$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce3991cc-6dfe-33db-8152-8d60ebb2897a.roa File: ce3991cc-6dfe-33db-8152-8d60ebb2897a.roa (raw, json) Hash identifier: Tf7kwS9NB1Ejvm0Kd/YOpKBIQI6HruYg+uo/K6f3Fpw= Subject key identifier: BC:EF:A7:9E:BA:BA:7A:85:11:CD:1F:8B:20:76:68:5C:87:5D:AA:1F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F497F1CE854986B8011FFED00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce3991cc-6dfe-33db-8152-8d60ebb2897a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:1c:e8:54:98:6b:80:11:ff:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fd43f1c4-35c5-450b-beae-52085eedf9ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2e:c7:cb:47:dc:64:66:d1:a9:c0:91:23:7b: 4a:bc:51:e9:75:fc:3c:87:3a:e5:e5:13:1a:dd:b2: 74:d1:0e:eb:0e:0c:ea:36:0c:df:ca:fe:01:c0:e6: 84:de:a7:0d:54:08:d9:3d:5c:90:ab:0d:c3:4c:24: bd:9d:85:8b:7c:11:f5:12:5e:a6:79:a7:97:21:13: a9:f6:a1:e7:36:a9:62:ee:e6:b1:ad:af:2b:f4:c2: b3:d6:32:b9:ce:69:cb:03:0a:1e:20:dd:cf:ef:d5: 9b:1a:1c:17:a0:93:0a:35:6e:30:a8:a7:53:0b:be: 0e:6a:6c:f8:6b:ae:0c:70:80:44:72:5c:46:1c:cf: 32:54:a4:45:f6:cf:92:0b:3a:19:57:d8:2b:67:22: df:65:73:50:30:90:a1:64:ff:d8:f1:8f:e6:62:ad: ef:2b:d0:28:19:1a:f1:30:cb:2c:aa:c1:57:71:22: 30:f2:40:11:3c:ae:b7:2c:8b:3d:be:76:ac:32:f1: 44:04:45:39:85:d0:96:f2:5e:7f:4d:f3:37:eb:77: 30:91:9d:4b:40:00:9c:d7:b8:30:b3:55:59:3a:3e: 5f:42:91:64:df:16:53:0d:e0:2c:15:fd:ce:44:fb: 79:7b:68:2a:9d:81:94:b3:99:b2:2b:58:61:6e:30: cf:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:EF:A7:9E:BA:BA:7A:85:11:CD:1F:8B:20:76:68:5C:87:5D:AA:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce3991cc-6dfe-33db-8152-8d60ebb2897a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:6a:e9:79:a9:f1:34:6a:5d:81:8c:6f:b0:30:b1:ba:c2:76: 74:2c:30:5b:01:c7:a0:90:68:7d:f6:b5:78:5a:1d:6f:d6:9b: d8:a3:de:d1:07:fb:14:88:d6:da:e8:f9:d3:d1:7f:fe:e7:88: ca:38:1b:be:c9:92:8d:f8:0d:f7:f4:dc:2a:03:91:49:00:4c: a5:f7:3f:60:d6:8e:1c:66:2c:e8:8c:60:3a:f0:7c:6f:ad:a8: b0:aa:4d:75:10:ed:ad:28:a7:6f:75:86:24:d8:60:ad:5d:a6: 19:90:5d:37:f3:ad:e7:4c:e0:9b:97:d0:6c:43:0d:5d:ab:ae: ac:95:65:22:72:3f:92:20:ac:5e:e6:10:e9:93:a2:0f:86:02: 5b:c8:05:f3:65:ba:9b:d5:b9:76:15:7c:f2:ae:d1:5c:b3:0b: 61:40:9d:d9:a3:27:e0:be:d4:e4:01:fe:56:77:75:5e:36:c0: 87:b2:c4:a6:fc:bd:b6:73:cf:0e:ec:8a:5f:d2:67:94:31:3c: 53:ac:cc:83:ee:e2:6c:b0:60:9c:d0:b9:5e:fa:65:19:31:f4: 7d:23:45:41:a5:b0:92:15:8e:71:df:92:f2:f0:9f:d4:3f:1e: b2:53:bc:98:c0:5d:5a:94:e6:3b:bb:57:92:d6:a3:19:55:7d: ee:dd:8e:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfxzoVJhrgBH/7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmQ0M2YxYzQtMzVjNS00NTBiLWJlYWUtNTIwODVlZWRmOWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi7Hy0fcZGbRqcCRI3tKvFHpdfw8hzrl5RMa 3bJ00Q7rDgzqNgzfyv4BwOaE3qcNVAjZPVyQqw3DTCS9nYWLfBH1El6meaeXIROp 9qHnNqli7uaxra8r9MKz1jK5zmnLAwoeIN3P79WbGhwXoJMKNW4wqKdTC74Oamz4 a64McIBEclxGHM8yVKRF9s+SCzoZV9grZyLfZXNQMJChZP/Y8Y/mYq3vK9AoGRrx MMssqsFXcSIw8kARPK63LIs9vnasMvFEBEU5hdCW8l5/TfM363cwkZ1LQACc17gw s1VZOj5fQpFk3xZTDeAsFf3ORPt5e2gqnYGUs5myK1hhbjDPbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzvp566unqFEc0fiyB2aFyHXaofMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2UzOTkxY2MtNmRmZS0z M2RiLTgxNTItOGQ2MGViYjI4OTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtq6Xmp8TRqXYGMb7AwsbrCdnQsMFsBx6CQaH32tXhaHW/Wm9ij3tEH +xSI1tro+dPRf/7niMo4G77Jko34Dff03CoDkUkATKX3P2DWjhxmLOiMYDrwfG+t qLCqTXUQ7a0op291hiTYYK1dphmQXTfzredM4JuX0GxDDV2rrqyVZSJyP5IgrF7m EOmTog+GAlvIBfNlupvVuXYVfPKu0VyzC2FAndmjJ+C+1OQB/lZ3dV42wIeyxKb8 vbZzzw7sil/SZ5QxPFOszIPu4mywYJzQuV76ZRkx9H0jRUGlsJIVjnHfkvLwn9Q/ HrJTvJjAXVqU5ju7V5LWoxlVfe7djho= -----END CERTIFICATE-----Generated at Sun Sep 27 10:25:22 2026 by rpki-client