$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4dd409f5-81c8-3feb-986f-28c676a7eb94.roa File: 4dd409f5-81c8-3feb-986f-28c676a7eb94.roa (raw, json) Hash identifier: ue3hx/m5fSQMk+jzaZENCljLAwsJK6ZSgA0AztxbsWo= Subject key identifier: 82:64:6D:59:40:D8:62:C5:3A:E2:47:1D:3B:EE:5E:4E:4E:D8:41:54 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F15CCFE459D7841BF1829E800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4dd409f5-81c8-3feb-986f-28c676a7eb94.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:fe:45:9d:78:41:bf:18:29:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=10250414-3868-4943-81d9-6ffe5daab8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9a:d9:57:7e:d2:75:8a:88:52:d3:e9:6a:df: b4:a2:78:39:eb:99:94:31:00:97:4d:5c:71:d0:a8: 70:2c:bb:45:cd:d7:4a:95:7a:00:45:a7:d4:a5:f9: 81:73:39:32:49:e3:9d:18:1a:e4:c8:aa:df:f2:8e: 3f:94:7a:a1:d7:35:9c:cd:75:a4:a5:97:f0:3a:67: 55:9e:82:4e:a5:6b:6f:ce:55:4a:06:e7:c7:68:5f: c9:11:63:25:bb:80:fc:1e:e5:b5:ce:39:6e:f1:d6: 72:ce:a3:8c:3e:b1:67:25:09:5d:e4:2b:2a:25:91: 1e:99:5c:3c:84:71:a3:ec:38:26:2e:c3:c5:6c:97: 3e:05:df:1c:03:7d:2c:e6:66:8c:3f:76:48:a4:ce: 95:9f:ab:84:65:40:8d:4d:d9:73:87:7b:78:b6:ba: 6e:f2:0b:36:32:0e:7e:35:4b:51:e7:1f:b4:68:06: 69:5e:23:48:f4:44:20:45:c2:cc:4b:42:ba:c3:50: df:49:08:79:0a:28:b4:0b:b0:59:21:66:fe:ca:a5: 12:a0:ec:c9:60:b8:3d:03:86:a0:5f:c1:f4:72:87: 9b:ce:c8:d6:a7:c6:6e:ce:ce:86:55:42:25:6b:2a: 7c:8a:ab:66:04:8b:46:5e:b4:9e:9f:ad:fd:fd:c0: 65:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:64:6D:59:40:D8:62:C5:3A:E2:47:1D:3B:EE:5E:4E:4E:D8:41:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4dd409f5-81c8-3feb-986f-28c676a7eb94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:e3:0f:38:54:29:28:ca:e7:0d:89:12:83:9b:6f:76:63:8f: 29:0a:fa:47:f4:39:25:ee:e9:74:aa:aa:0f:85:6e:e3:d5:d0: 30:03:b0:c3:af:e9:25:80:15:4d:13:ee:5e:2e:38:b8:7c:72: 0d:6c:4d:5e:ff:8e:05:0c:41:ea:44:b6:21:ef:7e:b7:a4:86: 05:c3:43:22:cb:80:55:a3:a9:63:15:32:55:b9:f9:6b:ec:62: b9:9e:29:04:38:24:72:71:78:d5:6a:5e:74:fa:18:0c:fa:42: 4f:53:40:ec:66:6f:77:19:58:f5:88:0a:e2:8f:64:54:85:c3: 23:f6:f3:e2:07:d9:50:1b:dc:c9:1f:dd:63:e5:7d:af:f0:d3: 76:20:25:97:bd:94:00:c6:02:e0:d0:e2:4e:68:d7:e3:5a:dd: 6a:5a:87:f0:da:9b:31:fc:db:b9:b8:d3:b3:03:40:07:c6:c9: 24:9a:01:5e:c1:43:d5:68:61:47:26:48:cb:da:cb:60:f2:4b: a8:97:62:92:9a:c3:97:34:38:3d:44:db:3f:fc:a5:b9:c8:06: b3:7d:3f:82:bf:4d:b1:68:98:63:e0:a6:65:9f:f1:5d:ca:e1: da:9a:69:7b:ed:37:58:5d:46:8a:e7:26:d7:e1:61:fe:4e:ff: 43:2c:d0:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzP5FnXhBvxgp6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk MTAyNTA0MTQtMzg2OC00OTQzLTgxZDktNmZmZTVkYWFiOGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZrZV37SdYqIUtPpat+0ong565mUMQCXTVxx 0KhwLLtFzddKlXoARafUpfmBczkySeOdGBrkyKrf8o4/lHqh1zWczXWkpZfwOmdV noJOpWtvzlVKBufHaF/JEWMlu4D8HuW1zjlu8dZyzqOMPrFnJQld5CsqJZEemVw8 hHGj7DgmLsPFbJc+Bd8cA30s5maMP3ZIpM6Vn6uEZUCNTdlzh3t4trpu8gs2Mg5+ NUtR5x+0aAZpXiNI9EQgRcLMS0K6w1DfSQh5Cii0C7BZIWb+yqUSoOzJYLg9A4ag X8H0coebzsjWp8Zuzs6GVUIlayp8iqtmBItGXrSen639/cBlgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJkbVlA2GLFOuJHHTvuXk5O2EFUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGRkNDA5ZjUtODFjOC0z ZmViLTk4NmYtMjhjNjc2YTdlYjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzjDzhUKSjK5w2JEoObb3ZjjykK+kf0OSXu6XSqqg+FbuPV0DADsMOv 6SWAFU0T7l4uOLh8cg1sTV7/jgUMQepEtiHvfrekhgXDQyLLgFWjqWMVMlW5+Wvs YrmeKQQ4JHJxeNVqXnT6GAz6Qk9TQOxmb3cZWPWICuKPZFSFwyP28+IH2VAb3Mkf 3WPlfa/w03YgJZe9lADGAuDQ4k5o1+Na3Wpah/DamzH827m407MDQAfGySSaAV7B Q9VoYUcmSMvay2DyS6iXYpKaw5c0OD1E2z/8pbnIBrN9P4K/TbFomGPgpmWf8V3K 4dqaaXvtN1hdRornJtfhYf5O/0Ms0O8= -----END CERTIFICATE-----Generated at Mon Sep 28 12:21:28 2026 by rpki-client