$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/343b56e4-2785-3758-8b98-7b8ee4b8652f.roa File: 343b56e4-2785-3758-8b98-7b8ee4b8652f.roa (raw, json) Hash identifier: j3DMIVNIJEy4Y0wfHikaU2yKxZhlvXDY1hKr9oKtiGo= Subject key identifier: 1A:5D:49:3C:BA:AE:5D:6F:CB:A8:7A:B0:B3:21:91:9B:B6:F1:C5:2D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F2957C7B9DED25F1C310E7C80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/343b56e4-2785-3758-8b98-7b8ee4b8652f.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 8069 IP address blocks: 20.33.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:c7:b9:de:d2:5f:1c:31:0e:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=94e8db64-2ea7-490e-8ff6-38ead0d13d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7f:ea:13:5f:e1:bd:ca:38:1b:ac:8f:5d:36: 77:3c:04:f6:80:a6:9d:63:d5:d6:3e:c2:89:b6:e5: 93:c2:c7:d7:6d:76:8a:73:de:84:c3:15:4d:2c:1b: 09:2e:36:81:95:7d:4c:f4:e6:46:1e:9b:87:d8:3c: 49:1d:2c:7c:8b:e4:d7:63:1b:9c:96:0f:6a:97:52: d7:ac:e5:10:0f:94:42:63:2f:8a:cf:32:54:54:4d: b1:14:68:28:6d:e3:f4:36:66:20:6f:2c:a3:97:31: ad:11:3f:ac:aa:8c:f6:23:01:6e:c1:16:0b:59:bc: 37:89:a0:4b:e2:7c:e9:d3:ca:b2:84:a4:20:a1:62: 88:90:b7:f1:0c:e2:f6:0c:d7:83:fb:8d:a4:8d:fb: bb:9b:55:1d:37:4b:c9:76:3d:2a:b3:6b:a9:07:78: e2:80:10:07:de:30:4d:5b:a8:06:e9:72:1f:87:f1: df:e1:a2:95:c3:8d:51:69:e0:28:a2:fe:a9:2d:27: 48:32:64:17:23:84:e3:34:44:0d:49:63:11:fd:94: 66:f1:c7:0f:f1:71:f1:00:b2:ef:dd:65:30:b4:0e: 8c:4a:18:08:51:dd:f2:ac:a0:9c:41:58:41:2b:45: cb:45:e1:17:23:14:0d:14:d6:db:4b:20:8a:31:79: 20:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5D:49:3C:BA:AE:5D:6F:CB:A8:7A:B0:B3:21:91:9B:B6:F1:C5:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/343b56e4-2785-3758-8b98-7b8ee4b8652f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:50:3e:ec:99:8f:0d:95:c2:8b:90:62:a6:2b:48:21:6c:e0: 14:8e:ac:b1:43:7a:ed:90:1f:a0:86:a2:ce:9f:36:23:71:9c: 5a:41:6d:c1:98:92:6b:fa:bc:e2:8f:46:51:2e:be:91:7f:b4: 87:f6:77:0e:9d:9a:39:4d:d7:7c:9e:90:c5:71:8d:ba:1c:52: bf:d2:5f:91:91:83:a5:70:87:83:9b:e5:31:40:9f:20:85:d1: c0:fe:df:6e:e9:87:aa:ed:db:6e:73:9c:0f:5d:2b:62:58:39: eb:c5:14:05:16:f2:47:89:f7:d1:41:d4:29:d8:4a:e8:ec:bd: a2:c3:ee:05:58:9d:07:64:c1:27:fc:03:88:78:8f:00:3a:4e: 20:56:5a:f9:9c:da:02:0a:97:cd:27:75:77:e0:7b:a5:c9:06: 6a:78:3a:49:7c:2f:bc:01:27:ce:6b:1a:b9:69:8e:9e:a5:3e: da:6f:47:56:78:76:8c:e6:68:de:c5:e0:40:1b:ff:fb:f8:7d: 8c:f0:33:47:dc:56:ca:1f:62:69:ba:d0:fd:48:a1:84:ae:5d: a4:9d:dc:67:7d:bc:c9:a7:98:78:3a:63:5b:23:39:8a:82:55: 64:c4:87:e3:a0:63:6e:46:d0:f8:6d:c1:f6:c1:f8:8c:df:d2: db:6d:4a:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV8e53tJfHDEOfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk OTRlOGRiNjQtMmVhNy00OTBlLThmZjYtMzhlYWQwZDEzZDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3/qE1/hvco4G6yPXTZ3PAT2gKadY9XWPsKJ tuWTwsfXbXaKc96EwxVNLBsJLjaBlX1M9OZGHpuH2DxJHSx8i+TXYxuclg9ql1LX rOUQD5RCYy+KzzJUVE2xFGgobeP0NmYgbyyjlzGtET+sqoz2IwFuwRYLWbw3iaBL 4nzp08qyhKQgoWKIkLfxDOL2DNeD+42kjfu7m1UdN0vJdj0qs2upB3jigBAH3jBN W6gG6XIfh/Hf4aKVw41RaeAoov6pLSdIMmQXI4TjNEQNSWMR/ZRm8ccP8XHxALLv 3WUwtA6MShgIUd3yrKCcQVhBK0XLReEXIxQNFNbbSyCKMXkgGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpdSTy6rl1vy6h6sLMhkZu28cUtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzQzYjU2ZTQtMjc4NS0z NzU4LThiOTgtN2I4ZWU0Yjg2NTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClQPuyZjw2VwouQYqYrSCFs4BSOrLFDeu2QH6CGos6fNiNxnFpBbcGY kmv6vOKPRlEuvpF/tIf2dw6dmjlN13yekMVxjbocUr/SX5GRg6Vwh4Ob5TFAnyCF 0cD+327ph6rt225znA9dK2JYOevFFAUW8keJ99FB1CnYSujsvaLD7gVYnQdkwSf8 A4h4jwA6TiBWWvmc2gIKl80ndXfge6XJBmp4Okl8L7wBJ85rGrlpjp6lPtpvR1Z4 dozmaN7F4EAb//v4fYzwM0fcVsofYmm60P1IoYSuXaSd3Gd9vMmnmHg6Y1sjOYqC VWTEh+OgY25G0PhtwfbB+Izf0tttSiI= -----END CERTIFICATE-----Generated at Mon Oct 5 07:24:41 2026 by rpki-client