$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4426bc50-c7c8-3db9-ba29-a76605eb28e0.roa File: 4426bc50-c7c8-3db9-ba29-a76605eb28e0.roa (raw, json) Hash identifier: uD51rGg1cqJ+QS/YQm4rqWA+Dcg/1l3uRLr4wrQ1TdE= Subject key identifier: EA:0E:E1:79:81:22:0E:06:34:64:FE:12:BE:D1:B3:C0:3A:1A:81:77 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F698D8AD85097EBB7B8692180 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4426bc50-c7c8-3db9-ba29-a76605eb28e0.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 8069 IP address blocks: 20.33.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:8a:d8:50:97:eb:b7:b8:69:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=e21a3e6b-60ac-4ce3-a721-f97cc11aeaba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:92:ee:19:46:f4:30:e9:b2:03:5a:e0:7f:a7: 4b:06:a6:6b:de:12:26:4d:35:ed:ea:b2:75:bb:f4: 01:33:72:c4:9a:94:9e:6b:d6:8e:2b:40:10:4a:9d: d6:7e:06:0e:bb:20:cd:ab:21:b6:79:37:40:a5:f1: 8c:20:53:ca:91:45:84:46:c5:17:a5:ae:5e:cd:81: bf:c9:a2:68:b8:ac:42:c1:4d:89:37:85:2f:f9:12: ba:ad:26:f4:68:71:d3:c5:76:91:5a:a6:45:ce:fe: d6:5e:bd:13:b9:4d:17:4c:95:aa:af:76:b8:b2:9f: ef:1c:89:0c:73:6d:28:6d:0b:84:d1:e9:05:49:ce: 27:a4:b9:a9:92:c8:5e:44:5c:8b:49:a5:7a:7e:07: 1f:01:4f:6a:bf:e5:22:2f:ef:76:5b:e5:ce:12:da: fd:43:f1:f3:42:44:59:3d:41:de:72:45:9a:6a:31: 2c:fd:ff:5f:19:62:d7:42:19:0a:02:4a:b2:2f:b1: 9e:ab:c4:e1:e3:a2:5a:f3:d5:ac:a0:2d:ea:1c:c6: ec:ca:b6:a1:ce:be:b8:9b:ae:39:d0:6e:e4:35:41: 77:1b:c5:51:91:f4:9c:4f:07:92:e6:bd:8e:96:bd: fa:6c:d4:ea:01:00:47:e6:12:8d:31:b9:16:92:1b: 2a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:0E:E1:79:81:22:0E:06:34:64:FE:12:BE:D1:B3:C0:3A:1A:81:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4426bc50-c7c8-3db9-ba29-a76605eb28e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:a9:4e:8c:23:2e:a8:f6:52:ab:21:bc:48:fb:b8:fa:7c:0b: 03:20:27:8e:31:47:dd:55:cc:2d:08:43:de:6d:ac:79:4a:d4: 56:bc:fb:8e:fe:e5:22:b6:e8:8f:75:ca:88:11:b9:88:53:0a: 50:0e:8d:12:a7:5f:b3:78:53:30:6d:1a:2c:ee:db:80:65:bb: 3f:7a:05:81:9e:96:4d:8f:2e:51:bb:96:80:e0:3f:ef:28:9a: 58:33:2e:1d:8f:95:c2:1d:cc:21:bb:db:4f:3b:d4:86:d1:d1: 93:79:c3:f5:e4:89:d1:d0:ca:64:7e:0a:12:6f:70:4e:76:36: cd:44:69:bd:12:0f:fa:a4:e0:36:c7:bc:ff:aa:97:d2:84:4b: bf:58:24:44:ba:7b:a4:4c:64:59:10:46:b2:27:a9:4e:fb:41: ce:cd:60:5f:40:f2:b1:c3:15:71:22:77:5a:3b:82:58:bc:d3: a7:0c:78:5e:6b:3b:bc:23:d3:69:d8:88:f9:4d:a4:db:50:6e: 58:e2:9c:52:df:04:9f:84:74:b9:68:45:ad:e9:92:6a:cf:03: 93:04:b9:8a:a3:df:ee:d3:f2:69:07:ad:c9:77:b5:82:27:0a: 9e:e8:25:82:59:07:d7:64:0b:7b:61:23:33:00:f4:a9:93:af: 7d:42:8b:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjYrYUJfrt7hpIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk ZTIxYTNlNmItNjBhYy00Y2UzLWE3MjEtZjk3Y2MxMWFlYWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpLuGUb0MOmyA1rgf6dLBqZr3hImTTXt6rJ1 u/QBM3LEmpSea9aOK0AQSp3WfgYOuyDNqyG2eTdApfGMIFPKkUWERsUXpa5ezYG/ yaJouKxCwU2JN4Uv+RK6rSb0aHHTxXaRWqZFzv7WXr0TuU0XTJWqr3a4sp/vHIkM c20obQuE0ekFSc4npLmpksheRFyLSaV6fgcfAU9qv+UiL+92W+XOEtr9Q/HzQkRZ PUHeckWaajEs/f9fGWLXQhkKAkqyL7Geq8Th46Ja89WsoC3qHMbsyrahzr64m645 0G7kNUF3G8VRkfScTweS5r2Olr36bNTqAQBH5hKNMbkWkhsqswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOoO4XmBIg4GNGT+Er7Rs8A6GoF3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDQyNmJjNTAtYzdjOC0z ZGI5LWJhMjktYTc2NjA1ZWIyOGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFupTowjLqj2UqshvEj7uPp8CwMgJ44xR91VzC0IQ95trHlK1Fa8+47+ 5SK26I91yogRuYhTClAOjRKnX7N4UzBtGizu24Bluz96BYGelk2PLlG7loDgP+8o mlgzLh2PlcIdzCG720871IbR0ZN5w/XkidHQymR+ChJvcE52Ns1Eab0SD/qk4DbH vP+ql9KES79YJES6e6RMZFkQRrInqU77Qc7NYF9A8rHDFXEid1o7gli806cMeF5r O7wj02nYiPlNpNtQbljinFLfBJ+EdLloRa3pkmrPA5MEuYqj3+7T8mkHrcl3tYIn Cp7oJYJZB9dkC3thIzMA9KmTr31CixY= -----END CERTIFICATE-----Generated at Mon Oct 26 07:11:17 2026 by rpki-client