$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/35b9c925-cda6-3421-a583-d46714bddd70.roa File: 35b9c925-cda6-3421-a583-d46714bddd70.roa (raw, json) Hash identifier: jY2tns9BHq3TJtpqepAADYCZguZtqgnMXEIe6LCMFSM= Subject key identifier: 31:67:76:67:EE:FE:D0:57:5F:5C:BB:5E:8F:E7:5A:99:C6:20:50:CC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F5E62C94C5D0CC8414DE80EC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/35b9c925-cda6-3421-a583-d46714bddd70.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 8069 IP address blocks: 20.33.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:c9:4c:5d:0c:c8:41:4d:e8:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=769e161b-ba17-4393-877a-feafdc8330be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f7:c9:2f:d3:94:ee:c5:98:5f:83:18:54:21: 35:17:a9:37:e6:52:04:d5:bf:8d:8b:b8:bc:ba:81: f5:9e:3a:6b:42:dc:1c:ac:21:d7:8e:fc:ab:37:23: 04:e5:34:7f:5d:89:19:e1:9c:d3:09:36:07:ee:48: 70:93:ab:eb:d4:0c:c5:28:eb:60:c3:c7:a2:29:c0: a3:d6:73:90:5b:c0:c0:b3:c0:c2:dd:c0:a0:2d:d7: 2b:2e:5b:ff:ae:b8:a7:34:c9:a3:56:d7:47:45:91: 5d:c3:24:88:86:e9:66:e7:3e:2d:0a:d9:51:09:3f: e2:80:61:47:94:ea:6a:a7:2b:e5:bf:e3:08:85:a9: 55:2e:08:66:43:48:41:42:34:9e:32:ab:89:3a:e0: ef:5f:1d:21:4f:61:55:90:71:e4:99:8c:85:85:1b: 22:55:0c:cb:6c:08:c1:aa:62:14:67:4f:7e:b5:f7: 40:d7:f1:53:37:43:ad:cc:52:7f:19:e0:aa:e5:09: 25:c9:51:67:e2:7d:15:9e:d5:b8:c5:a0:5f:7b:24: 2e:25:d3:a4:f0:bc:6d:a2:f1:51:d6:62:c0:50:89: 2a:0f:bf:b2:68:49:5e:5b:4e:87:da:61:de:a0:e0: ae:5b:0f:39:2c:17:c5:39:16:11:1d:db:4a:90:dc: 70:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:67:76:67:EE:FE:D0:57:5F:5C:BB:5E:8F:E7:5A:99:C6:20:50:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/35b9c925-cda6-3421-a583-d46714bddd70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:63:51:1d:d5:ce:97:82:55:8a:bc:28:01:c5:c7:5e:fe:f5: 5c:c2:09:25:b9:fe:7f:ec:69:72:7a:54:2b:13:47:0f:28:b7: 12:44:ab:f8:26:d1:b1:bc:3d:9b:12:a7:57:aa:ab:43:ed:0e: 6d:b7:6c:4d:42:40:d3:f1:c2:04:2e:48:43:58:84:c0:ba:b2: 31:45:ae:7e:b2:cc:6b:1a:40:00:cb:81:07:b2:85:57:9d:af: bd:60:74:d8:b7:ec:3a:b9:2e:69:a5:d3:72:1b:22:f3:16:c0: 98:fe:a8:7f:42:72:06:92:44:37:e9:24:b8:4a:70:a7:ca:8f: 75:58:9d:e4:24:3b:32:9b:78:81:77:49:09:df:81:33:a5:9e: 7e:06:ca:12:4e:b1:ad:e4:72:77:d6:56:99:09:aa:38:eb:93: ef:1f:5a:b8:b2:0d:03:c9:17:b2:92:68:fe:c0:fd:89:6f:30: 8c:90:41:3c:ef:e0:26:db:79:77:51:5d:32:1b:a6:03:5e:c4: da:de:6d:1e:10:ae:52:8c:30:54:af:43:f9:dc:73:a5:2b:3f: 40:1a:31:48:95:0c:09:2a:fe:ef:23:d9:59:80:5c:4d:40:db: 0b:20:d1:ab:18:0e:25:03:81:65:e5:35:f8:1d:3d:58:63:02: f3:df:24:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYslMXQzIQU3oDsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk NzY5ZTE2MWItYmExNy00MzkzLTg3N2EtZmVhZmRjODMzMGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvfJL9OU7sWYX4MYVCE1F6k35lIE1b+Ni7i8 uoH1njprQtwcrCHXjvyrNyME5TR/XYkZ4ZzTCTYH7khwk6vr1AzFKOtgw8eiKcCj 1nOQW8DAs8DC3cCgLdcrLlv/rrinNMmjVtdHRZFdwySIhulm5z4tCtlRCT/igGFH lOpqpyvlv+MIhalVLghmQ0hBQjSeMquJOuDvXx0hT2FVkHHkmYyFhRsiVQzLbAjB qmIUZ09+tfdA1/FTN0OtzFJ/GeCq5QklyVFn4n0VntW4xaBfeyQuJdOk8LxtovFR 1mLAUIkqD7+yaEleW06H2mHeoOCuWw85LBfFORYRHdtKkNxwiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFndmfu/tBXX1y7Xo/nWpnGIFDMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzViOWM5MjUtY2RhNi0z NDIxLWE1ODMtZDQ2NzE0YmRkZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCESMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1jUR3VzpeCVYq8KAHFx17+9VzCCSW5/n/saXJ6VCsTRw8otxJEq/gm 0bG8PZsSp1eqq0PtDm23bE1CQNPxwgQuSENYhMC6sjFFrn6yzGsaQADLgQeyhVed r71gdNi37Dq5Lmml03IbIvMWwJj+qH9CcgaSRDfpJLhKcKfKj3VYneQkOzKbeIF3 SQnfgTOlnn4GyhJOsa3kcnfWVpkJqjjrk+8fWriyDQPJF7KSaP7A/YlvMIyQQTzv 4CbbeXdRXTIbpgNexNrebR4QrlKMMFSvQ/ncc6UrP0AaMUiVDAkq/u8j2VmAXE1A 2wsg0asYDiUDgWXlNfgdPVhjAvPfJCc= -----END CERTIFICATE-----Generated at Sat Oct 10 13:33:42 2026 by rpki-client