$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/871537b1-1a3c-3d03-9ef9-2a8e3f5aa9e9.roa File: 871537b1-1a3c-3d03-9ef9-2a8e3f5aa9e9.roa (raw, json) Hash identifier: lWGUFLL482+/6OQs5UAABXXcQhmzDGof0Lw7xwhl3YU= Subject key identifier: 3A:20:DA:4A:B6:46:23:44:21:D5:6B:4A:BC:48:1D:5C:65:B8:FB:CF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F4977573066026EBF46A44DC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/871537b1-1a3c-3d03-9ef9-2a8e3f5aa9e9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:57:30:66:02:6e:bf:46:a4:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3e8fa8f4-3d05-43c8-a67a-53e5e5dd327d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bc:8a:e5:fe:c9:59:ed:7f:17:e3:98:ab:e0: 89:20:49:ea:78:52:fa:16:88:22:35:ee:38:ba:80: 93:ae:dc:7c:0d:01:c0:b6:66:06:11:9c:d4:5b:c3: ca:ce:d6:53:0f:43:9b:d2:cb:33:ab:df:28:d2:f3: 22:7d:fd:0e:15:c1:9d:7a:82:5c:1b:52:20:a0:6f: e2:79:64:0c:8c:c4:b8:64:44:20:ee:45:eb:c5:05: 7f:3a:6e:58:74:ff:de:24:a2:4b:55:9b:c4:e4:23: e0:37:5e:80:aa:a1:d9:50:b8:27:76:dd:0f:f1:c1: 64:1d:0c:c0:b0:03:41:ca:0b:e3:3f:59:43:98:d5: ef:c4:58:a9:02:0d:7f:a5:0c:07:d4:7e:0a:5c:49: 13:56:a9:cc:31:f2:28:47:62:de:58:64:60:98:e6: aa:ab:83:19:a3:ec:4c:91:23:f5:d8:aa:2c:66:4a: 36:ba:ae:0b:eb:7b:45:32:1a:2e:9a:cd:49:80:09: 5e:fd:2e:6d:a7:f7:39:72:31:f0:94:5b:7b:55:65: 1f:19:fc:0c:7b:fd:46:f5:59:c3:71:6c:d3:c2:bd: 7b:14:d5:ba:19:65:51:62:d3:97:15:26:81:63:b8: eb:0d:5e:de:fd:58:07:b8:30:d3:78:6e:b2:8a:9e: 73:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:20:DA:4A:B6:46:23:44:21:D5:6B:4A:BC:48:1D:5C:65:B8:FB:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/871537b1-1a3c-3d03-9ef9-2a8e3f5aa9e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:05:be:3e:83:1e:84:77:c2:89:45:0b:6e:a4:24:6f:d2:6b: 35:fe:98:dc:dd:f1:6b:ca:9c:ae:d0:45:76:4f:1e:0d:d5:2f: 17:fa:7d:96:0f:63:75:82:c2:31:3d:bc:59:7b:0e:6e:96:26: 5e:ca:36:4f:a7:4e:d7:c0:b7:76:19:d2:40:45:30:6b:a4:8c: ff:d9:3a:3c:2c:ab:05:53:40:3f:5a:e5:63:7c:44:e0:1e:9e: a7:5d:5d:a5:a0:d3:25:c6:06:3e:63:0c:5c:c1:c8:50:35:56: d9:6b:07:1f:d1:45:e3:52:a6:41:92:04:4c:93:48:41:e4:39: 4a:3c:89:f2:fd:65:ae:a2:89:ef:0e:58:be:e1:21:70:53:23: 05:b0:84:b2:7f:0c:ae:bc:c7:72:d4:1f:ad:6e:3c:8b:1e:46: 15:7f:1a:15:83:f9:5a:d4:6b:60:99:f3:47:22:06:65:fc:d1: 4b:db:ed:d3:77:62:88:8e:ae:13:58:ed:75:5b:17:9b:9b:c2: bb:63:7d:30:49:9a:a2:ef:3a:5c:de:37:37:f6:61:99:b9:5d: 3f:d3:17:6d:9c:dd:3c:fc:7a:bc:ee:0f:5b:01:0d:21:e0:9f: e0:ca:10:6d:f4:f1:60:da:14:68:ee:78:2d:8a:bb:96:74:e4: be:3c:b5:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd1cwZgJuv0akTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2U4ZmE4ZjQtM2QwNS00M2M4LWE2N2EtNTNlNWU1ZGQzMjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LyK5f7JWe1/F+OYq+CJIEnqeFL6FogiNe44 uoCTrtx8DQHAtmYGEZzUW8PKztZTD0Ob0sszq98o0vMiff0OFcGdeoJcG1IgoG/i eWQMjMS4ZEQg7kXrxQV/Om5YdP/eJKJLVZvE5CPgN16AqqHZULgndt0P8cFkHQzA sANBygvjP1lDmNXvxFipAg1/pQwH1H4KXEkTVqnMMfIoR2LeWGRgmOaqq4MZo+xM kSP12KosZko2uq4L63tFMhoums1JgAle/S5tp/c5cjHwlFt7VWUfGfwMe/1G9VnD cWzTwr17FNW6GWVRYtOXFSaBY7jrDV7e/VgHuDDTeG6yip5zjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDog2kq2RiNEIdVrSrxIHVxluPvPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODcxNTM3YjEtMWEzYy0z ZDAzLTllZjktMmE4ZTNmNWFhOWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgFvj6DHoR3wolFC26kJG/SazX+mNzd8WvKnK7QRXZPHg3VLxf6fZYP Y3WCwjE9vFl7Dm6WJl7KNk+nTtfAt3YZ0kBFMGukjP/ZOjwsqwVTQD9a5WN8ROAe nqddXaWg0yXGBj5jDFzByFA1VtlrBx/RReNSpkGSBEyTSEHkOUo8ifL9Za6iie8O WL7hIXBTIwWwhLJ/DK68x3LUH61uPIseRhV/GhWD+VrUa2CZ80ciBmX80Uvb7dN3 YoiOrhNY7XVbF5ubwrtjfTBJmqLvOlzeNzf2YZm5XT/TF22c3Tz8erzuD1sBDSHg n+DKEG308WDaFGjueC2Ku5Z05L48tek= -----END CERTIFICATE-----Generated at Tue Sep 29 11:20:15 2026 by rpki-client