$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6a974e5c-7db3-322a-b1d2-d8ef64264249.roa File: 6a974e5c-7db3-322a-b1d2-d8ef64264249.roa (raw, json) Hash identifier: aJO+cIw1YtwVhnfABcxGdSQIGOLW7bJPhSVC7Cv12MI= Subject key identifier: E4:9E:50:E1:93:5D:95:BA:42:D4:15:7F:DC:EE:D8:CF:A9:0E:30:B3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F778326E758243BF99C4FDE00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6a974e5c-7db3-322a-b1d2-d8ef64264249.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:26:e7:58:24:3b:f9:9c:4f:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=f639603d-65c9-4faf-9f5e-83250ad67838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:11:da:19:eb:4b:74:6c:93:f4:16:53:1b:b4: 3c:21:5e:7b:99:87:b8:c2:94:f5:c8:13:4f:b0:77: 77:50:77:ca:55:fe:d9:e5:e2:87:18:1d:b9:0a:17: 27:92:8d:7d:5c:a4:7d:f5:3d:61:cd:0e:03:23:ad: 9a:93:0d:b8:7d:61:d6:e4:c5:d6:63:4a:bd:3d:05: f4:29:78:5b:f8:80:d7:a6:09:25:df:4b:af:88:33: 6a:dd:e7:e8:8b:c0:e9:7a:52:90:73:9a:24:ff:6f: 91:2d:34:e7:6f:16:79:5f:5f:fb:70:3c:ee:87:34: e5:af:bb:61:c7:af:9f:16:15:b9:b7:cc:bd:30:f4: 1a:80:e5:a8:62:a5:d9:3d:28:3f:72:d1:cb:69:20: 63:dd:ae:7b:49:8a:2e:a3:4e:04:7d:db:ef:57:54: 3d:b1:46:e9:83:72:31:bd:49:c1:aa:f5:e9:90:e4: fc:b7:5d:c0:a0:dc:06:13:f1:dc:f3:53:b4:f1:4d: 98:9e:20:38:83:06:e6:2c:f7:68:40:55:31:b0:13: 22:8e:1f:bc:21:58:c6:d5:e6:6d:2d:34:e3:75:7a: 1b:23:79:11:dd:f4:ca:4c:f9:2d:ea:24:31:9f:3b: c1:fc:f3:78:9c:13:71:52:a2:91:3d:4d:5b:a3:4f: 07:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9E:50:E1:93:5D:95:BA:42:D4:15:7F:DC:EE:D8:CF:A9:0E:30:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6a974e5c-7db3-322a-b1d2-d8ef64264249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:3c:9e:89:94:92:57:17:9c:33:b1:15:6c:e0:db:fe:34:9b: 68:76:bb:f1:e6:7e:b4:cb:6f:81:ed:49:b4:32:d4:4a:e7:92: 55:61:f5:d7:49:70:21:27:e1:f5:6a:a1:f0:c6:e2:49:7a:ce: e2:2a:d9:f3:3c:ba:5f:50:17:c3:16:f9:83:42:4c:8e:d0:f0: 74:ca:1f:30:a9:71:3d:f3:5d:23:cf:fb:ab:2e:1d:4b:ec:9a: df:b8:26:bd:70:35:93:1e:58:72:74:75:54:d3:4b:80:f3:8d: 18:da:6d:5c:ca:ba:fe:af:da:f7:69:cc:93:eb:21:e7:3b:bb: 82:77:7b:ea:4c:e0:f6:77:4a:0c:9e:3f:4b:52:ee:59:69:b9: e1:ab:eb:e9:01:dc:4d:23:3a:57:74:aa:14:3a:d8:0a:07:60: 0c:80:2d:86:96:bb:02:04:2e:1a:1e:ad:b7:27:8c:5c:9c:7c: 71:63:d1:bb:d5:a6:3b:fe:ac:97:2c:1e:77:de:09:13:f2:09: 5f:d3:ce:4e:3e:54:e4:4d:90:8c:c6:1e:4a:71:fd:b4:9d:c1: 56:1f:82:ad:88:e8:9d:e5:59:82:57:f1:57:b3:b1:ad:f9:e1: 92:5e:c4:fe:bc:59:24:95:4d:80:f2:9d:72:21:c8:25:ae:44: 99:2c:92:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gybnWCQ7+ZxP3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZjYzOTYwM2QtNjVjOS00ZmFmLTlmNWUtODMyNTBhZDY3ODM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxHaGetLdGyT9BZTG7Q8IV57mYe4wpT1yBNP sHd3UHfKVf7Z5eKHGB25Chcnko19XKR99T1hzQ4DI62akw24fWHW5MXWY0q9PQX0 KXhb+IDXpgkl30uviDNq3efoi8DpelKQc5ok/2+RLTTnbxZ5X1/7cDzuhzTlr7th x6+fFhW5t8y9MPQagOWoYqXZPSg/ctHLaSBj3a57SYouo04EfdvvV1Q9sUbpg3Ix vUnBqvXpkOT8t13AoNwGE/Hc81O08U2YniA4gwbmLPdoQFUxsBMijh+8IVjG1eZt LTTjdXobI3kR3fTKTPkt6iQxnzvB/PN4nBNxUqKRPU1bo08H6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSeUOGTXZW6QtQVf9zu2M+pDjCzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmE5NzRlNWMtN2RiMy0z MjJhLWIxZDItZDhlZjY0MjY0MjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEI8nomUklcXnDOxFWzg2/40m2h2u/HmfrTLb4HtSbQy1ErnklVh9ddJ cCEn4fVqofDG4kl6zuIq2fM8ul9QF8MW+YNCTI7Q8HTKHzCpcT3zXSPP+6suHUvs mt+4Jr1wNZMeWHJ0dVTTS4DzjRjabVzKuv6v2vdpzJPrIec7u4J3e+pM4PZ3Sgye P0tS7llpueGr6+kB3E0jOld0qhQ62AoHYAyALYaWuwIELhoerbcnjFycfHFj0bvV pjv+rJcsHnfeCRPyCV/Tzk4+VORNkIzGHkpx/bSdwVYfgq2I6J3lWYJX8Vezsa35 4ZJexP68WSSVTYDynXIhyCWuRJksklg= -----END CERTIFICATE-----Generated at Sun Oct 25 19:56:26 2026 by rpki-client