$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b12175cf-2702-3731-83e8-14996dac56a9.roa File: b12175cf-2702-3731-83e8-14996dac56a9.roa (raw, json) Hash identifier: tJNog1lkN2lopaboOeX/XF6M7U3U8804glirdQOYJpA= Subject key identifier: 3D:7E:87:E2:B9:59:56:30:35:C1:3E:7A:66:1F:1F:70:7A:F1:84:B9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F698D8ACC6192DB8815A43B00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b12175cf-2702-3731-83e8-14996dac56a9.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 8069 IP address blocks: 20.33.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:8a:cc:61:92:db:88:15:a4:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=d25bcdf1-6b20-47c7-9cda-f5266150b823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3d:b8:bb:70:c2:8a:97:5f:20:20:82:76:07: 8e:a5:1c:7c:cb:55:bf:5e:fe:76:4c:95:f6:cd:9d: 26:1b:e0:58:31:f5:52:46:48:54:e7:ff:be:e8:9d: 00:6f:69:56:d4:ef:01:5c:6c:08:49:87:ea:80:c7: 70:8b:87:28:4d:02:85:67:14:fc:db:70:f4:85:3f: b1:62:1f:2e:b0:ed:71:9b:c5:cd:2e:30:60:f7:c7: fe:5d:97:48:d6:5d:f9:9f:2f:e2:40:82:5e:25:f4: 2e:40:a1:96:0b:7b:56:ed:b9:70:a0:7b:2f:62:bc: 64:43:15:71:e3:5a:80:cc:c5:b6:64:a3:50:ed:a1: 2d:c2:20:e6:43:72:0c:26:3a:8e:3f:31:b2:4b:50: b9:5d:2b:b7:20:a3:68:e9:db:67:a6:a3:b6:eb:2f: 04:3f:53:2b:0c:2d:e8:6f:1c:a6:03:44:13:b6:f1: 7c:eb:b0:af:f2:8b:30:31:3b:38:b8:22:b5:a2:ff: fd:e6:d2:65:c3:22:86:96:76:fc:c9:85:65:ad:67: 18:18:35:04:1b:58:e4:e8:0e:aa:13:c2:61:8c:11: 35:f1:43:65:23:c9:8a:98:94:fe:75:29:82:d2:34: 40:70:7f:5b:9d:66:e6:d9:03:42:f4:58:8b:b8:ea: 16:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7E:87:E2:B9:59:56:30:35:C1:3E:7A:66:1F:1F:70:7A:F1:84:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b12175cf-2702-3731-83e8-14996dac56a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:b4:2a:46:58:89:59:15:e4:5d:4e:2b:b1:53:76:6f:63:b7: 2d:57:8e:08:ce:a6:64:03:d8:23:cf:07:be:46:62:a2:90:9d: 29:74:85:73:b5:bf:d9:22:9a:46:2a:06:44:3d:a5:fd:f2:77: 98:df:65:93:a4:47:0e:0a:1b:5e:32:c2:ff:04:c5:11:a2:0e: 82:23:2a:4c:9c:0d:07:28:af:9a:c9:2c:bd:de:05:4d:e2:0d: cf:1e:69:63:0c:c0:27:23:e4:5a:54:8c:e9:8a:08:83:d8:c6: 58:d7:b1:ff:a9:f6:a1:5b:0c:a1:59:ba:9d:3c:30:ea:8e:2c: 0d:18:74:43:b1:9b:af:43:0c:2d:fc:3a:f1:3f:5d:77:5b:80: 63:ed:04:59:44:4c:c3:28:e8:c9:21:f4:5b:23:22:35:47:8d: 3f:e8:40:0e:55:14:a0:66:23:c3:d5:16:2a:3a:12:ca:64:ae: 08:3e:33:fd:30:19:6d:23:66:e8:9b:45:71:84:a3:62:97:6b: b2:a6:00:6c:a4:8f:3d:57:f4:cd:3d:15:7e:52:6a:31:aa:33: b1:ca:d2:41:15:3d:76:6d:36:4f:d5:4d:54:94:b6:3b:84:76: 84:d6:1e:71:2c:5d:6a:ee:4f:a7:c7:44:3c:1f:e9:7a:7a:e0: c8:4f:eb:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjYrMYZLbiBWkOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk ZDI1YmNkZjEtNmIyMC00N2M3LTljZGEtZjUyNjYxNTBiODIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT24u3DCipdfICCCdgeOpRx8y1W/Xv52TJX2 zZ0mG+BYMfVSRkhU5/++6J0Ab2lW1O8BXGwISYfqgMdwi4coTQKFZxT823D0hT+x Yh8usO1xm8XNLjBg98f+XZdI1l35ny/iQIJeJfQuQKGWC3tW7blwoHsvYrxkQxVx 41qAzMW2ZKNQ7aEtwiDmQ3IMJjqOPzGyS1C5XSu3IKNo6dtnpqO26y8EP1MrDC3o bxymA0QTtvF867Cv8oswMTs4uCK1ov/95tJlwyKGlnb8yYVlrWcYGDUEG1jk6A6q E8JhjBE18UNlI8mKmJT+dSmC0jRAcH9bnWbm2QNC9FiLuOoW/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1+h+K5WVYwNcE+emYfH3B68YS5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjEyMTc1Y2YtMjcwMi0z NzMxLTgzZTgtMTQ5OTZkYWM1NmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKO0KkZYiVkV5F1OK7FTdm9jty1XjgjOpmQD2CPPB75GYqKQnSl0hXO1 v9kimkYqBkQ9pf3yd5jfZZOkRw4KG14ywv8ExRGiDoIjKkycDQcor5rJLL3eBU3i Dc8eaWMMwCcj5FpUjOmKCIPYxljXsf+p9qFbDKFZup08MOqOLA0YdEOxm69DDC38 OvE/XXdbgGPtBFlETMMo6Mkh9FsjIjVHjT/oQA5VFKBmI8PVFio6Espkrgg+M/0w GW0jZuibRXGEo2KXa7KmAGykjz1X9M09FX5SajGqM7HK0kEVPXZtNk/VTVSUtjuE doTWHnEsXWruT6fHRDwf6Xp64MhP6yY= -----END CERTIFICATE-----Generated at Sat Oct 10 14:44:04 2026 by rpki-client