$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/96781fca-906e-351a-8100-dfe1dcb508d0.roa File: 96781fca-906e-351a-8100-dfe1dcb508d0.roa (raw, json) Hash identifier: acQ/0LmFocVSSBZwDCz00dUCjIMgJmSJxERSp1NacFU= Subject key identifier: 4F:82:EF:34:C4:72:00:98:AA:65:63:C0:0C:F8:01:47:62:36:AA:FE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F19FCF75E6A997A2622F5D700 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/96781fca-906e-351a-8100-dfe1dcb508d0.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:f7:5e:6a:99:7a:26:22:f5:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=85ead023-f2b2-4082-a0ba-bffbaa1e957e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:82:5f:2f:46:d4:ac:7e:32:79:f3:31:f5:8d: 90:f7:9e:5c:5a:d1:ba:17:6a:b4:46:db:5e:27:80: 41:e2:a2:3a:e9:af:90:04:89:7c:3f:57:b1:c1:78: 3f:eb:39:76:1b:52:92:65:b5:86:7d:84:0b:56:c3: 35:93:5e:96:92:35:bb:b2:75:b7:32:a9:c6:2e:e7: e0:79:84:a1:89:fc:02:0f:30:9a:74:63:4a:a2:ca: e0:af:68:7d:66:10:cb:61:5b:0e:28:22:d6:4c:d8: 2b:f9:43:df:48:81:5c:6b:3d:4b:ba:ba:5f:9e:dd: c0:b7:b7:50:50:4b:fd:1d:f1:7d:b7:93:b2:b7:5e: 08:80:a3:77:94:0c:df:d6:42:4c:f1:4b:c2:88:67: 42:aa:72:0e:4a:e6:d3:39:02:8e:4a:c3:bc:69:80: 37:49:01:7e:4a:21:7d:dd:97:b1:ce:00:c5:27:5f: 25:31:02:64:4a:ea:42:49:76:5a:01:1c:0c:82:a6: e7:d9:ca:c4:bd:48:eb:b9:be:7d:63:c4:37:be:30: d7:ee:1c:00:66:25:03:11:ab:62:26:ec:d2:7e:3f: 91:bb:ad:1c:f7:f6:99:a6:b2:ba:f9:7f:a1:9c:d3: 68:71:e1:8b:f3:d3:c4:8e:ab:6f:00:30:fd:d5:ff: 6e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:82:EF:34:C4:72:00:98:AA:65:63:C0:0C:F8:01:47:62:36:AA:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/96781fca-906e-351a-8100-dfe1dcb508d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:ed:a7:a9:45:f9:7a:7d:85:19:64:d3:1b:f5:13:d7:f8:d8: 8c:9b:f4:2e:da:d2:27:b8:b1:9e:0d:c8:38:c5:2a:77:f4:ab: 8c:46:9d:93:21:19:2e:02:f1:1f:fb:3c:d8:0e:26:49:f8:c7: 50:3d:c3:1c:27:72:b5:47:28:bd:66:cf:10:43:18:3a:b2:d5: 34:a1:a1:cc:df:03:f0:b5:4c:08:ce:6b:8e:28:54:db:50:9d: 48:d7:33:e6:e7:25:25:8a:45:9f:f0:d6:e7:c7:26:10:dd:c1: 59:6e:dc:a1:2b:d2:4d:f6:e1:e8:72:e8:38:38:3b:d3:7b:29: 9e:01:2e:48:bf:d4:25:ea:d7:65:e8:9a:e8:fa:ba:bb:10:12: e4:0c:d6:77:83:92:5b:78:03:22:b2:4f:6a:3f:6b:47:13:fd: d9:23:08:d8:ca:64:8e:63:62:f1:1f:e9:b6:5f:c9:94:51:12: 46:a2:e3:68:2e:16:2c:f6:52:c6:95:40:da:a7:35:7d:c2:f9: 40:2e:5b:81:c5:6c:da:30:c9:86:18:63:d0:d7:66:ab:e3:2e: 58:54:81:d2:a9:d7:14:3a:a5:f1:bd:2d:94:c3:7c:34:60:ac: 40:72:45:9f:01:cf:39:45:e5:22:f9:43:c4:11:0e:18:25:93: 7b:9b:d7:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/Pdeapl6JiL11wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk ODVlYWQwMjMtZjJiMi00MDgyLWEwYmEtYmZmYmFhMWU5NTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIJfL0bUrH4yefMx9Y2Q955cWtG6F2q0Rtte J4BB4qI66a+QBIl8P1exwXg/6zl2G1KSZbWGfYQLVsM1k16WkjW7snW3MqnGLufg eYShifwCDzCadGNKosrgr2h9ZhDLYVsOKCLWTNgr+UPfSIFcaz1Lurpfnt3At7dQ UEv9HfF9t5Oyt14IgKN3lAzf1kJM8UvCiGdCqnIOSubTOQKOSsO8aYA3SQF+SiF9 3ZexzgDFJ18lMQJkSupCSXZaARwMgqbn2crEvUjrub59Y8Q3vjDX7hwAZiUDEati JuzSfj+Ru60c9/aZprK6+X+hnNNoceGL89PEjqtvADD91f9ugwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+C7zTEcgCYqmVjwAz4AUdiNqr+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTY3ODFmY2EtOTA2ZS0z NTFhLTgxMDAtZGZlMWRjYjUwOGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjtp6lF+Xp9hRlk0xv1E9f42Iyb9C7a0ie4sZ4NyDjFKnf0q4xGnZMh GS4C8R/7PNgOJkn4x1A9wxwncrVHKL1mzxBDGDqy1TShoczfA/C1TAjOa44oVNtQ nUjXM+bnJSWKRZ/w1ufHJhDdwVlu3KEr0k324ehy6Dg4O9N7KZ4BLki/1CXq12Xo muj6ursQEuQM1neDklt4AyKyT2o/a0cT/dkjCNjKZI5jYvEf6bZfyZRREkai42gu Fiz2UsaVQNqnNX3C+UAuW4HFbNowyYYYY9DXZqvjLlhUgdKp1xQ6pfG9LZTDfDRg rEByRZ8BzzlF5SL5Q8QRDhglk3ub108= -----END CERTIFICATE-----Generated at Mon Sep 28 19:08:27 2026 by rpki-client