$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/37580c0c-2a55-33b3-8370-f1de0df7a3d3.roa File: 37580c0c-2a55-33b3-8370-f1de0df7a3d3.roa (raw, json) Hash identifier: 32Tr4/1f2Yzz62EKXg8MneqRnCs5RfEK7qJMqFcBF7A= Subject key identifier: DE:99:39:28:3E:91:0E:70:61:CD:6A:CB:AE:A4:11:F6:92:B6:64:5B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F62930BB5D92BEB191BA06E00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/37580c0c-2a55-33b3-8370-f1de0df7a3d3.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 8069 IP address blocks: 20.33.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:0b:b5:d9:2b:eb:19:1b:a0:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=30fdd163-4ff2-46b9-a390-8a7e8a0304bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a6:11:f4:c0:80:73:84:ca:01:71:c9:c3:59: 92:de:70:ac:a0:05:3c:2a:72:d0:c3:77:0c:1e:11: 78:ba:8d:76:a5:9d:53:16:6b:66:39:06:f1:70:78: ee:48:a3:10:5f:9f:96:bc:bb:7e:c2:6c:cd:44:a7: 1c:3e:19:ee:36:cc:e4:23:0d:25:89:89:a0:ff:76: 8e:5d:7d:30:40:e0:5b:ab:15:57:d6:57:bb:92:03: f0:04:1f:eb:e5:0b:2c:75:90:ad:52:09:eb:bc:13: 5a:93:7a:c2:2f:cb:78:76:48:39:11:12:f4:83:04: 5d:34:f0:fb:f6:a5:b2:bd:5e:d2:cf:f0:7c:e9:6d: e0:cb:17:f5:ba:ae:43:f4:ef:7a:92:46:80:1f:a6: 9b:58:68:5c:d0:13:f2:d9:bf:c4:b7:a3:37:0e:c1: a7:04:8f:a5:c1:c7:b6:b4:d5:c0:5c:07:97:7d:40: 8e:25:3e:64:93:cb:70:ef:be:d5:be:39:44:87:ad: 31:1f:8b:63:dd:59:a1:64:52:b4:c2:ad:ec:72:d6: 45:c2:01:d4:dc:53:0d:20:e9:36:35:a5:6b:72:cb: ed:fc:5e:50:70:e3:64:6c:df:da:69:12:11:f4:b7: 1c:34:aa:c2:3a:65:f0:9d:a1:b9:65:0c:28:52:01: 53:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:99:39:28:3E:91:0E:70:61:CD:6A:CB:AE:A4:11:F6:92:B6:64:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/37580c0c-2a55-33b3-8370-f1de0df7a3d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:03:e7:59:26:00:9e:b7:b1:a7:7f:2c:6d:e1:2e:d4:6a:23: 92:05:3d:28:10:99:f5:dd:ca:41:36:68:3b:c8:b8:d8:71:96: 44:9c:1f:5e:26:f0:cc:08:8e:f6:ff:25:43:f0:74:5c:47:93: fd:71:26:8f:b6:5f:bb:5a:75:73:c4:a6:3f:bd:e4:c9:95:9f: e4:35:42:80:51:4b:34:ce:a1:9a:25:88:db:69:e6:d6:29:5c: d4:52:94:cb:bb:d0:69:eb:68:a0:d5:b6:2a:0d:93:c2:88:87: dd:60:9c:28:f3:4e:23:4b:d5:9a:b9:fb:15:d5:57:8f:ff:e0: 48:f8:d6:95:90:04:6f:91:74:71:62:fb:0d:23:59:80:e3:ce: ae:f6:6c:6a:8e:20:b8:aa:73:50:e7:88:1d:6a:2b:bb:b1:58: b3:20:2a:fe:23:76:a0:76:67:19:6f:4a:42:d4:5c:cd:1e:55: 8d:9d:ae:8f:f8:9c:1c:3f:15:3f:1e:2e:d1:89:63:71:90:a3: 46:4c:f1:e3:5c:fb:6f:75:05:ac:84:87:05:ba:7a:fd:a0:e0: 71:1b:d4:53:ed:24:e8:65:e3:0e:ed:38:f9:cc:12:92:6c:d6: 6f:cf:66:1b:fa:4f:02:98:97:72:91:57:30:c2:39:9a:41:f5: 4a:93:1c:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwu12SvrGRugbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MzBmZGQxNjMtNGZmMi00NmI5LWEzOTAtOGE3ZThhMDMwNGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKYR9MCAc4TKAXHJw1mS3nCsoAU8KnLQw3cM HhF4uo12pZ1TFmtmOQbxcHjuSKMQX5+WvLt+wmzNRKccPhnuNszkIw0liYmg/3aO XX0wQOBbqxVX1le7kgPwBB/r5QssdZCtUgnrvBNak3rCL8t4dkg5ERL0gwRdNPD7 9qWyvV7Sz/B86W3gyxf1uq5D9O96kkaAH6abWGhc0BPy2b/Et6M3DsGnBI+lwce2 tNXAXAeXfUCOJT5kk8tw777VvjlEh60xH4tj3VmhZFK0wq3sctZFwgHU3FMNIOk2 NaVrcsvt/F5QcONkbN/aaRIR9LccNKrCOmXwnaG5ZQwoUgFT4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6ZOSg+kQ5wYc1qy66kEfaStmRbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzc1ODBjMGMtMmE1NS0z M2IzLTgzNzAtZjFkZTBkZjdhM2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUD51kmAJ63sad/LG3hLtRqI5IFPSgQmfXdykE2aDvIuNhxlkScH14m 8MwIjvb/JUPwdFxHk/1xJo+2X7tadXPEpj+95MmVn+Q1QoBRSzTOoZoliNtp5tYp XNRSlMu70GnraKDVtioNk8KIh91gnCjzTiNL1Zq5+xXVV4//4Ej41pWQBG+RdHFi +w0jWYDjzq72bGqOILiqc1DniB1qK7uxWLMgKv4jdqB2ZxlvSkLUXM0eVY2dro/4 nBw/FT8eLtGJY3GQo0ZM8eNc+291BayEhwW6ev2g4HEb1FPtJOhl4w7tOPnMEpJs 1m/PZhv6TwKYl3KRVzDCOZpB9UqTHLM= -----END CERTIFICATE-----Generated at Sat Oct 10 16:54:42 2026 by rpki-client