$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/78718e56-794a-397d-80d6-334e9fd3e89d.roa File: 78718e56-794a-397d-80d6-334e9fd3e89d.roa (raw, json) Hash identifier: SNkgUU4RtmBQ24I+Y3pfAY7XDB5lPahno4FTssGKn98= Subject key identifier: 77:81:9F:E3:CA:59:B4:36:95:4E:4F:2C:36:88:1E:E1:8E:6D:AB:25 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F62930BCD22224110E596B1C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/78718e56-794a-397d-80d6-334e9fd3e89d.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 8069 IP address blocks: 20.33.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:0b:cd:22:22:41:10:e5:96:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=982b5d84-d7b7-42f2-990c-7640106bb187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cd:64:94:94:dc:13:62:ce:d7:42:1a:f7:31: ec:a2:6d:ea:df:97:74:f5:06:42:b7:bb:fa:0a:1c: 97:f1:97:c6:5b:0e:92:12:54:f4:29:f4:46:2d:a1: c3:c6:eb:8b:a8:52:26:7b:a6:8a:e6:c8:c4:3b:33: ad:d7:99:85:53:73:f0:53:7e:e4:09:11:c3:99:13: 79:4c:9b:a0:34:2e:cc:76:2a:e9:00:82:b8:f9:a0: 91:7d:4e:66:ef:0e:65:d5:2f:55:10:93:fc:3c:55: 8a:64:56:c2:0a:8c:5d:38:47:cc:79:a3:ba:fa:bb: 81:e8:f0:71:b1:ec:a1:dd:13:11:ff:07:59:8d:da: 95:b1:55:11:50:68:77:e8:58:6c:78:29:ea:58:ff: df:fb:61:f2:5c:91:23:23:66:9b:93:66:95:3b:8f: 01:0e:43:1c:50:b3:76:7c:d8:45:88:27:13:1c:58: 5d:ed:29:41:a6:61:46:9b:8f:8a:c3:3a:70:89:c3: 41:88:22:59:f1:96:fc:6e:36:bd:9f:27:c5:db:46: 8b:a4:63:ee:c2:dd:2e:83:ba:65:d4:dc:a3:9a:6b: 0b:f5:a9:72:76:b9:c9:19:88:c5:3b:e8:dc:d3:1f: a3:18:52:9a:20:76:6f:e3:31:41:cb:ca:eb:4c:aa: 65:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:81:9F:E3:CA:59:B4:36:95:4E:4F:2C:36:88:1E:E1:8E:6D:AB:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/78718e56-794a-397d-80d6-334e9fd3e89d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:61:72:48:88:33:42:4c:44:22:14:f2:c2:01:8e:37:2b:c3: ce:c9:39:d6:86:c0:dc:c5:b3:e2:bd:a1:2d:e6:98:8f:08:cd: 3d:46:7f:4e:27:cd:2e:4c:c0:02:88:c5:f7:7e:cd:f5:ae:9d: c6:7e:58:74:3c:09:23:14:c7:32:20:33:23:51:53:a5:ee:64: dc:98:bf:87:9b:05:a2:98:eb:e0:06:7a:63:ac:79:22:9b:c7: 3a:e2:be:a6:98:46:0c:45:3e:b8:89:a3:8e:64:33:67:67:90: 6d:53:90:65:50:b8:03:8c:cf:b8:18:a8:c6:4e:75:9d:f0:13: dc:7d:2b:4c:19:e6:72:e9:23:c4:fd:4d:9f:d9:13:f3:5a:3f: 15:08:45:a0:c4:f0:b1:99:14:4c:38:1e:da:6f:c0:ff:bc:0c: a6:41:6a:be:90:ad:41:1d:17:5d:12:1d:42:d1:97:a4:dd:29: d7:7d:68:c6:dd:95:66:91:f7:39:f0:a2:df:6e:18:41:78:4f: d4:9b:72:76:44:85:79:51:66:15:52:7f:65:54:f7:46:19:4e: 94:3c:6f:59:74:02:15:93:06:a1:41:75:7a:89:d6:7c:ce:78: 78:15:f6:c9:84:c5:c2:d3:1d:8f:46:4a:a8:4f:9a:d0:67:37: 54:44:ee:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwvNIiJBEOWWscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk OTgyYjVkODQtZDdiNy00MmYyLTk5MGMtNzY0MDEwNmJiMTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM1klJTcE2LO10Ia9zHsom3q35d09QZCt7v6 ChyX8ZfGWw6SElT0KfRGLaHDxuuLqFIme6aK5sjEOzOt15mFU3PwU37kCRHDmRN5 TJugNC7MdirpAIK4+aCRfU5m7w5l1S9VEJP8PFWKZFbCCoxdOEfMeaO6+ruB6PBx seyh3RMR/wdZjdqVsVURUGh36FhseCnqWP/f+2HyXJEjI2abk2aVO48BDkMcULN2 fNhFiCcTHFhd7SlBpmFGm4+KwzpwicNBiCJZ8Zb8bja9nyfF20aLpGPuwt0ug7pl 1NyjmmsL9alydrnJGYjFO+jc0x+jGFKaIHZv4zFBy8rrTKplKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHeBn+PKWbQ2lU5PLDaIHuGObaslMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzg3MThlNTYtNzk0YS0z OTdkLTgwZDYtMzM0ZTlmZDNlODlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACthckiIM0JMRCIU8sIBjjcrw87JOdaGwNzFs+K9oS3mmI8IzT1Gf04n zS5MwAKIxfd+zfWuncZ+WHQ8CSMUxzIgMyNRU6XuZNyYv4ebBaKY6+AGemOseSKb xzrivqaYRgxFPriJo45kM2dnkG1TkGVQuAOMz7gYqMZOdZ3wE9x9K0wZ5nLpI8T9 TZ/ZE/NaPxUIRaDE8LGZFEw4HtpvwP+8DKZBar6QrUEdF10SHULRl6TdKdd9aMbd lWaR9znwot9uGEF4T9SbcnZEhXlRZhVSf2VU90YZTpQ8b1l0AhWTBqFBdXqJ1nzO eHgV9smExcLTHY9GSqhPmtBnN1RE7p8= -----END CERTIFICATE-----Generated at Tue Oct 27 17:31:16 2026 by rpki-client