$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7cbce0d9-041b-3c5c-87e4-357878aadde8.roa File: 7cbce0d9-041b-3c5c-87e4-357878aadde8.roa (raw, json) Hash identifier: arupXzzaxOV/70Fv1Ijphh/J8hgUFjjjedsgPd/v/+w= Subject key identifier: 96:A7:65:46:91:C4:FD:15:68:A7:55:CC:E5:03:6F:86:82:8B:F4:E3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F698D8B0A2F9FF3281BFC4380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7cbce0d9-041b-3c5c-87e4-357878aadde8.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 8069 IP address blocks: 20.33.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:8b:0a:2f:9f:f3:28:1b:fc:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=fe37880c-34f5-4121-a9e8-ec638c786c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c3:29:99:fc:dc:67:9f:8d:ea:e5:5b:70:95: f8:ff:92:bc:9d:f5:5b:2d:d2:4c:82:6f:32:91:79: d6:fa:20:29:54:4c:1a:9c:bb:35:11:4e:74:d0:53: 31:b1:27:36:f2:05:fa:86:9e:a7:2d:e1:f1:6b:25: 8b:c8:9e:a1:3b:e8:42:06:1a:a2:6e:ac:40:62:1b: e8:8e:17:8f:f1:39:41:f8:a1:ec:43:75:cd:1d:5d: 49:d8:3a:4b:93:7a:97:25:2d:e5:ee:7a:48:85:c1: 11:fe:17:1a:ae:dd:bc:aa:1c:d8:93:72:41:e8:18: 61:6f:54:39:e0:d9:bd:e9:b7:2c:3c:1b:b3:b7:19: 83:53:a3:eb:4f:61:30:eb:84:92:9e:6f:ea:14:a2: b1:8a:99:42:0a:f6:75:e2:86:ab:7f:86:67:86:a1: c5:55:b8:1e:2f:c6:5a:9e:a2:9c:1e:f3:92:7e:26: b2:88:ac:b5:8b:3f:cd:ef:7e:24:db:1f:57:f1:d7: 00:61:7e:b7:63:73:90:f4:3b:de:c5:31:80:1c:e4: 31:a3:59:64:72:71:3b:7b:c8:62:49:a9:e2:0e:16: fa:0c:00:6c:ef:9c:58:87:47:b3:d5:e8:8b:1e:c2: 25:cc:76:f9:f5:d7:0d:46:19:7d:29:4e:af:1d:48: 5b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A7:65:46:91:C4:FD:15:68:A7:55:CC:E5:03:6F:86:82:8B:F4:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7cbce0d9-041b-3c5c-87e4-357878aadde8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:da:02:98:57:cc:88:f5:85:8b:74:d1:75:e8:9d:7c:e7:75: 7c:e6:88:95:91:8a:ff:f3:b2:a6:43:ab:be:ad:cc:ec:ae:48: cb:e2:db:20:78:46:10:2a:1c:d6:d4:18:1d:f2:46:93:99:8d: a1:31:dd:52:36:f8:f8:c1:c6:d2:c8:0f:54:4d:f7:89:cf:ba: 8b:31:40:39:98:f0:25:71:31:58:3b:f3:9b:09:94:52:47:a5: d9:f5:a1:89:f5:50:72:cb:25:6f:12:38:32:38:80:ca:83:54: 74:81:14:f8:27:33:b0:19:1c:f8:68:91:b5:1d:ae:b1:39:79: 2d:35:35:37:24:c8:f9:b4:76:70:57:87:11:7f:8e:73:14:51: 3a:5f:19:56:11:7e:c3:51:76:c2:82:e1:a0:fc:62:11:52:0a: cb:6c:d1:5c:ed:b3:a2:56:35:9f:52:29:de:b0:5c:06:73:e6: f9:53:1e:de:c2:0e:87:79:f8:bc:94:96:5c:d7:4f:2c:32:3a: 95:45:64:09:ec:02:8f:cd:95:75:0f:2f:ef:5d:04:c9:4b:b4: 4c:28:a3:7f:4a:4f:6f:f0:76:1a:50:fd:4b:31:d6:fd:f6:e6: ef:9a:64:d7:f7:47:f5:ef:fc:1e:c9:c6:6b:0c:ae:dd:5e:ce: 08:bf:30:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjYsKL5/zKBv8Q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk ZmUzNzg4MGMtMzRmNS00MTIxLWE5ZTgtZWM2MzhjNzg2YzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcMpmfzcZ5+N6uVbcJX4/5K8nfVbLdJMgm8y kXnW+iApVEwanLs1EU500FMxsSc28gX6hp6nLeHxayWLyJ6hO+hCBhqibqxAYhvo jheP8TlB+KHsQ3XNHV1J2DpLk3qXJS3l7npIhcER/hcart28qhzYk3JB6Bhhb1Q5 4Nm96bcsPBuztxmDU6PrT2Ew64SSnm/qFKKxiplCCvZ14oarf4ZnhqHFVbgeL8Za nqKcHvOSfiayiKy1iz/N734k2x9X8dcAYX63Y3OQ9DvexTGAHOQxo1lkcnE7e8hi SaniDhb6DABs75xYh0ez1eiLHsIlzHb59dcNRhl9KU6vHUhbNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJanZUaRxP0VaKdVzOUDb4aCi/TjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2NiY2UwZDktMDQxYi0z YzVjLTg3ZTQtMzU3ODc4YWFkZGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDaAphXzIj1hYt00XXonXzndXzmiJWRiv/zsqZDq76tzOyuSMvi2yB4 RhAqHNbUGB3yRpOZjaEx3VI2+PjBxtLID1RN94nPuosxQDmY8CVxMVg785sJlFJH pdn1oYn1UHLLJW8SODI4gMqDVHSBFPgnM7AZHPhokbUdrrE5eS01NTckyPm0dnBX hxF/jnMUUTpfGVYRfsNRdsKC4aD8YhFSCsts0Vzts6JWNZ9SKd6wXAZz5vlTHt7C Dod5+LyUllzXTywyOpVFZAnsAo/NlXUPL+9dBMlLtEwoo39KT2/wdhpQ/Usx1v32 5u+aZNf3R/Xv/B7JxmsMrt1ezgi/MPw= -----END CERTIFICATE-----Generated at Mon Oct 26 06:27:17 2026 by rpki-client