$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/294e9347-de22-31e7-bfc5-75bd383b4a41.roa File: 294e9347-de22-31e7-bfc5-75bd383b4a41.roa (raw, json) Hash identifier: PjakLnDdv3vpZyRY1yiEW0Ga/8WjUIaNfg5DjE/Xmyc= Subject key identifier: C2:CB:CE:4A:78:41:8D:50:AF:99:BB:36:74:40:75:DB:89:03:2D:81 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F1E2CFC7E625514A5333B2380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/294e9347-de22-31e7-bfc5-75bd383b4a41.roa Signing time: Wed 09 Sep 2026 13:00:11 +0000 ROA not before: Wed 09 Sep 2026 13:00:11 +0000 ROA not after: Tue 08 Dec 2026 14:00:11 +0000 asID: 8069 IP address blocks: 20.33.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:2c:fc:7e:62:55:14:a5:33:3b:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 9 13:00:11 2026 GMT Not After : Dec 8 14:00:11 2026 GMT Subject: CN=765af251-c863-4809-8608-5ca44bc5ce2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:94:6a:4d:05:32:a2:39:07:93:73:1a:a4:35: 75:f0:60:8e:75:6e:7d:a7:2f:a1:8c:34:59:7d:53: c3:9e:53:7b:7c:f2:df:1a:54:82:4c:91:d8:e2:90: 15:53:13:3d:ff:06:e0:ee:f8:15:cc:58:7d:34:8c: 39:a9:ee:d4:c1:0e:d8:f1:3e:b4:02:09:6a:fa:72: b2:da:17:72:c6:4d:65:78:2d:47:a2:e1:84:56:61: 18:62:73:ae:98:67:8f:e7:ab:33:b3:15:11:12:1a: 4a:84:72:a2:86:53:b8:7f:26:35:da:e3:01:0e:cb: 98:9b:1e:09:3d:6b:f5:eb:60:33:ed:07:7a:8f:f0: 00:4b:09:e5:e4:51:4d:ca:cf:d2:34:f8:2c:62:e1: 30:67:ce:76:c8:ac:66:6b:c7:6a:90:58:95:84:df: da:92:74:11:84:44:3d:5d:51:bd:86:6d:4f:0d:a5: 2e:6a:6c:92:91:10:d2:5b:eb:ab:4a:ce:bb:32:8e: ea:72:37:09:42:d3:12:98:3f:66:04:61:28:60:ff: 65:12:ce:ce:8d:3d:94:37:e0:22:c4:50:7f:79:5e: 65:62:35:39:f2:12:7a:99:02:b2:81:6a:09:88:52: dc:ad:19:fd:84:3e:07:b2:91:65:48:b8:00:c2:c4: 05:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CB:CE:4A:78:41:8D:50:AF:99:BB:36:74:40:75:DB:89:03:2D:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/294e9347-de22-31e7-bfc5-75bd383b4a41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:17:39:16:ab:05:b5:46:73:d7:55:f6:6f:91:6d:fb:b5:6c: 9d:f3:b9:93:49:52:d5:5e:09:e3:34:96:ce:9e:f9:ba:1f:98: 90:8a:d3:a8:e2:29:9f:b0:b2:3a:47:0c:f8:86:f9:58:39:44: 8b:82:73:ed:d7:f0:dd:a8:95:f0:d6:a7:5f:ea:71:c2:80:a9: 45:5b:be:00:10:4d:16:b4:91:85:a1:ab:f6:ca:fc:21:c8:3e: 00:bf:8a:78:5f:30:d7:22:c3:01:55:43:30:a5:d5:db:02:4d: 06:ce:81:57:36:1d:04:9d:83:a4:06:48:a1:64:d2:92:58:da: f5:aa:d6:e5:01:c1:1c:16:66:e5:ec:0c:26:ce:63:31:bf:46: 03:6d:97:2e:3f:15:ee:9d:ba:e7:35:c3:2b:d0:6f:2f:3f:62: 94:1a:1a:e7:08:4f:96:bf:37:b4:69:97:7b:37:ac:67:14:b1: b4:e2:5b:35:09:b7:34:30:38:96:b6:fd:61:b9:18:65:94:b0: be:70:26:68:45:77:58:fc:98:3e:91:08:a7:5e:75:1d:9a:8c: f6:25:eb:28:83:e7:32:8a:22:79:7f:12:d1:66:93:69:ae:a0: 80:8e:5f:e3:23:58:03:b0:36:05:2b:00:27:ac:b8:cd:fa:ba: 6e:3f:03:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eLPx+YlUUpTM7I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk NzY1YWYyNTEtYzg2My00ODA5LTg2MDgtNWNhNDRiYzVjZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpRqTQUyojkHk3MapDV18GCOdW59py+hjDRZ fVPDnlN7fPLfGlSCTJHY4pAVUxM9/wbg7vgVzFh9NIw5qe7UwQ7Y8T60Aglq+nKy 2hdyxk1leC1HouGEVmEYYnOumGeP56szsxUREhpKhHKihlO4fyY12uMBDsuYmx4J PWv162Az7Qd6j/AASwnl5FFNys/SNPgsYuEwZ852yKxma8dqkFiVhN/aknQRhEQ9 XVG9hm1PDaUuamySkRDSW+urSs67Mo7qcjcJQtMSmD9mBGEoYP9lEs7OjT2UN+Ai xFB/eV5lYjU58hJ6mQKygWoJiFLcrRn9hD4HspFlSLgAwsQFrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLLzkp4QY1Qr5m7NnRAdduJAy2BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjk0ZTkzNDctZGUyMi0z MWU3LWJmYzUtNzViZDM4M2I0YTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQXORarBbVGc9dV9m+Rbfu1bJ3zuZNJUtVeCeM0ls6e+bofmJCK06ji KZ+wsjpHDPiG+Vg5RIuCc+3X8N2olfDWp1/qccKAqUVbvgAQTRa0kYWhq/bK/CHI PgC/inhfMNciwwFVQzCl1dsCTQbOgVc2HQSdg6QGSKFk0pJY2vWq1uUBwRwWZuXs DCbOYzG/RgNtly4/Fe6duuc1wyvQby8/YpQaGucIT5a/N7Rpl3s3rGcUsbTiWzUJ tzQwOJa2/WG5GGWUsL5wJmhFd1j8mD6RCKdedR2ajPYl6yiD5zKKInl/EtFmk2mu oICOX+MjWAOwNgUrACesuM36um4/A7Y= -----END CERTIFICATE-----Generated at Sun Sep 27 12:36:56 2026 by rpki-client