$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3ada3c10-cbc2-358a-adb9-370a16b13ac8.roa File: 3ada3c10-cbc2-358a-adb9-370a16b13ac8.roa (raw, json) Hash identifier: AwUBhfR5bTCeYaqLbJnjdIvb/yCBM8VQhJpyBpIbvsY= Subject key identifier: 70:35:3A:18:00:1B:49:3F:08:3F:CF:C0:22:85:17:BA:9E:5E:3F:B7 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F2957C7FAE62A6C70C9302800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3ada3c10-cbc2-358a-adb9-370a16b13ac8.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 8069 IP address blocks: 20.33.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:c7:fa:e6:2a:6c:70:c9:30:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=f80a297c-6661-4983-a8bd-ef08a946cfd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:20:89:32:54:5b:25:1e:6b:f9:e4:87:1f:b3: 9f:72:c6:19:7d:a5:d8:38:1b:c9:70:67:97:ee:9d: 54:17:69:9c:56:ea:54:1b:a6:b5:29:60:dd:58:77: 9c:fe:6d:5a:60:8d:d4:d9:a8:9f:8d:8c:06:92:c8: 56:da:09:2e:e8:89:9a:55:c9:92:9f:6f:2e:91:50: 85:73:c7:9d:5a:38:23:3e:6c:b3:d4:47:3c:91:89: 7c:8a:31:50:27:31:1d:90:a9:75:66:9b:80:87:e4: 7a:c3:12:4e:d2:c0:35:9b:f1:74:c3:42:88:9f:d6: 25:c9:63:88:e6:73:a0:e4:74:26:77:65:b0:b8:06: 19:06:66:49:64:8b:53:b6:e2:a8:b4:e8:9d:a2:48: 57:cf:a6:ed:d1:d6:32:59:ba:93:f9:f3:92:0c:5e: 37:f8:08:87:e1:94:06:3b:56:14:92:d4:da:4f:45: 2d:3e:62:fe:a6:68:bc:b9:47:01:10:bf:b4:b5:c1: 38:10:c3:fa:d2:96:b9:81:05:88:93:ee:b0:41:1f: 23:93:ca:63:90:b5:d6:35:28:db:69:ba:41:44:99: 19:23:71:08:6d:f0:af:cc:ee:04:c1:89:af:f6:a8: 60:7f:47:b6:25:97:ab:d3:aa:2c:74:75:b6:ec:33: 86:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:35:3A:18:00:1B:49:3F:08:3F:CF:C0:22:85:17:BA:9E:5E:3F:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3ada3c10-cbc2-358a-adb9-370a16b13ac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:0a:9d:13:d4:fb:fd:84:d2:30:85:e1:e8:40:6d:8c:4e:b5: db:0f:df:10:7c:64:d7:5d:d6:95:0a:21:68:04:b2:ab:2c:e0: 36:1d:d2:44:84:cf:a2:fa:10:56:01:98:7c:62:fc:4c:98:45: 3a:e9:3d:b5:1e:6c:a1:58:82:7d:b3:b6:03:28:10:cd:92:dc: 7a:d2:8a:f0:72:2b:ca:5c:41:6c:20:ba:7a:98:57:5d:5d:ed: bc:ff:cc:b9:08:6b:7a:0a:bc:1d:e0:47:56:6f:cf:12:fc:20: ec:11:91:82:fa:69:9a:ac:3d:e5:07:4c:0f:5a:a9:f0:e0:e6: 3d:f7:ec:b1:b7:f8:b4:a6:3a:96:fa:f8:75:c6:e5:84:05:09: 12:e6:64:63:9f:c7:fb:5a:fd:07:9d:3e:f8:bc:53:51:61:04: 0d:3b:cb:32:db:f3:85:6f:83:5a:80:d9:bf:fc:d0:fc:0e:a8: 3b:c6:74:1f:58:1c:29:be:fd:aa:14:65:9c:c8:28:a3:bd:53: df:1d:d2:53:d3:41:ab:3b:c8:7d:4e:ea:70:e3:a5:7e:b5:0e: ee:e5:6c:17:09:80:1f:2c:a9:8d:a7:9e:62:97:de:a4:63:99: 8a:d5:44:92:b6:d6:e5:7e:71:66:1b:fc:1f:ff:4a:5b:b9:49: f8:6e:e3:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV8f65ipscMkwKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk ZjgwYTI5N2MtNjY2MS00OTgzLWE4YmQtZWYwOGE5NDZjZmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyCJMlRbJR5r+eSHH7OfcsYZfaXYOBvJcGeX 7p1UF2mcVupUG6a1KWDdWHec/m1aYI3U2aifjYwGkshW2gku6ImaVcmSn28ukVCF c8edWjgjPmyz1Ec8kYl8ijFQJzEdkKl1ZpuAh+R6wxJO0sA1m/F0w0KIn9YlyWOI 5nOg5HQmd2WwuAYZBmZJZItTtuKotOidokhXz6bt0dYyWbqT+fOSDF43+AiH4ZQG O1YUktTaT0UtPmL+pmi8uUcBEL+0tcE4EMP60pa5gQWIk+6wQR8jk8pjkLXWNSjb abpBRJkZI3EIbfCvzO4EwYmv9qhgf0e2JZer06osdHW27DOGGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHA1OhgAG0k/CD/PwCKFF7qeXj+3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2FkYTNjMTAtY2JjMi0z NThhLWFkYjktMzcwYTE2YjEzYWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYKnRPU+/2E0jCF4ehAbYxOtdsP3xB8ZNdd1pUKIWgEsqss4DYd0kSE z6L6EFYBmHxi/EyYRTrpPbUebKFYgn2ztgMoEM2S3HrSivByK8pcQWwgunqYV11d 7bz/zLkIa3oKvB3gR1ZvzxL8IOwRkYL6aZqsPeUHTA9aqfDg5j337LG3+LSmOpb6 +HXG5YQFCRLmZGOfx/ta/QedPvi8U1FhBA07yzLb84Vvg1qA2b/80PwOqDvGdB9Y HCm+/aoUZZzIKKO9U98d0lPTQas7yH1O6nDjpX61Du7lbBcJgB8sqY2nnmKX3qRj mYrVRJK21uV+cWYb/B//Slu5Sfhu4zw= -----END CERTIFICATE-----Generated at Mon Sep 28 21:39:58 2026 by rpki-client