$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c3371c2b-7822-371d-9068-6b89615d8f28.roa File: c3371c2b-7822-371d-9068-6b89615d8f28.roa (raw, json) Hash identifier: qp+hW8OPTT1JQebwzfSqMW7gpV8I7Av6YqadfhKMQkM= Subject key identifier: B0:FA:5D:13:41:17:67:5C:57:39:DF:AD:1C:06:8A:A3:24:C4:C9:93 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F4977592A2D5035DB14BB4380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c3371c2b-7822-371d-9068-6b89615d8f28.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:59:2a:2d:50:35:db:14:bb:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c3cfc52f-b624-4584-9619-a463fe21252a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f7:2d:d9:44:1c:d6:f1:11:d2:42:af:9a:39: dd:bb:55:2a:16:65:76:3a:9b:4e:af:c5:c6:6a:51: 4d:e3:72:7b:ad:59:bc:b8:ae:fc:eb:c1:5c:84:94: 7e:53:f4:3f:95:a8:d3:a0:61:93:e1:62:fd:d2:95: b3:ad:1d:3d:4a:da:9c:85:e3:0b:03:6a:67:4c:a5: 69:f3:b6:20:8f:51:d4:23:16:ba:d3:e8:4e:7d:4a: 09:9b:73:52:88:c6:95:e7:cd:ad:cf:52:c8:e2:f0: fc:f9:70:5b:ff:35:ac:57:43:31:84:b3:56:8f:aa: 91:fb:26:c6:ae:91:4b:d6:98:12:45:a6:d3:a6:82: da:1a:7f:24:e3:da:0d:62:e3:96:f1:c4:04:25:e3: 9c:60:d6:fe:64:10:57:fd:d3:26:ee:90:15:8f:62: 92:d3:6e:4b:63:a4:78:17:f9:59:95:32:18:26:6c: d8:b2:87:b0:0f:20:31:09:42:75:17:02:f6:15:b0: 52:1c:76:8b:ce:e4:25:d2:67:a2:2a:0f:0d:e9:1d: 9d:dd:df:84:7b:a8:4f:7b:81:de:ed:e1:de:36:6a: bb:ba:19:10:f7:d5:7c:e0:7d:06:12:fc:0f:0a:17: b1:ea:68:e4:a8:26:05:60:0f:65:94:43:98:96:87: 08:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FA:5D:13:41:17:67:5C:57:39:DF:AD:1C:06:8A:A3:24:C4:C9:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c3371c2b-7822-371d-9068-6b89615d8f28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:ff:81:b2:98:b1:07:e4:63:1d:a4:8f:b9:2d:6e:4f:07:ed: 92:d4:e1:bf:f3:0f:b4:3e:4e:84:48:44:0d:af:99:9e:25:ff: 1c:a0:25:f4:4a:e0:cb:02:47:41:10:d8:11:45:19:2e:c2:8d: ae:53:31:8f:d0:72:ce:99:3e:63:c6:42:21:5b:70:29:95:7c: c7:7b:8e:84:88:93:bf:d7:5f:a6:aa:cf:46:2e:c0:25:c3:aa: 21:18:5e:c4:b2:e4:4e:72:44:a7:f5:67:43:c4:8b:14:89:8a: 1f:2a:b7:bc:fa:48:2d:e2:43:65:57:f0:2d:c6:3b:27:1c:39: 50:82:d2:31:15:a6:0d:07:4f:a7:8c:9c:91:85:03:00:e2:75: f9:75:00:b9:ef:99:f6:7b:a7:ae:19:99:14:2f:2d:ca:ca:e3: 3c:0b:45:07:03:c3:cd:78:ee:ae:47:ab:9b:3d:7c:a7:7a:30: 7d:51:27:6f:73:e4:43:4f:06:a9:a1:a5:0a:6b:ba:bb:1d:77: 14:5a:55:ec:f0:fe:b9:e1:fb:63:af:a8:c6:e4:ed:eb:70:23: 67:4c:cc:02:18:b9:11:a6:5f:fb:c9:99:e9:94:ce:9a:d6:56: 9d:90:6d:90:81:3a:72:9d:af:5d:a4:56:e2:c6:f0:3e:0b:09: a1:d9:4e:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd1kqLVA12xS7Q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzNjZmM1MmYtYjYyNC00NTg0LTk2MTktYTQ2M2ZlMjEyNTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/ct2UQc1vER0kKvmjndu1UqFmV2OptOr8XG alFN43J7rVm8uK7868FchJR+U/Q/lajToGGT4WL90pWzrR09StqcheMLA2pnTKVp 87Ygj1HUIxa60+hOfUoJm3NSiMaV582tz1LI4vD8+XBb/zWsV0MxhLNWj6qR+ybG rpFL1pgSRabTpoLaGn8k49oNYuOW8cQEJeOcYNb+ZBBX/dMm7pAVj2KS025LY6R4 F/lZlTIYJmzYsoewDyAxCUJ1FwL2FbBSHHaLzuQl0meiKg8N6R2d3d+Ee6hPe4He 7eHeNmq7uhkQ99V84H0GEvwPChex6mjkqCYFYA9llEOYlocIuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLD6XRNBF2dcVznfrRwGiqMkxMmTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzMzNzFjMmItNzgyMi0z NzFkLTkwNjgtNmI4OTYxNWQ4ZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIT/gbKYsQfkYx2kj7ktbk8H7ZLU4b/zD7Q+ToRIRA2vmZ4l/xygJfRK 4MsCR0EQ2BFFGS7Cja5TMY/Qcs6ZPmPGQiFbcCmVfMd7joSIk7/XX6aqz0YuwCXD qiEYXsSy5E5yRKf1Z0PEixSJih8qt7z6SC3iQ2VX8C3GOyccOVCC0jEVpg0HT6eM nJGFAwDidfl1ALnvmfZ7p64ZmRQvLcrK4zwLRQcDw8147q5Hq5s9fKd6MH1RJ29z 5ENPBqmhpQprursddxRaVezw/rnh+2OvqMbk7etwI2dMzAIYuRGmX/vJmemUzprW Vp2QbZCBOnKdr12kVuLG8D4LCaHZTqQ= -----END CERTIFICATE-----Generated at Mon Sep 28 20:18:26 2026 by rpki-client