$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf5165e3-d1b5-30c8-9bb2-340b00e4186a.roa File: bf5165e3-d1b5-30c8-9bb2-340b00e4186a.roa (raw, json) Hash identifier: zsqDcM9ECnLT2bUiWRwdGsVvKAdE9yQPxc5spT3Ks/Q= Subject key identifier: 1B:4B:9B:22:71:A1:8E:95:FE:98:FE:79:59:89:69:07:42:1E:3F:C1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F2957C80758A47164562F0D40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf5165e3-d1b5-30c8-9bb2-340b00e4186a.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 8069 IP address blocks: 20.33.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:c8:07:58:a4:71:64:56:2f:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=9814623f-fb7b-44ba-8696-9ba729d1743c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dd:0d:b2:b3:6a:4f:40:12:87:e2:72:a7:e5: be:09:70:29:ab:b5:6d:14:90:ea:e1:86:f4:f5:15: 7d:94:4e:c1:0c:14:ed:16:e7:ad:51:a0:d5:19:80: 0e:9e:9b:6e:5d:97:de:e7:d8:b3:48:02:22:4e:ae: e1:12:8e:a2:5f:0f:0b:ca:0d:d4:35:02:00:20:ec: 5d:1e:0e:91:98:80:74:7e:ee:b1:a2:53:4a:dc:3c: ae:78:ce:4f:0f:8c:91:93:41:1c:2e:12:0e:65:67: 0d:6f:37:5d:19:0e:f5:04:a8:43:13:5e:51:48:7b: 5d:aa:ce:e2:3a:38:7f:81:c4:a3:f9:82:53:c9:2e: ab:0a:c7:a9:37:cb:19:50:e8:ac:58:1b:98:55:21: fe:57:f8:ea:0c:ca:ac:51:f2:66:aa:87:ae:3a:e3: c8:9b:7b:e8:c1:11:cf:f3:34:7d:7d:33:d5:ed:48: 83:be:1f:e3:0b:b7:7b:3d:6f:5c:83:59:0f:a0:74: e8:06:70:ce:4c:37:5e:b9:35:1e:8e:a4:b8:d5:ae: 96:5b:29:c4:b3:ec:af:8f:b1:22:cc:1e:aa:78:9f: 4f:80:41:aa:4a:ac:63:3e:74:e4:42:ea:34:fc:a0: 13:0d:7c:3d:81:af:a8:aa:65:77:2e:4d:35:c8:90: de:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4B:9B:22:71:A1:8E:95:FE:98:FE:79:59:89:69:07:42:1E:3F:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf5165e3-d1b5-30c8-9bb2-340b00e4186a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:b9:d1:88:3c:fd:b3:1d:8f:1c:cd:71:67:b5:3e:20:2d:57: 11:fc:3a:fe:0d:37:2a:ed:bf:2a:a9:df:45:13:65:9e:ab:ed: 9c:d0:f2:4b:56:62:3c:8f:dc:6d:0c:f8:08:09:34:f9:38:6e: 7d:89:a3:4d:b8:00:5d:46:82:d3:ee:e5:0b:bd:78:02:e9:70: d6:bb:08:a9:a8:34:ce:48:12:1e:ba:34:bc:f1:fc:0e:7b:23: 48:bc:bc:1a:42:03:5c:0b:c1:94:f2:c2:90:8a:66:11:0f:bd: 8f:4c:41:3c:18:3b:bd:fe:0f:f4:b2:8a:5d:dc:6d:a8:e0:9b: 49:51:e8:df:30:09:fe:9f:cf:eb:29:c4:12:53:96:5d:8a:d9: 53:4b:13:b5:69:f7:0f:77:77:be:91:5f:46:8d:b2:ba:65:a6: 6c:a7:57:0c:c1:4f:60:4c:51:c7:e5:91:43:7a:66:09:e0:62: 07:b0:5e:fb:54:38:2d:67:bd:22:38:09:8f:95:1b:31:6c:53: d9:38:4d:98:45:7d:12:fb:fd:93:0b:24:22:78:d5:74:a7:d4: 80:cd:07:64:7a:ab:21:41:06:f8:b5:76:e0:f1:3f:34:11:b2: 71:d0:25:b9:77:9f:82:b0:04:10:b1:1c:a7:ed:b3:75:cc:1e: 90:a6:b2:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV8gHWKRxZFYvDUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk OTgxNDYyM2YtZmI3Yi00NGJhLTg2OTYtOWJhNzI5ZDE3NDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod0NsrNqT0ASh+Jyp+W+CXApq7VtFJDq4Yb0 9RV9lE7BDBTtFuetUaDVGYAOnptuXZfe59izSAIiTq7hEo6iXw8Lyg3UNQIAIOxd Hg6RmIB0fu6xolNK3DyueM5PD4yRk0EcLhIOZWcNbzddGQ71BKhDE15RSHtdqs7i Ojh/gcSj+YJTyS6rCsepN8sZUOisWBuYVSH+V/jqDMqsUfJmqoeuOuPIm3vowRHP 8zR9fTPV7UiDvh/jC7d7PW9cg1kPoHToBnDOTDdeuTUejqS41a6WWynEs+yvj7Ei zB6qeJ9PgEGqSqxjPnTkQuo0/KATDXw9ga+oqmV3Lk01yJDekQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtLmyJxoY6V/pj+eVmJaQdCHj/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYmY1MTY1ZTMtZDFiNS0z MGM4LTliYjItMzQwYjAwZTQxODZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKm50Yg8/bMdjxzNcWe1PiAtVxH8Ov4NNyrtvyqp30UTZZ6r7ZzQ8ktW YjyP3G0M+AgJNPk4bn2Jo024AF1GgtPu5Qu9eALpcNa7CKmoNM5IEh66NLzx/A57 I0i8vBpCA1wLwZTywpCKZhEPvY9MQTwYO73+D/Syil3cbajgm0lR6N8wCf6fz+sp xBJTll2K2VNLE7Vp9w93d76RX0aNsrplpmynVwzBT2BMUcflkUN6ZgngYgewXvtU OC1nvSI4CY+VGzFsU9k4TZhFfRL7/ZMLJCJ41XSn1IDNB2R6qyFBBvi1duDxPzQR snHQJbl3n4KwBBCxHKfts3XMHpCmslw= -----END CERTIFICATE-----Generated at Mon Sep 28 16:25:31 2026 by rpki-client