$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d5fa6f42-1cfd-3e11-bde6-d02e0d0a9b06.roa File: d5fa6f42-1cfd-3e11-bde6-d02e0d0a9b06.roa (raw, json) Hash identifier: 8OTd1dulbibY74X6g9k2LOnt31ZYFh6GSbEnjt4gtfQ= Subject key identifier: F9:4B:2A:D2:8B:77:D1:9A:A5:2E:02:FB:0A:CA:F5:33:19:92:A0:4D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F5E62C933779C8FA57BB6DB80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d5fa6f42-1cfd-3e11-bde6-d02e0d0a9b06.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 8069 IP address blocks: 20.33.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:c9:33:77:9c:8f:a5:7b:b6:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=71775f0d-fbeb-4cb5-b04d-4264f0e93ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:73:14:b8:e5:00:9d:10:00:52:cc:00:1e:cb: 3e:9f:08:da:dc:9b:50:5d:f3:f0:28:a7:55:15:4c: ab:a7:13:21:ee:a9:5b:5f:f6:ec:71:d8:88:23:46: bd:4e:90:40:3a:d5:2c:00:1a:9d:52:b0:02:64:bf: fe:a4:d7:53:c5:5b:62:44:2f:c5:ca:1f:96:31:e6: fb:30:91:a7:79:2e:0c:9c:6d:f6:b8:00:7e:bd:f4: 1b:de:a9:3b:85:29:6b:4e:19:58:6a:50:f9:33:f6: 39:f2:e0:bb:0f:e0:9a:1d:8b:c9:97:b0:95:a6:a8: 02:b6:fb:30:18:ee:7c:06:b3:8d:de:f7:8a:97:17: e1:6b:de:18:eb:01:04:d8:ba:93:34:11:23:97:0b: 94:b2:3f:7e:b7:88:11:77:80:8e:30:8a:b6:2b:5c: fa:25:eb:3e:fd:63:be:a8:98:2e:29:da:90:04:9c: be:a5:4a:c9:5a:29:7b:a9:fe:59:b2:f5:a7:3a:e2: 4b:54:b7:34:7e:87:7d:f0:b2:50:54:50:44:3d:86: 3e:0f:89:91:be:f5:7c:b7:1e:f0:ac:1e:8d:42:6e: 7e:d2:63:1e:e1:d9:b7:e6:95:cb:4e:89:e0:d7:ac: 30:2f:3a:25:66:4c:1c:f0:60:f9:da:60:1e:66:24: f8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4B:2A:D2:8B:77:D1:9A:A5:2E:02:FB:0A:CA:F5:33:19:92:A0:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d5fa6f42-1cfd-3e11-bde6-d02e0d0a9b06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:6b:80:c2:97:e7:73:c3:3a:9d:e1:56:53:90:81:c6:60:f7: 2a:5a:a0:d7:35:36:92:d6:e6:03:ce:dd:b8:d8:b6:05:2d:ad: 74:39:f3:4e:f4:f4:6e:a6:d3:8f:79:04:cc:88:ca:6f:a1:c8: a0:78:cf:c1:81:09:34:60:b8:c3:a6:4e:0e:d1:0f:44:fd:a2: 78:f1:f3:c7:fb:2f:24:44:83:dc:22:41:07:17:9c:7c:d9:8d: 3c:be:19:97:1e:18:65:d0:f7:fd:13:99:31:08:07:a5:36:31: fc:55:19:b1:aa:d0:58:00:de:e2:a6:df:d5:1d:15:74:3e:3b: 2a:bc:2f:7b:04:c9:b7:2b:fa:3e:30:2e:da:c1:e4:01:ff:81: b0:dd:39:13:43:03:61:23:2b:19:8e:e8:93:e0:e0:81:c5:a2: 28:02:a7:bb:6e:c4:d2:7f:da:5a:13:ab:6a:a7:af:5c:0f:e6: b9:90:b9:3d:e9:03:8d:1a:91:72:ae:d5:97:e7:19:d1:07:21: 8a:d9:92:4b:a6:18:51:e2:b5:42:87:c8:fc:9e:6e:2f:a8:c3: 91:1d:e5:17:5e:60:56:2b:32:80:6b:c8:cc:f6:2f:a1:8f:f0: 3e:16:4e:38:94:de:01:aa:95:b3:7c:df:44:5c:5c:11:05:43: d0:63:79:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYskzd5yPpXu224AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk NzE3NzVmMGQtZmJlYi00Y2I1LWIwNGQtNDI2NGYwZTkzZWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnMUuOUAnRAAUswAHss+nwja3JtQXfPwKKdV FUyrpxMh7qlbX/bscdiII0a9TpBAOtUsABqdUrACZL/+pNdTxVtiRC/Fyh+WMeb7 MJGneS4MnG32uAB+vfQb3qk7hSlrThlYalD5M/Y58uC7D+CaHYvJl7CVpqgCtvsw GO58BrON3veKlxfha94Y6wEE2LqTNBEjlwuUsj9+t4gRd4COMIq2K1z6Jes+/WO+ qJguKdqQBJy+pUrJWil7qf5ZsvWnOuJLVLc0fod98LJQVFBEPYY+D4mRvvV8tx7w rB6NQm5+0mMe4dm35pXLTong16wwLzolZkwc8GD52mAeZiT4RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlLKtKLd9GapS4C+wrK9TMZkqBNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDVmYTZmNDItMWNmZC0z ZTExLWJkZTYtZDAyZTBkMGE5YjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRrgMKX53PDOp3hVlOQgcZg9ypaoNc1NpLW5gPO3bjYtgUtrXQ58070 9G6m0495BMyIym+hyKB4z8GBCTRguMOmTg7RD0T9onjx88f7LyREg9wiQQcXnHzZ jTy+GZceGGXQ9/0TmTEIB6U2MfxVGbGq0FgA3uKm39UdFXQ+Oyq8L3sEybcr+j4w LtrB5AH/gbDdORNDA2EjKxmO6JPg4IHFoigCp7tuxNJ/2loTq2qnr1wP5rmQuT3p A40akXKu1ZfnGdEHIYrZkkumGFHitUKHyPyebi+ow5Ed5RdeYFYrMoBryMz2L6GP 8D4WTjiU3gGqlbN830RcXBEFQ9BjeXo= -----END CERTIFICATE-----Generated at Mon Oct 26 11:17:32 2026 by rpki-client