$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5bf04b00-bd2b-33b8-9872-6c352ab3e042.roa File: 5bf04b00-bd2b-33b8-9872-6c352ab3e042.roa (raw, json) Hash identifier: /th11fqnUx625bsfpPZ5fp7edWiUHc+SCmttRSGEgfI= Subject key identifier: 5E:3E:BC:CF:38:75:B2:26:99:9E:F2:A9:E0:2B:82:89:7C:6E:C1:52 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F778326C52E4E42618AD06D00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5bf04b00-bd2b-33b8-9872-6c352ab3e042.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:26:c5:2e:4e:42:61:8a:d0:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=4c2ac198-f62b-4144-b8df-ab9facebe7a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fa:ca:0b:74:d8:9b:f0:1b:37:37:17:25:82: b3:fd:bb:e9:cf:fe:29:14:16:7b:51:c3:7d:09:1b: 40:cd:87:6c:a5:31:63:41:1b:49:58:c9:54:2c:59: d3:22:22:9b:d4:bf:3c:96:14:27:2c:31:45:49:e9: 5d:24:ff:b2:27:8d:fe:ab:52:3e:96:3c:b9:08:b7: 4c:41:2a:a0:d4:4c:be:be:a9:6f:a8:92:f6:5d:fc: d0:11:e3:88:fb:a7:8f:cd:f5:51:e9:22:34:58:96: 8e:12:ce:cd:65:4a:37:90:56:02:18:f2:ea:a8:c9: 36:c1:66:e5:c5:9a:ec:81:80:1f:4f:4b:e4:71:19: 0c:7c:f9:f7:bd:07:bf:a0:84:f5:4f:f7:f7:92:69: 92:f0:3a:9d:43:fe:0a:0e:77:63:13:fb:0b:e1:4d: f8:ec:02:9c:6d:f6:a6:82:f5:f2:cc:ef:73:76:44: 63:ff:92:41:86:cc:82:ab:b1:44:f7:49:25:a9:b0: 23:51:fe:02:bd:83:a3:5d:52:4a:bd:62:3e:2d:ea: 98:ad:f0:dd:c6:21:b2:be:1a:7e:fe:c4:db:39:a8: f7:29:f6:54:f4:3a:e2:86:cd:4b:f3:1a:9e:9a:2e: 9c:66:e5:fd:d7:11:41:54:e0:8f:f9:e3:80:e2:2b: 33:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:3E:BC:CF:38:75:B2:26:99:9E:F2:A9:E0:2B:82:89:7C:6E:C1:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5bf04b00-bd2b-33b8-9872-6c352ab3e042.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:76:9a:90:44:c7:9b:37:ec:b4:0f:26:bb:e6:cc:5e:72:d2: 3e:3f:c8:e6:24:bf:75:a7:39:35:30:6c:82:de:26:be:9e:34: 87:bb:03:7a:34:1f:33:28:41:fd:68:14:39:6f:21:1b:5f:53: 93:8e:bb:45:f7:c0:9a:6b:62:f9:58:6e:fd:0f:92:70:c6:9a: 56:61:62:10:18:a9:08:e0:42:9d:e6:5a:71:74:07:70:98:aa: 9e:48:3f:44:07:37:fd:c8:5e:94:bf:1d:01:55:89:85:fe:46: c2:07:62:5e:15:b7:c5:16:a8:da:d0:48:77:69:d6:2b:16:98: 96:9e:c8:d6:77:60:30:88:1c:0b:d9:38:0c:64:78:4d:aa:a4: 3b:62:48:6a:d6:90:61:ae:2d:86:be:71:f1:45:bb:1e:25:2c: a8:81:b8:d1:5b:9b:f2:4a:be:8c:fc:4a:6a:69:96:ca:54:08: 64:a8:33:bd:c1:2d:4c:8c:0e:38:98:67:f6:83:b4:bd:47:10: 7a:05:b9:34:50:96:a0:37:b5:41:f9:16:8d:04:fa:0e:48:28: 91:8a:ea:be:00:20:28:8c:1c:b3:89:67:4c:42:3b:6c:ff:30: 22:b3:9c:82:21:93:eb:8d:d3:75:b6:75:26:5d:d5:11:c5:dd: 71:a4:85:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gybFLk5CYYrQbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk NGMyYWMxOTgtZjYyYi00MTQ0LWI4ZGYtYWI5ZmFjZWJlN2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vrKC3TYm/AbNzcXJYKz/bvpz/4pFBZ7UcN9 CRtAzYdspTFjQRtJWMlULFnTIiKb1L88lhQnLDFFSeldJP+yJ43+q1I+ljy5CLdM QSqg1Ey+vqlvqJL2XfzQEeOI+6ePzfVR6SI0WJaOEs7NZUo3kFYCGPLqqMk2wWbl xZrsgYAfT0vkcRkMfPn3vQe/oIT1T/f3kmmS8DqdQ/4KDndjE/sL4U347AKcbfam gvXyzO9zdkRj/5JBhsyCq7FE90klqbAjUf4CvYOjXVJKvWI+LeqYrfDdxiGyvhp+ /sTbOaj3KfZU9Drihs1L8xqemi6cZuX91xFBVOCP+eOA4isznQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4+vM84dbImmZ7yqeArgol8bsFSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWJmMDRiMDAtYmQyYi0z M2I4LTk4NzItNmMzNTJhYjNlMDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCHiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFB2mpBEx5s37LQPJrvmzF5y0j4/yOYkv3WnOTUwbILeJr6eNIe7A3o0 HzMoQf1oFDlvIRtfU5OOu0X3wJprYvlYbv0PknDGmlZhYhAYqQjgQp3mWnF0B3CY qp5IP0QHN/3IXpS/HQFViYX+RsIHYl4Vt8UWqNrQSHdp1isWmJaeyNZ3YDCIHAvZ OAxkeE2qpDtiSGrWkGGuLYa+cfFFux4lLKiBuNFbm/JKvoz8SmpplspUCGSoM73B LUyMDjiYZ/aDtL1HEHoFuTRQlqA3tUH5Fo0E+g5IKJGK6r4AICiMHLOJZ0xCO2z/ MCKznIIhk+uN03W2dSZd1RHF3XGkhUA= -----END CERTIFICATE-----Generated at Mon Oct 26 16:12:25 2026 by rpki-client