9vmgiumcXB73V/+Ssf9cV1jsS442O5i+ t2SnmzGx3KV4Lgo45ly7L7paKxyjSHs= -----END CERTIFICATE-----Generated at Mon Oct 26 02:05:00 2026 by rpki-client