$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/38a16a71-c9e4-362c-96c8-1339370d9d6e.roa File: 38a16a71-c9e4-362c-96c8-1339370d9d6e.roa (raw, json) Hash identifier: ahY/wTLE7+361DozgHAYUNzRRj6hax14uKKg430n5QA= Subject key identifier: D3:97:5A:0B:FF:06:AC:2B:CA:4F:C5:BA:B5:2C:EA:40:D9:36:5C:59 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F3FAD43AC0D89B8E05EB1A1E0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/38a16a71-c9e4-362c-96c8-1339370d9d6e.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:43:ac:0d:89:b8:e0:5e:b1:a1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=f361ecd4-f615-4126-a935-ffcc846e8eff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d0:af:54:e2:cc:b0:43:e8:71:4e:e8:bd:cd: 0e:df:ba:e8:d8:22:65:f0:df:15:a8:cf:b7:a9:54: 5f:f3:71:85:2c:37:62:02:ed:dc:cf:72:3d:d2:a8: b1:13:31:19:85:c8:84:51:e4:e8:7e:d9:6a:29:9e: 18:77:97:30:c4:7e:68:c4:a5:e2:04:b3:11:50:0b: 41:a1:59:ec:17:d3:88:9c:a0:88:50:0b:a7:83:c0: 84:46:49:2d:1d:17:3b:56:28:d2:63:6c:27:5f:15: 2c:cc:99:23:df:ee:6e:7e:ba:f3:d3:e5:36:8f:d1: 68:52:09:a5:97:b9:7a:a7:60:2b:53:da:45:6f:4b: 24:4a:b7:d1:33:c1:43:d2:f4:17:d1:e4:40:a7:98: 53:28:da:8b:ca:59:1e:71:af:63:57:eb:91:bf:a4: 9f:5c:e4:02:dc:35:de:03:aa:1f:35:15:89:90:74: e3:0c:e9:1f:b2:f6:46:a9:90:e9:c6:61:94:15:84: 8b:48:b4:b2:39:4e:dd:50:64:ff:c3:b2:eb:42:f8: 2a:ac:75:eb:3d:87:1c:30:5b:cc:c2:05:c4:d4:e8: a1:06:94:91:b8:28:37:87:84:d1:ef:26:f8:c1:02: 62:b7:4b:04:39:be:d2:bf:05:66:ea:da:fc:5b:e7: 75:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:97:5A:0B:FF:06:AC:2B:CA:4F:C5:BA:B5:2C:EA:40:D9:36:5C:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/38a16a71-c9e4-362c-96c8-1339370d9d6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:4c:c2:67:1f:10:2d:98:c4:03:c1:67:70:9a:0f:a2:35:ba: 5d:25:cc:80:ac:1c:e4:9b:20:de:92:8f:45:11:41:ab:00:4e: 73:2d:81:a6:cd:63:da:ac:d2:3d:4d:87:54:1f:51:af:a9:21: 3c:84:e1:90:17:6d:d5:6c:42:90:ba:3a:87:46:dd:b5:31:3d: ec:36:17:c0:5f:dc:fa:2b:11:7c:da:fc:e3:9c:06:40:cc:29: 65:a4:eb:fa:2e:e2:2f:bd:1b:b4:74:62:f7:bd:01:71:ef:13: 05:b1:dc:9b:f8:fb:4a:b7:8f:f1:7f:95:d5:f8:c8:ff:ab:d8: 20:c7:1d:da:59:99:e9:c6:90:dd:9f:b9:4b:a9:ee:e4:08:45: a2:38:18:04:4b:28:ae:dc:3a:b7:b0:ae:c1:83:a4:4b:b9:52: fb:0f:8d:08:59:2b:11:07:7b:c0:e8:4b:a5:b2:48:7b:fb:6e: 97:f0:aa:b8:5a:ad:5b:1c:2e:8a:12:a4:07:96:4a:3b:6e:12: 06:aa:65:66:62:ef:45:64:80:20:e3:d1:33:a7:74:54:d1:d1: 4c:cd:0c:f7:22:14:88:64:8c:71:d6:68:dc:53:0a:1a:c4:43: d3:df:f0:d4:97:c1:a7:54:d1:7c:05:39:5f:29:9c:49:7e:cf: 1f:e1:a7:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rUOsDYm44F6xoeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk ZjM2MWVjZDQtZjYxNS00MTI2LWE5MzUtZmZjYzg0NmU4ZWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidCvVOLMsEPocU7ovc0O37ro2CJl8N8VqM+3 qVRf83GFLDdiAu3cz3I90qixEzEZhciEUeToftlqKZ4Yd5cwxH5oxKXiBLMRUAtB oVnsF9OInKCIUAung8CERkktHRc7VijSY2wnXxUszJkj3+5ufrrz0+U2j9FoUgml l7l6p2ArU9pFb0skSrfRM8FD0vQX0eRAp5hTKNqLylkeca9jV+uRv6SfXOQC3DXe A6ofNRWJkHTjDOkfsvZGqZDpxmGUFYSLSLSyOU7dUGT/w7LrQvgqrHXrPYccMFvM wgXE1OihBpSRuCg3h4TR7yb4wQJit0sEOb7SvwVm6tr8W+d1vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOXWgv/Bqwryk/FurUs6kDZNlxZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzhhMTZhNzEtYzllNC0z NjJjLTk2YzgtMTMzOTM3MGQ5ZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBMwmcfEC2YxAPBZ3CaD6I1ul0lzICsHOSbIN6Sj0URQasATnMtgabN Y9qs0j1Nh1QfUa+pITyE4ZAXbdVsQpC6OodG3bUxPew2F8Bf3PorEXza/OOcBkDM KWWk6/ou4i+9G7R0Yve9AXHvEwWx3Jv4+0q3j/F/ldX4yP+r2CDHHdpZmenGkN2f uUup7uQIRaI4GARLKK7cOrewrsGDpEu5UvsPjQhZKxEHe8DoS6WySHv7bpfwqrha rVscLooSpAeWSjtuEgaqZWZi70VkgCDj0TOndFTR0UzNDPciFIhkjHHWaNxTChrE Q9Pf8NSXwadU0XwFOV8pnEl+zx/hp6k= -----END CERTIFICATE-----Generated at Sun Oct 4 22:12:13 2026 by rpki-client