$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f13f890e-5b59-3195-880b-1a8d7832163d.roa File: f13f890e-5b59-3195-880b-1a8d7832163d.roa (raw, json) Hash identifier: tkLMRg3ugoaTOcpuvooFF8dYS8lbZa1jtGrGyCIE0fA= Subject key identifier: 61:69:5F:C4:85:B4:94:57:F6:EC:74:B7:8B:4D:84:92:2E:D8:25:46 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F778326ADD8C7D78B19990FE0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f13f890e-5b59-3195-880b-1a8d7832163d.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:26:ad:d8:c7:d7:8b:19:99:0f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=e0629e80-0109-4f31-8d32-f30170246e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:76:18:9a:76:e2:d5:82:bf:b5:42:42:2c:0d: 80:a2:1d:9f:9d:0e:c1:06:bd:ff:a8:b0:97:c2:88: 90:ea:aa:94:68:e8:3c:72:10:27:68:2e:2a:b6:5e: 54:c1:d1:9f:bf:89:46:85:5b:48:ca:78:22:d9:c8: 28:f4:f1:bf:d7:be:38:17:16:56:1e:79:67:2d:e8: f3:bf:cc:33:99:00:00:9f:6f:4d:40:28:15:a4:3c: fe:33:f8:33:41:98:12:13:eb:be:10:a5:99:df:be: 99:e0:89:10:ed:d5:d1:66:60:6a:f9:f4:cc:47:5b: 8e:fc:bb:21:d6:8d:ce:2b:da:8b:42:b2:97:dc:3f: dc:f2:df:66:8f:84:56:69:27:45:27:15:4c:19:76: e0:3b:29:c0:49:07:31:a5:b7:b2:e4:5d:4a:42:09: 58:1f:7e:2b:f6:cb:05:a9:54:ed:38:4e:12:58:14: 72:5a:8b:47:7f:4c:1b:a1:6e:a0:de:b0:eb:39:2a: bf:13:83:16:bb:9c:9d:32:f3:23:b6:e3:ac:8b:10: 4d:9e:fe:2f:1a:5c:4f:58:0d:ee:07:da:6d:2a:3e: 56:3b:de:98:a4:f6:32:c0:25:82:58:c1:69:c3:72: d1:da:2c:5d:5f:bb:c7:77:31:38:38:fb:74:1c:8d: ad:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:69:5F:C4:85:B4:94:57:F6:EC:74:B7:8B:4D:84:92:2E:D8:25:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f13f890e-5b59-3195-880b-1a8d7832163d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:3f:46:f8:10:60:32:b6:02:fb:d7:47:4c:c3:42:e8:c2:77: 44:3e:3e:d9:5b:d2:d0:5c:e0:b4:f2:21:32:19:93:c3:d8:a0: 7a:0b:e2:f9:77:5f:75:40:04:97:77:b7:a4:11:c0:dc:78:c5: fc:20:27:c2:fc:57:26:dc:71:34:5e:af:be:32:f8:99:b2:8c: 60:8f:e8:10:6c:43:e2:16:fb:31:98:9f:fa:15:39:5e:92:86: 2a:be:c8:73:52:47:45:7a:01:ea:01:b8:54:e0:d0:58:7d:a6: 03:c7:40:10:5c:4b:ea:bf:72:ab:da:72:0f:59:40:e6:ea:44: bd:ef:2f:46:7d:ed:a7:9b:5f:74:d5:c6:5b:64:7e:87:9f:f0: 16:27:d6:59:50:80:e5:f4:ab:78:0f:71:37:91:8a:d2:2f:74: 6e:48:e9:e0:7e:eb:ed:c9:e2:7e:71:9a:2e:03:14:be:21:9b: ba:16:03:f1:ed:32:36:f9:c0:32:02:75:5d:3b:af:40:d8:df: 58:eb:9f:4d:0e:e8:0e:eb:75:13:4b:75:e3:fd:8d:be:33:67: 7e:c3:4f:17:a7:02:d2:ea:f9:3e:e9:bc:9f:10:6b:41:ec:74: f4:47:6d:e1:a5:f1:53:60:9f:84:2e:1d:80:12:9e:40:e2:b5: 6b:c6:eb:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gyat2MfXixmZD+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZTA2MjllODAtMDEwOS00ZjMxLThkMzItZjMwMTcwMjQ2ZTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXYYmnbi1YK/tUJCLA2Aoh2fnQ7BBr3/qLCX woiQ6qqUaOg8chAnaC4qtl5UwdGfv4lGhVtIyngi2cgo9PG/1744FxZWHnlnLejz v8wzmQAAn29NQCgVpDz+M/gzQZgSE+u+EKWZ376Z4IkQ7dXRZmBq+fTMR1uO/Lsh 1o3OK9qLQrKX3D/c8t9mj4RWaSdFJxVMGXbgOynASQcxpbey5F1KQglYH34r9ssF qVTtOE4SWBRyWotHf0wboW6g3rDrOSq/E4MWu5ydMvMjtuOsixBNnv4vGlxPWA3u B9ptKj5WO96YpPYywCWCWMFpw3LR2ixdX7vHdzE4OPt0HI2t7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFpX8SFtJRX9ux0t4tNhJIu2CVGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjEzZjg5MGUtNWI1OS0z MTk1LTg4MGItMWE4ZDc4MzIxNjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADs/RvgQYDK2AvvXR0zDQujCd0Q+Ptlb0tBc4LTyITIZk8PYoHoL4vl3 X3VABJd3t6QRwNx4xfwgJ8L8VybccTRer74y+JmyjGCP6BBsQ+IW+zGYn/oVOV6S hiq+yHNSR0V6AeoBuFTg0Fh9pgPHQBBcS+q/cqvacg9ZQObqRL3vL0Z97aebX3TV xltkfoef8BYn1llQgOX0q3gPcTeRitIvdG5I6eB+6+3J4n5xmi4DFL4hm7oWA/Ht Mjb5wDICdV07r0DY31jrn00O6A7rdRNLdeP9jb4zZ37DTxenAtLq+T7pvJ8Qa0Hs dPRHbeGl8VNgn4QuHYASnkDitWvG66k= -----END CERTIFICATE-----Generated at Tue Oct 27 18:20:12 2026 by rpki-client