$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2f4b3421-ca06-34d3-ad50-682de9195829.roa File: 2f4b3421-ca06-34d3-ad50-682de9195829.roa (raw, json) Hash identifier: jGt3u76IduAw5IAHsNeYcNqUATPH7JEAiYny8gz+M8g= Subject key identifier: 97:AB:4A:B5:9E:06:E7:92:F0:14:8A:2B:A8:CF:7D:DE:BF:6F:57:15 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F1897AF0C70F352796175DCC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2f4b3421-ca06-34d3-ad50-682de9195829.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:af:0c:70:f3:52:79:61:75:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=4171fe31-aa6d-413c-919b-a831e0d0eecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8e:d8:3c:48:a1:2a:f4:0f:81:2e:35:81:85: 66:a3:cd:4f:96:fe:68:fc:40:08:47:fd:08:eb:a8: 7d:3f:96:d0:32:1f:d0:c4:73:f3:19:b5:23:eb:07: 95:67:03:d9:ca:6b:ae:62:b4:4c:9a:46:ea:74:8b: 7d:fd:73:34:49:66:ee:e2:02:e5:5d:fc:63:bd:a7: 9f:5a:d5:e2:de:a5:d8:24:e9:00:fc:b6:ac:f4:ec: b7:49:c1:42:3a:f0:37:17:59:7d:b6:fc:4b:fa:65: c7:36:e4:e7:38:3f:ee:56:77:7b:20:a1:56:ea:3d: 49:2d:12:11:f2:ec:0a:ac:02:90:d3:06:13:9a:58: 99:5f:02:1d:cc:d8:da:27:df:a0:37:70:1b:ae:39: a1:0a:5d:9a:a3:29:59:4a:0b:2e:11:dd:ca:ea:b6: f9:4b:bc:ae:c0:4c:84:b6:ad:e2:99:d8:70:c1:d1: 6d:45:af:d7:5c:b7:db:bb:f0:0d:f0:60:e2:51:0a: 5b:4a:bf:2a:a8:42:c8:28:aa:d4:3c:ba:3c:a3:ca: d1:79:01:64:5b:13:24:88:08:58:ea:62:db:1e:65: 04:12:17:e2:86:b8:dd:22:f6:12:75:72:7c:42:b6: b6:10:8c:1b:e5:3f:74:8a:0b:cb:1b:f3:d6:cf:00: e9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AB:4A:B5:9E:06:E7:92:F0:14:8A:2B:A8:CF:7D:DE:BF:6F:57:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2f4b3421-ca06-34d3-ad50-682de9195829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:4a:eb:4d:13:83:d5:b5:c1:58:a6:ab:d7:2e:81:24:a1:c0: 9a:87:8b:53:90:f8:a0:46:b7:27:18:9d:73:26:be:ae:76:2d: 9b:d5:9e:c9:8f:52:1c:5a:94:09:71:03:28:f5:cf:6a:56:b8: 8f:dc:70:ed:11:f4:1d:f0:7b:c5:d6:65:7f:51:7a:71:a9:0e: f8:d6:76:b6:00:1a:3c:dd:d5:27:5a:c5:82:ce:3a:c7:db:87: e0:7b:2f:41:b4:16:92:09:84:92:a5:2d:2b:24:05:a0:f3:fe: 05:8c:f5:08:86:58:f7:ea:21:da:5f:c8:c4:ac:3a:c5:8f:31: 15:82:5b:cd:a4:67:58:25:cd:bc:64:7a:54:e4:58:27:b7:ee: e9:90:5a:41:1c:ab:7e:7e:0b:75:7e:8c:8f:d7:4c:8f:43:10: 97:6b:e7:68:59:cd:2f:72:9f:6f:f3:9a:74:75:07:36:ee:eb: ab:0e:2d:cd:e5:bf:b8:ea:1f:2c:01:e1:dd:c5:ad:0f:43:3b: 74:98:bc:16:44:12:fe:00:cc:fc:80:33:13:3f:a2:c2:d9:dc: 2f:c8:7d:1a:ce:f5:3b:ad:f6:44:9d:80:59:01:01:a3:e1:f0: 93:b8:d0:cb:20:50:65:00:02:27:0b:e9:41:27:63:27:c1:6f: 88:df:07:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl68McPNSeWF13MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk NDE3MWZlMzEtYWE2ZC00MTNjLTkxOWItYTgzMWUwZDBlZWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh47YPEihKvQPgS41gYVmo81Plv5o/EAIR/0I 66h9P5bQMh/QxHPzGbUj6weVZwPZymuuYrRMmkbqdIt9/XM0SWbu4gLlXfxjvaef WtXi3qXYJOkA/Las9Oy3ScFCOvA3F1l9tvxL+mXHNuTnOD/uVnd7IKFW6j1JLRIR 8uwKrAKQ0wYTmliZXwIdzNjaJ9+gN3AbrjmhCl2aoylZSgsuEd3K6rb5S7yuwEyE tq3imdhwwdFtRa/XXLfbu/AN8GDiUQpbSr8qqELIKKrUPLo8o8rReQFkWxMkiAhY 6mLbHmUEEhfihrjdIvYSdXJ8Qra2EIwb5T90igvLG/PWzwDpGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJerSrWeBueS8BSKK6jPfd6/b1cVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMmY0YjM0MjEtY2EwNi0z NGQzLWFkNTAtNjgyZGU5MTk1ODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJK600Tg9W1wVimq9cugSShwJqHi1OQ+KBGtycYnXMmvq52LZvVnsmP UhxalAlxAyj1z2pWuI/ccO0R9B3we8XWZX9RenGpDvjWdrYAGjzd1SdaxYLOOsfb h+B7L0G0FpIJhJKlLSskBaDz/gWM9QiGWPfqIdpfyMSsOsWPMRWCW82kZ1glzbxk elTkWCe37umQWkEcq35+C3V+jI/XTI9DEJdr52hZzS9yn2/zmnR1Bzbu66sOLc3l v7jqHywB4d3FrQ9DO3SYvBZEEv4AzPyAMxM/osLZ3C/IfRrO9Tut9kSdgFkBAaPh 8JO40MsgUGUAAicL6UEnYyfBb4jfBy8= -----END CERTIFICATE-----Generated at Tue Oct 6 22:16:17 2026 by rpki-client