$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8980512-7775-361d-924e-d23443bde100.roa File: c8980512-7775-361d-924e-d23443bde100.roa (raw, json) Hash identifier: urIW+kZqJ9W9WBOjJGdC5lmslFDxjmvvV6bKUy4Uzi4= Subject key identifier: 97:24:84:67:D1:47:5E:BA:0D:12:8E:07:F0:04:DF:F2:22:E6:0E:E7 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F15CCFE2E4784C5316BF26B80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8980512-7775-361d-924e-d23443bde100.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:fe:2e:47:84:c5:31:6b:f2:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=13318cb7-9384-4330-b1f7-4dbbeb3ce84f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7d:5e:b7:01:3e:45:36:e1:40:65:6a:c2:f4: fd:51:33:b8:e0:a3:b0:45:a2:b8:c8:43:a5:4e:d9: 3b:c6:9d:f2:6c:29:dd:28:bb:aa:1f:f5:e5:92:c6: e5:cd:3d:35:29:b8:d4:c0:7e:98:b1:24:0c:ff:2f: 05:25:91:27:45:29:f9:9e:e4:fe:ab:2c:cc:06:51: 64:11:e1:e2:34:61:88:9d:d3:90:43:d7:8e:43:09: 0d:23:27:e7:f3:a5:02:4e:c2:df:4d:4d:5a:b8:0d: 3a:f7:ce:66:bd:1c:21:25:1c:e2:3e:73:86:12:6a: 7e:da:67:66:8b:b1:cb:06:22:12:7f:47:6e:99:d5: db:70:19:e8:af:90:eb:cc:6e:3c:75:c8:fd:fb:0a: be:74:29:99:e9:27:dd:e0:13:22:59:a3:75:b0:b1: d7:1a:ae:5f:1a:6b:48:c5:a7:75:36:07:5a:e3:e3: 79:75:fc:b4:63:10:92:26:87:be:29:69:c5:b6:2a: b9:9d:21:e6:0a:0c:37:31:e2:97:c5:52:1b:96:4e: 84:b0:68:55:dd:35:89:40:69:77:70:57:fd:1f:72: 6f:54:2b:53:be:a3:76:20:c5:82:b9:1f:ce:a0:de: c4:25:4f:d2:ea:47:04:56:ff:7c:0c:30:c6:c8:ce: 5b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:24:84:67:D1:47:5E:BA:0D:12:8E:07:F0:04:DF:F2:22:E6:0E:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8980512-7775-361d-924e-d23443bde100.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:bd:1d:f9:40:b0:e9:d0:a9:ad:39:a6:00:b8:57:1d:77:c7: 6f:e1:03:91:4c:23:42:ef:a5:d3:2b:16:3c:03:67:0f:af:f6: c6:b7:40:11:75:fc:08:3a:01:de:5d:7d:d9:39:cd:9c:31:a4: da:eb:cf:2c:7d:21:fe:fc:21:11:26:24:94:6d:e0:e1:af:81: 07:ef:c0:b6:96:33:fb:18:5c:cf:05:af:ad:11:8f:70:a1:7a: b1:23:db:3f:f5:f9:5d:95:e4:36:17:93:7d:5c:52:94:13:42: 97:c7:60:25:fb:e6:0a:d6:d9:e6:a7:02:b5:38:8b:35:31:69: cc:c3:6d:11:0b:c6:b3:55:79:61:b9:00:0b:95:ac:6a:3d:b7: 80:69:9a:78:b8:d4:6b:a9:35:e8:9e:03:15:88:10:b1:54:ed: 05:26:a1:1a:37:f4:6b:e8:34:cb:8d:17:f9:f0:a0:32:f2:5b: e8:99:bb:ad:48:72:4c:98:e0:75:44:81:aa:da:39:0d:fd:ba: 3f:c5:65:13:41:a0:67:d3:37:c1:f2:83:24:7a:ed:3e:fd:d5: a7:22:c3:24:2d:9c:51:3d:a4:e6:cc:d0:4e:60:23:f3:85:0a: 6e:9c:eb:46:72:3c:1a:53:e7:ef:72:78:6a:6d:fd:65:6f:7f: 51:cf:94:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzP4uR4TFMWvya4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk MTMzMThjYjctOTM4NC00MzMwLWIxZjctNGRiYmViM2NlODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhn1etwE+RTbhQGVqwvT9UTO44KOwRaK4yEOl Ttk7xp3ybCndKLuqH/XlksblzT01KbjUwH6YsSQM/y8FJZEnRSn5nuT+qyzMBlFk EeHiNGGIndOQQ9eOQwkNIyfn86UCTsLfTU1auA06985mvRwhJRziPnOGEmp+2mdm i7HLBiISf0dumdXbcBnor5DrzG48dcj9+wq+dCmZ6Sfd4BMiWaN1sLHXGq5fGmtI xad1Ngda4+N5dfy0YxCSJoe+KWnFtiq5nSHmCgw3MeKXxVIblk6EsGhV3TWJQGl3 cFf9H3JvVCtTvqN2IMWCuR/OoN7EJU/S6kcEVv98DDDGyM5bkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJckhGfRR166DRKOB/AE3/Ii5g7nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzg5ODA1MTItNzc3NS0z NjFkLTkyNGUtZDIzNDQzYmRlMTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF29HflAsOnQqa05pgC4Vx13x2/hA5FMI0LvpdMrFjwDZw+v9sa3QBF1 /Ag6Ad5dfdk5zZwxpNrrzyx9If78IREmJJRt4OGvgQfvwLaWM/sYXM8Fr60Rj3Ch erEj2z/1+V2V5DYXk31cUpQTQpfHYCX75grW2eanArU4izUxaczDbRELxrNVeWG5 AAuVrGo9t4Bpmni41GupNeieAxWIELFU7QUmoRo39GvoNMuNF/nwoDLyW+iZu61I ckyY4HVEgaraOQ39uj/FZRNBoGfTN8HygyR67T791aciwyQtnFE9pObM0E5gI/OF Cm6c60ZyPBpT5+9yeGpt/WVvf1HPlLo= -----END CERTIFICATE-----Generated at Fri Oct 9 21:50:17 2026 by rpki-client