$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3511d75c-5b80-3f14-8c09-2f6cf356ec9d.roa File: 3511d75c-5b80-3f14-8c09-2f6cf356ec9d.roa (raw, json) Hash identifier: Gql3U8C7FkxNs6D1JzrfeExVzgfrXIWHm0lSw5XSOrk= Subject key identifier: 27:68:DF:7A:D6:22:20:26:E2:FD:F0:EE:B4:07:0D:C4:AC:18:AB:E3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F2ABD25029731037D72268B8C Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3511d75c-5b80-3f14-8c09-2f6cf356ec9d.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:25:02:97:31:03:7d:72:26:8b:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=ab38481b-0596-42d7-8b1f-668464f60b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0b:64:56:6a:93:05:c6:e3:f6:0b:b6:35:53: 6b:44:1f:77:81:cb:6b:78:5e:af:57:69:1f:56:55: 65:f3:58:72:f0:72:37:e8:0a:8d:fe:88:7c:f1:48: de:c1:5e:1a:bc:23:0c:f2:70:27:f2:9d:21:87:a6: 87:7e:eb:9f:d4:fa:da:8c:b2:34:9b:a3:18:87:69: 1b:14:e6:8a:2f:a4:14:35:ae:bf:06:23:68:51:b9: a0:0e:43:f6:23:45:dc:17:25:56:27:d8:a5:a1:9b: 43:1f:3b:de:41:69:8a:21:20:c5:f2:cc:49:e0:ca: ae:6e:f7:e0:8b:a3:e4:52:b0:b5:96:db:4a:41:7d: f6:ea:ae:ae:12:ff:76:08:38:b1:d7:36:7d:57:20: 5a:f4:4b:23:cb:ad:6d:64:a5:15:76:b9:9a:51:2e: 4c:d3:04:17:35:e9:7c:57:8d:38:90:8b:8c:10:05: 16:d3:e5:e7:ea:4d:95:f2:2a:62:13:35:c4:72:70: f9:ac:d0:44:e2:6e:3a:8f:4c:88:6a:90:2b:b8:bb: 6e:97:ac:b7:9a:9c:cf:cd:7a:2b:21:05:1a:f9:ce: a8:65:aa:a7:6c:ed:91:ce:7b:1c:a1:63:05:f9:c5: 06:9c:6f:af:53:b3:7b:f6:60:62:bc:15:1b:74:89: c7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:68:DF:7A:D6:22:20:26:E2:FD:F0:EE:B4:07:0D:C4:AC:18:AB:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3511d75c-5b80-3f14-8c09-2f6cf356ec9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:26:f6:01:ba:45:ef:61:fe:87:de:97:17:25:2c:12:6d:9b: 3f:e4:74:83:57:81:c7:46:72:8c:0f:74:7c:3e:49:ec:71:5c: 6a:04:7e:c9:ad:6e:f2:e1:6a:7e:2f:f6:20:7b:8c:f3:34:c8: 1b:d0:45:cd:5a:6c:19:9d:50:8a:af:89:4e:00:fa:4b:18:c9: d2:e6:43:e0:0e:fd:ae:02:28:23:82:60:59:4f:ce:82:43:6a: 61:c2:6e:a7:75:02:f9:51:1c:a7:2c:65:a3:41:19:7e:c5:9d: ea:0d:4d:88:01:10:25:53:a1:73:52:6f:ce:af:f4:56:3a:42: 4e:0e:b0:db:33:40:10:57:cc:1c:5b:f7:1b:c4:98:96:bc:db: 4d:22:21:ce:a4:52:d4:ca:c6:9b:fe:a4:18:c7:e1:59:4d:53: a7:4b:6f:ca:1c:1d:f4:33:f3:71:b3:c2:aa:85:3b:29:2b:48: b4:2e:df:dc:77:8d:3e:a7:94:06:41:ad:d5:a9:bf:57:93:c1: f9:7f:ae:34:21:b1:24:51:19:8e:d3:66:e2:0b:8a:bf:2f:12: f5:45:a5:1a:56:09:33:56:65:01:90:93:e5:36:2e:7d:0f:1c: a1:ef:4d:c4:51:90:71:69:a0:20:c1:d7:c3:18:43:ab:2d:2e: 3f:df:ad:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvSUClzEDfXImi4wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk YWIzODQ4MWItMDU5Ni00MmQ3LThiMWYtNjY4NDY0ZjYwYjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwtkVmqTBcbj9gu2NVNrRB93gctreF6vV2kf VlVl81hy8HI36AqN/oh88UjewV4avCMM8nAn8p0hh6aHfuuf1PrajLI0m6MYh2kb FOaKL6QUNa6/BiNoUbmgDkP2I0XcFyVWJ9iloZtDHzveQWmKISDF8sxJ4Mqubvfg i6PkUrC1lttKQX326q6uEv92CDix1zZ9VyBa9Esjy61tZKUVdrmaUS5M0wQXNel8 V404kIuMEAUW0+Xn6k2V8ipiEzXEcnD5rNBE4m46j0yIapAruLtul6y3mpzPzXor IQUa+c6oZaqnbO2RznscoWMF+cUGnG+vU7N79mBivBUbdInH0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdo33rWIiAm4v3w7rQHDcSsGKvjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzUxMWQ3NWMtNWI4MC0z ZjE0LThjMDktMmY2Y2YzNTZlYzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgm9gG6Re9h/ofelxclLBJtmz/kdINXgcdGcowPdHw+SexxXGoEfsmt bvLhan4v9iB7jPM0yBvQRc1abBmdUIqviU4A+ksYydLmQ+AO/a4CKCOCYFlPzoJD amHCbqd1AvlRHKcsZaNBGX7FneoNTYgBECVToXNSb86v9FY6Qk4OsNszQBBXzBxb 9xvEmJa8200iIc6kUtTKxpv+pBjH4VlNU6dLb8ocHfQz83GzwqqFOykrSLQu39x3 jT6nlAZBrdWpv1eTwfl/rjQhsSRRGY7TZuILir8vEvVFpRpWCTNWZQGQk+U2Ln0P HKHvTcRRkHFpoCDB18MYQ6stLj/frRs= -----END CERTIFICATE-----Generated at Mon Sep 28 18:08:39 2026 by rpki-client