$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0967e81b-028b-34cd-bdc0-bbf4748131ac.roa File: 0967e81b-028b-34cd-bdc0-bbf4748131ac.roa (raw, json) Hash identifier: 5QJ9hDAM68wMbFqMudnHMil/OFYsNF2HL82hKc2S9FY= Subject key identifier: F1:5D:52:DC:C6:85:97:9C:4F:42:37:E7:27:4C:93:12:AA:9F:36:5C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F497F1CF9B082813E997CFFC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0967e81b-028b-34cd-bdc0-bbf4748131ac.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:1c:f9:b0:82:81:3e:99:7c:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c74b19dd-7fbf-4be3-9b93-a763bf096aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:98:e9:b8:d8:fd:47:c9:c8:77:6d:cb:0d:bb: 61:77:b7:86:ff:17:24:95:25:2e:90:b2:c3:21:1e: da:00:3b:53:97:b6:a2:44:1d:92:0a:4b:ee:f0:c1: a3:8d:be:d9:74:53:4a:d7:b9:2b:4a:93:4d:53:f6: f9:90:12:58:32:d9:63:07:60:13:b9:51:54:84:11: 3e:b8:3e:bf:60:b1:36:48:9d:49:53:6a:d2:ab:38: 3b:0a:95:b8:e9:d5:56:31:ba:81:3b:74:59:7c:3c: 0a:d7:28:5f:46:dc:4b:d6:f6:e5:72:34:bd:f6:f9: 90:51:12:2d:9a:bf:be:d1:f6:b0:a1:cb:f3:8e:26: fb:7b:f6:80:84:ff:ba:4d:5d:63:a1:d2:1b:f6:5c: f3:7c:d0:2d:d6:bc:73:e3:52:c5:45:81:7b:34:30: a7:be:16:cd:28:0c:f2:d8:77:1c:d8:50:5e:e1:17: a2:fd:7c:ca:f1:ad:0f:9b:51:7e:2f:b0:29:03:30: 27:9b:3e:cd:85:06:1a:ee:99:f7:89:41:eb:6a:77: d6:d0:bb:f1:ca:75:65:54:b0:52:14:43:37:0f:09: 72:f8:1c:5b:d7:55:47:d1:18:be:6c:24:6f:f5:b7: e8:4e:bd:f1:85:78:91:95:42:23:41:d7:67:ce:32: d7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5D:52:DC:C6:85:97:9C:4F:42:37:E7:27:4C:93:12:AA:9F:36:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0967e81b-028b-34cd-bdc0-bbf4748131ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:26:71:a4:78:9a:13:7b:46:19:82:24:b4:a7:a1:9e:2c:ec: 08:d4:f5:7f:4b:54:b0:80:98:cb:21:8b:cd:d6:da:87:84:6e: af:87:8a:fd:ab:0b:37:5e:d9:f8:ec:73:eb:ef:cb:e2:ec:de: f0:e5:10:e7:ab:e1:fa:d7:32:46:26:a6:c6:fb:33:f0:a4:83: 6d:07:5f:ec:db:5d:61:12:7e:c0:5a:95:76:e9:60:83:d9:6a: 39:32:f5:74:7f:95:be:34:ca:0a:a1:b1:a9:60:21:59:79:be: a6:cf:e6:19:ba:3a:65:20:cd:b4:3a:29:92:53:81:6b:36:61: 9d:cb:6b:5b:38:83:bd:d6:b0:d4:92:a7:0c:cd:6b:9b:0b:41: b8:46:3d:3c:ca:c0:d4:ae:0a:18:13:67:6c:74:4f:f0:14:13: ca:c7:d7:8d:bc:1d:49:05:f1:6b:3b:02:94:77:a8:d1:f8:5f: d4:eb:93:e5:66:ab:a6:2c:36:cb:06:0a:f0:af:82:68:8d:67: cc:03:d6:47:cd:49:87:be:7b:99:dd:a5:3f:49:c5:40:94:8d: bb:37:b6:c0:2f:7d:a2:7e:53:e0:22:24:e5:79:02:09:1c:7d: b6:ad:2b:23:4e:99:d5:66:8c:e5:5b:d7:d3:6c:f7:c7:e3:79: e9:d0:c2:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jfxz5sIKBPpl8/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Yzc0YjE5ZGQtN2ZiZi00YmUzLTliOTMtYTc2M2JmMDk2YWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZjpuNj9R8nId23LDbthd7eG/xcklSUukLLD IR7aADtTl7aiRB2SCkvu8MGjjb7ZdFNK17krSpNNU/b5kBJYMtljB2ATuVFUhBE+ uD6/YLE2SJ1JU2rSqzg7CpW46dVWMbqBO3RZfDwK1yhfRtxL1vblcjS99vmQURIt mr++0fawocvzjib7e/aAhP+6TV1jodIb9lzzfNAt1rxz41LFRYF7NDCnvhbNKAzy 2Hcc2FBe4Rei/XzK8a0Pm1F+L7ApAzAnmz7NhQYa7pn3iUHranfW0LvxynVlVLBS FEM3Dwly+Bxb11VH0Ri+bCRv9bfoTr3xhXiRlUIjQddnzjLXuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFdUtzGhZecT0I35ydMkxKqnzZcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDk2N2U4MWItMDI4Yi0z NGNkLWJkYzAtYmJmNDc0ODEzMWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcmcaR4mhN7RhmCJLSnoZ4s7AjU9X9LVLCAmMshi83W2oeEbq+Hiv2r Czde2fjsc+vvy+Ls3vDlEOer4frXMkYmpsb7M/Ckg20HX+zbXWESfsBalXbpYIPZ ajky9XR/lb40ygqhsalgIVl5vqbP5hm6OmUgzbQ6KZJTgWs2YZ3La1s4g73WsNSS pwzNa5sLQbhGPTzKwNSuChgTZ2x0T/AUE8rH1428HUkF8Ws7ApR3qNH4X9Trk+Vm q6YsNssGCvCvgmiNZ8wD1kfNSYe+e5ndpT9JxUCUjbs3tsAvfaJ+U+AiJOV5Agkc fbatKyNOmdVmjOVb19Ns98fjeenQwuc= -----END CERTIFICATE-----Generated at Tue Sep 29 11:19:56 2026 by rpki-client