$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfce08b9-fa20-3011-97ac-85c4ba3785d5.roa File: cfce08b9-fa20-3011-97ac-85c4ba3785d5.roa (raw, json) Hash identifier: 8pILxuTMBxGFqikqh2sbRLh9OIb7XzmcfCypEugWmlo= Subject key identifier: 59:FE:9F:9F:2A:40:12:97:04:3E:23:D0:CC:2A:6F:82:FC:B6:F4:98 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F778326DBEEA5ADFA59E6C7C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfce08b9-fa20-3011-97ac-85c4ba3785d5.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:26:db:ee:a5:ad:fa:59:e6:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=2c57b64a-4392-423a-abcd-e70940455027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e4:1c:8d:31:3e:79:66:16:61:89:9b:94:9a: 5b:2a:1c:bd:4f:b2:e1:71:4c:9f:fa:ac:c9:2c:63: 75:f2:e3:5c:6f:44:86:79:28:71:27:7c:a8:04:3f: 76:c2:93:0c:68:4b:d2:6e:28:9d:ec:88:8f:15:0a: 45:1a:b3:e7:de:d6:00:db:9f:e8:0b:76:a0:f5:8c: 12:ea:f7:96:91:4e:5f:a1:be:ce:1e:a1:02:42:09: 24:a8:13:51:fb:55:88:bd:84:ec:0f:28:1f:fb:9b: 1a:07:b6:d8:f1:5d:1f:9b:7f:86:6c:b3:8a:4a:cb: 5c:0c:a4:93:82:42:4c:38:9e:ea:e7:92:86:4b:0a: fd:fa:58:1e:6d:22:c5:73:9a:b1:5c:59:fc:f3:8f: 17:41:8e:b3:2d:af:f8:13:df:8a:8e:73:00:c3:3d: 9d:ee:ca:aa:9f:64:e6:21:aa:31:14:6d:37:6c:ec: ab:6b:c9:6f:68:92:6f:c0:62:8b:70:41:73:8e:e5: 1d:62:d8:92:11:2a:c1:6c:1f:e6:9d:a3:4f:0c:5b: 7a:b2:48:eb:3f:f9:2f:51:3e:13:02:58:9c:2d:87: bc:56:45:73:65:4e:b9:c6:8b:c6:f6:9f:e7:e2:9f: 00:63:11:de:c5:c1:76:82:94:7e:c0:f9:2d:44:0a: db:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FE:9F:9F:2A:40:12:97:04:3E:23:D0:CC:2A:6F:82:FC:B6:F4:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfce08b9-fa20-3011-97ac-85c4ba3785d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:4c:26:78:fb:e2:4c:09:13:66:4a:e9:db:39:10:13:49:fc: 34:9b:03:83:e2:3c:32:1e:71:0a:ff:88:0f:4c:73:9a:59:c3: ea:79:7a:ac:95:c1:79:e7:75:88:7b:96:32:f3:86:29:23:3a: 59:0e:2c:c0:54:8d:1b:9a:46:87:78:f5:86:1e:0e:e3:6e:9e: 03:b1:d0:e4:9d:58:66:c8:1f:9d:36:d7:8f:d2:e9:00:60:03: fc:79:a8:73:f9:c0:7e:e6:2b:e7:7a:e5:e0:5f:89:e3:14:2a: fc:dd:ba:2f:76:52:91:3a:50:18:70:c8:1b:94:54:a9:1c:1d: 34:a6:13:85:09:03:89:d6:96:ac:34:80:f4:93:3c:14:e0:18: ff:af:4f:ba:4c:92:56:61:bf:91:63:9a:d1:be:7f:84:a9:2e: 5a:57:9b:d9:b7:b0:eb:03:9f:11:57:20:c7:bd:5d:a3:d7:2b: 7a:bf:59:44:2d:8b:86:19:f2:65:4b:5f:96:be:b8:18:a1:52: c4:e1:c0:87:bb:f9:58:8b:f8:42:e5:66:ff:2f:1e:fe:6e:2c: b7:00:6c:33:85:1d:9f:75:b8:5a:a3:bc:26:94:0f:73:72:27: d7:00:ca:26:e3:6c:10:ad:15:68:ec:f3:74:ea:76:12:cf:36: b0:c7:45:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gybb7qWt+lnmx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk MmM1N2I2NGEtNDM5Mi00MjNhLWFiY2QtZTcwOTQwNDU1MDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuQcjTE+eWYWYYmblJpbKhy9T7LhcUyf+qzJ LGN18uNcb0SGeShxJ3yoBD92wpMMaEvSbiid7IiPFQpFGrPn3tYA25/oC3ag9YwS 6veWkU5fob7OHqECQgkkqBNR+1WIvYTsDygf+5saB7bY8V0fm3+GbLOKSstcDKST gkJMOJ7q55KGSwr9+lgebSLFc5qxXFn8848XQY6zLa/4E9+KjnMAwz2d7sqqn2Tm IaoxFG03bOyra8lvaJJvwGKLcEFzjuUdYtiSESrBbB/mnaNPDFt6skjrP/kvUT4T AlicLYe8VkVzZU65xovG9p/n4p8AYxHexcF2gpR+wPktRArbJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFn+n58qQBKXBD4j0Mwqb4L8tvSYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2ZjZTA4YjktZmEyMC0z MDExLTk3YWMtODVjNGJhMzc4NWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpMJnj74kwJE2ZK6ds5EBNJ/DSbA4PiPDIecQr/iA9Mc5pZw+p5eqyV wXnndYh7ljLzhikjOlkOLMBUjRuaRod49YYeDuNungOx0OSdWGbIH50214/S6QBg A/x5qHP5wH7mK+d65eBfieMUKvzdui92UpE6UBhwyBuUVKkcHTSmE4UJA4nWlqw0 gPSTPBTgGP+vT7pMklZhv5FjmtG+f4SpLlpXm9m3sOsDnxFXIMe9XaPXK3q/WUQt i4YZ8mVLX5a+uBihUsThwIe7+ViL+ELlZv8vHv5uLLcAbDOFHZ91uFqjvCaUD3Ny J9cAyibjbBCtFWjs83TqdhLPNrDHRTQ= -----END CERTIFICATE-----Generated at Mon Oct 26 05:38:12 2026 by rpki-client