$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f9b17776-29ce-332b-bfef-70c3a6e26fae.roa File: f9b17776-29ce-332b-bfef-70c3a6e26fae.roa (raw, json) Hash identifier: 1X9b9OThPi65FV3z+KaWqAZTCifg6lSt8rRh77BmJW4= Subject key identifier: E7:80:E7:22:98:C9:77:42:52:68:70:76:DB:9F:67:DB:6B:45:C6:38 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F857875FAD5652D79766E9900 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f9b17776-29ce-332b-bfef-70c3a6e26fae.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:75:fa:d5:65:2d:79:76:6e:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=b5f2a2dd-e70c-4bb0-bfcb-1720326a9221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0c:a1:76:69:3c:8e:9f:dd:98:08:e9:e0:e7: 1a:f4:d8:96:fc:db:4e:73:b1:55:0f:c0:4a:e4:c1: 55:00:c9:2f:7f:d9:9b:8c:fb:de:43:17:22:90:26: 73:c1:cf:02:c6:c0:f5:c6:75:72:16:5f:fa:d8:4b: e2:c1:82:48:5b:33:13:be:2f:e2:52:34:63:fc:5e: d8:8d:bd:5c:a5:62:84:61:b1:bd:88:96:91:22:f4: 61:fe:4c:8f:ef:56:b1:6f:b3:86:56:0f:c7:eb:e4: d1:1b:f9:51:bf:d3:fb:95:e3:7f:a3:3d:1e:ee:51: 48:bd:56:cc:59:34:de:90:e5:83:09:14:23:a8:4c: df:2f:23:12:3a:46:36:de:9b:04:1d:6b:5d:7f:e5: 4f:f4:ba:9c:00:19:2c:11:57:f3:3e:2c:d2:90:5b: 9e:3a:e5:23:d2:99:eb:11:68:5b:ac:e6:54:68:da: 62:f0:3e:0e:ae:95:3d:df:a5:c5:f6:68:8f:41:fa: e0:25:59:22:15:ca:77:c7:bf:06:2a:d8:0b:2d:16: 61:75:56:39:eb:38:0b:03:43:ef:24:d9:1b:75:d0: 1c:b8:47:83:5a:b7:43:77:54:3a:9c:3a:29:95:92: 8b:82:37:00:8a:70:0d:99:dc:88:56:cf:f5:ed:89: cc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:80:E7:22:98:C9:77:42:52:68:70:76:DB:9F:67:DB:6B:45:C6:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f9b17776-29ce-332b-bfef-70c3a6e26fae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:ba:24:84:1b:0f:cc:da:db:82:12:75:09:5b:e0:30:0b:f5: d2:ed:6f:fc:ca:38:e1:7c:06:34:ed:5e:b2:bb:21:54:ca:5d: f5:b2:16:f9:66:7d:71:32:0b:71:a9:dc:1c:24:bd:fd:3e:30: b9:c7:37:7c:42:e3:a5:f4:16:b2:90:a3:bc:9b:e8:fe:40:5c: 2d:1e:a9:35:aa:1e:b0:8e:e1:97:a8:37:13:65:1c:74:80:81: 84:2a:58:b6:dd:1b:83:a7:4e:d2:27:62:40:3a:46:2f:d2:a9: 7e:96:4a:31:36:93:b1:db:e0:bb:76:d2:ab:51:67:a7:14:eb: 8a:f8:71:48:69:0d:31:6f:0f:c4:2c:3e:22:30:2f:6d:fd:c6: ad:14:df:98:cc:7c:2b:ec:24:20:5b:63:69:4b:04:6d:ac:f1: cf:16:94:14:93:e5:a3:9f:40:ee:2e:bf:c3:fb:53:33:9a:be: 79:a1:05:a3:74:80:b4:1f:3c:82:f9:d9:20:84:5d:85:5c:f2: a8:fc:55:ef:99:bc:a8:3c:5b:39:e5:0f:a3:09:9d:3f:3d:f1: 96:3e:4b:23:78:4e:b0:2f:52:32:fa:f8:56:8d:d2:9d:ef:82: 78:10:45:81:69:75:29:70:74:92:44:fd:75:91:17:c1:ef:94: 7e:88:de:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeHX61WUteXZumQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk YjVmMmEyZGQtZTcwYy00YmIwLWJmY2ItMTcyMDMyNmE5MjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugyhdmk8jp/dmAjp4Oca9NiW/NtOc7FVD8BK 5MFVAMkvf9mbjPveQxcikCZzwc8CxsD1xnVyFl/62EviwYJIWzMTvi/iUjRj/F7Y jb1cpWKEYbG9iJaRIvRh/kyP71axb7OGVg/H6+TRG/lRv9P7leN/oz0e7lFIvVbM WTTekOWDCRQjqEzfLyMSOkY23psEHWtdf+VP9LqcABksEVfzPizSkFueOuUj0pnr EWhbrOZUaNpi8D4OrpU936XF9miPQfrgJVkiFcp3x78GKtgLLRZhdVY56zgLA0Pv JNkbddAcuEeDWrdDd1Q6nDoplZKLgjcAinANmdyIVs/17YnMhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeA5yKYyXdCUmhwdtufZ9trRcY4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjliMTc3NzYtMjljZS0z MzJiLWJmZWYtNzBjM2E2ZTI2ZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABK6JIQbD8za24ISdQlb4DAL9dLtb/zKOOF8BjTtXrK7IVTKXfWyFvlm fXEyC3Gp3Bwkvf0+MLnHN3xC46X0FrKQo7yb6P5AXC0eqTWqHrCO4ZeoNxNlHHSA gYQqWLbdG4OnTtInYkA6Ri/SqX6WSjE2k7Hb4Lt20qtRZ6cU64r4cUhpDTFvD8Qs PiIwL239xq0U35jMfCvsJCBbY2lLBG2s8c8WlBST5aOfQO4uv8P7UzOavnmhBaN0 gLQfPIL52SCEXYVc8qj8Ve+ZvKg8WznlD6MJnT898ZY+SyN4TrAvUjL6+FaN0p3v gngQRYFpdSlwdJJE/XWRF8HvlH6I3ko= -----END CERTIFICATE-----Generated at Mon Oct 26 02:03:30 2026 by rpki-client