$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c1f6ce7e-11f3-3197-bf63-44537afda3f2.roa File: c1f6ce7e-11f3-3197-bf63-44537afda3f2.roa (raw, json) Hash identifier: TAoOAQ/BmO1Fzhb8K6Zz2UcRLuTeKcMJRGQhsONxaik= Subject key identifier: DA:27:90:40:83:26:AD:34:C3:B7:5D:FC:F5:61:2E:83:91:F1:9A:53 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F85787629766FE8769A1F1080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c1f6ce7e-11f3-3197-bf63-44537afda3f2.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:76:29:76:6f:e8:76:9a:1f:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=0b30ca35-3743-4d7c-ac72-e1aa505e5e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3b:54:16:f2:f3:8c:fd:a6:75:59:fd:c5:45: c3:79:3e:9c:94:db:89:4c:cf:e5:d8:1e:05:13:bc: 49:78:39:4d:a6:7e:db:aa:35:50:ab:e3:de:c3:d5: 93:7a:ff:b4:44:1f:50:76:dc:9b:4c:c7:e3:06:1a: 06:a4:db:02:e9:7a:63:40:8c:56:c1:5d:aa:11:35: 08:12:3d:89:2a:4a:86:4e:f3:d4:a8:a4:e7:58:cd: a5:d9:8d:5b:df:a2:c3:21:f4:dd:e0:b6:5f:2b:75: 9c:90:e5:9a:7f:e9:10:a4:a1:9d:aa:55:f9:ce:ab: f9:71:7c:9f:cd:3c:24:ec:8f:f3:c8:eb:69:6f:b9: ec:00:45:d8:3f:44:23:98:e7:5a:12:1e:c8:89:f6: 7c:af:d4:bf:75:0c:72:c8:b3:25:b4:17:4b:6d:31: 38:80:19:b6:96:b1:73:33:6f:8a:18:59:dd:7a:70: 82:10:f6:67:b4:b2:63:01:3f:1c:58:78:be:cf:0a: 67:50:da:8a:cf:4c:01:59:e0:41:6a:63:c1:e0:a0: 1d:9e:6a:2f:37:d6:57:0c:8f:59:7d:b7:09:89:67: 68:59:b7:cf:75:ef:2d:2f:d3:cf:38:f1:3f:58:d9: de:8d:5d:b2:0d:b9:95:99:88:86:8f:e3:7d:74:94: cb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:27:90:40:83:26:AD:34:C3:B7:5D:FC:F5:61:2E:83:91:F1:9A:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c1f6ce7e-11f3-3197-bf63-44537afda3f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:e0:93:12:de:09:9a:14:3d:7a:1b:6a:fc:66:77:98:2f:ed: 6a:ca:14:41:67:25:25:7d:50:89:3f:94:30:00:a2:0a:49:3b: 29:24:44:ab:0d:4d:79:9b:87:9b:ff:b3:d5:6c:52:ad:0b:7d: 23:d6:a6:44:e8:58:42:ab:60:71:03:a1:6b:bd:7b:52:49:db: 9e:ac:d4:f3:e6:cd:8e:6c:c8:4a:c0:df:1a:c8:a7:c0:8c:da: 42:e4:bf:80:66:a0:d6:c4:98:35:5f:10:ef:4d:ad:d7:ca:02: 94:94:ea:ec:d4:bb:5e:05:5d:c6:5c:ec:97:39:f0:0f:a8:81: 58:fb:03:dc:63:ee:7a:d2:cc:0e:1b:b8:c1:ab:b4:63:22:7c: a4:9e:2e:84:40:00:91:e5:63:ea:dd:cd:ba:e7:db:80:16:ab: 38:b0:11:f8:5e:75:27:a1:9d:02:aa:92:1e:d2:b6:c8:1d:94: a5:f4:ec:b2:57:fa:40:f3:1b:24:cf:e6:84:13:6d:55:76:45: 8a:3d:a8:b9:54:fb:cb:60:58:78:ca:f3:1d:88:89:56:59:82: 29:26:51:64:4e:62:86:e6:f4:14:e8:fa:de:0b:96:09:96:bb: 7a:cc:d5:ee:ed:ea:4b:85:90:6f:7c:ba:ed:5d:85:ac:41:81: c8:af:a3:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeHYpdm/odpofEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk MGIzMGNhMzUtMzc0My00ZDdjLWFjNzItZTFhYTUwNWU1ZTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiztUFvLzjP2mdVn9xUXDeT6clNuJTM/l2B4F E7xJeDlNpn7bqjVQq+Pew9WTev+0RB9QdtybTMfjBhoGpNsC6XpjQIxWwV2qETUI Ej2JKkqGTvPUqKTnWM2l2Y1b36LDIfTd4LZfK3WckOWaf+kQpKGdqlX5zqv5cXyf zTwk7I/zyOtpb7nsAEXYP0QjmOdaEh7IifZ8r9S/dQxyyLMltBdLbTE4gBm2lrFz M2+KGFndenCCEPZntLJjAT8cWHi+zwpnUNqKz0wBWeBBamPB4KAdnmovN9ZXDI9Z fbcJiWdoWbfPde8tL9PPOPE/WNnejV2yDbmVmYiGj+N9dJTL/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNonkECDJq00w7dd/PVhLoOR8ZpTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzFmNmNlN2UtMTFmMy0z MTk3LWJmNjMtNDQ1MzdhZmRhM2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbgkxLeCZoUPXobavxmd5gv7WrKFEFnJSV9UIk/lDAAogpJOykkRKsN TXmbh5v/s9VsUq0LfSPWpkToWEKrYHEDoWu9e1JJ256s1PPmzY5syErA3xrIp8CM 2kLkv4BmoNbEmDVfEO9NrdfKApSU6uzUu14FXcZc7Jc58A+ogVj7A9xj7nrSzA4b uMGrtGMifKSeLoRAAJHlY+rdzbrn24AWqziwEfhedSehnQKqkh7StsgdlKX07LJX +kDzGyTP5oQTbVV2RYo9qLlU+8tgWHjK8x2IiVZZgikmUWROYobm9BTo+t4LlgmW u3rM1e7t6kuFkG98uu1dhaxBgcivow4= -----END CERTIFICATE-----Generated at Mon Oct 26 13:38:14 2026 by rpki-client