$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/735f96b3-047e-360f-bb8a-41e8e0af2ace.roa File: 735f96b3-047e-360f-bb8a-41e8e0af2ace.roa (raw, json) Hash identifier: 9r+hMF654Uf1n5njSzaQvegAvtw+CfGDam9s9696g2k= Subject key identifier: 56:11:85:0C:32:F7:3E:E8:73:2F:C3:0B:46:0B:BD:FC:F0:2C:83:E4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F497F20157A1DAD0E44316960 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/735f96b3-047e-360f-bb8a-41e8e0af2ace.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:20:15:7a:1d:ad:0e:44:31:69:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f0e4a31b-3f06-4c17-9941-dd72b9a8ea49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fc:c7:bc:d9:ad:20:16:e4:75:c3:40:1f:28: 9f:32:05:04:19:86:38:57:1a:e3:39:64:3d:b0:23: 23:e3:ea:3d:a9:e4:2a:b2:fd:33:be:25:f0:d2:3f: 88:65:e5:f1:ed:6e:06:9d:f6:81:fa:3b:da:87:0e: 48:5e:82:84:7d:1f:de:05:f9:1f:bb:32:02:77:b5: f9:11:c3:15:e8:27:b0:5b:f2:a1:4c:84:f8:9b:04: c1:03:5d:12:58:d0:d3:1b:8d:1a:df:b1:8b:21:0c: cb:ba:27:09:85:0a:35:3a:56:3b:61:84:4a:ac:98: 21:12:af:4f:7f:9b:29:37:1f:87:b3:fa:4b:bb:9c: a8:df:7d:79:b1:57:ff:ce:1c:8f:4d:57:a6:d4:16: 3a:5a:ff:1f:02:44:92:4d:f0:25:e5:97:3c:47:80: a9:9e:d2:12:4f:9f:e1:4d:c3:24:35:c0:2f:ff:62: 3f:73:cd:72:57:88:b7:9b:55:6f:d1:37:f2:56:23: 68:d0:47:47:25:7d:ef:92:2c:34:6e:99:16:32:7b: ca:f2:62:49:35:46:2e:af:eb:f1:61:be:23:d2:e5: e0:9e:ab:8a:e9:07:59:fa:49:67:4c:7b:74:0e:5c: 10:a9:87:5e:90:53:8a:08:7f:05:73:72:5f:c2:72: 7e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:11:85:0C:32:F7:3E:E8:73:2F:C3:0B:46:0B:BD:FC:F0:2C:83:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/735f96b3-047e-360f-bb8a-41e8e0af2ace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:8d:1f:4f:89:6c:dd:e8:f4:f1:3a:e5:d0:db:b8:22:e1:69: f1:db:88:e7:cf:79:ef:63:f4:2b:19:ea:36:b4:43:d3:8f:6b: c9:8c:ac:f6:63:57:1f:fa:74:a8:c5:c3:74:2c:5b:f0:18:d1: 8e:de:68:71:7e:7a:9b:d5:bc:20:6d:57:d2:dc:c0:8f:da:90: 1f:ba:5f:24:7e:67:03:fc:5c:81:ff:2d:83:23:56:d3:f1:a1: 8b:b8:fb:e1:32:e9:c8:d8:07:82:2b:2e:02:f0:0e:d5:6c:75: 29:46:9d:78:a3:84:df:78:08:8a:35:20:bf:5d:7e:f7:86:11: 3c:e2:e0:78:b3:2e:cf:c5:84:a1:4d:00:08:cc:81:98:3d:53: ff:2b:1e:0d:49:9d:31:e3:13:47:1d:56:95:ff:f4:a8:ab:cb: 66:3b:97:26:2e:0f:8e:a2:cf:fe:9f:79:44:56:c2:a0:4c:37: ae:29:47:0e:00:b9:7a:04:07:cc:3e:b6:96:f1:cc:3e:97:5e: 6f:90:99:d4:79:89:cf:13:1f:9a:8b:b5:44:4f:b5:e6:d1:e5: 76:9b:02:c8:43:3b:6f:46:23:9a:76:3d:a7:0d:5c:12:89:ce: 5f:35:77:01:09:e2:cb:73:2a:bb:b8:b1:aa:0d:f4:5b:37:56: 4f:95:ad:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfyAVeh2tDkQxaWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjBlNGEzMWItM2YwNi00YzE3LTk5NDEtZGQ3MmI5YThlYTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufzHvNmtIBbkdcNAHyifMgUEGYY4VxrjOWQ9 sCMj4+o9qeQqsv0zviXw0j+IZeXx7W4GnfaB+jvahw5IXoKEfR/eBfkfuzICd7X5 EcMV6CewW/KhTIT4mwTBA10SWNDTG40a37GLIQzLuicJhQo1OlY7YYRKrJghEq9P f5spNx+Hs/pLu5yo3315sVf/zhyPTVem1BY6Wv8fAkSSTfAl5Zc8R4CpntIST5/h TcMkNcAv/2I/c81yV4i3m1Vv0TfyViNo0EdHJX3vkiw0bpkWMnvK8mJJNUYur+vx Yb4j0uXgnquK6QdZ+klnTHt0DlwQqYdekFOKCH8Fc3JfwnJ+GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYRhQwy9z7ocy/DC0YLvfzwLIPkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzM1Zjk2YjMtMDQ3ZS0z NjBmLWJiOGEtNDFlOGUwYWYyYWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaNH0+JbN3o9PE65dDbuCLhafHbiOfPee9j9CsZ6ja0Q9OPa8mMrPZj Vx/6dKjFw3QsW/AY0Y7eaHF+epvVvCBtV9LcwI/akB+6XyR+ZwP8XIH/LYMjVtPx oYu4++Ey6cjYB4IrLgLwDtVsdSlGnXijhN94CIo1IL9dfveGETzi4HizLs/FhKFN AAjMgZg9U/8rHg1JnTHjE0cdVpX/9Kiry2Y7lyYuD46iz/6feURWwqBMN64pRw4A uXoEB8w+tpbxzD6XXm+QmdR5ic8TH5qLtURPtebR5XabAshDO29GI5p2PacNXBKJ zl81dwEJ4stzKru4saoN9Fs3Vk+Vrbs= -----END CERTIFICATE-----Generated at Mon Sep 28 16:23:31 2026 by rpki-client