$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8a8728a-6384-37c5-8183-84d8806052ce.roa File: c8a8728a-6384-37c5-8183-84d8806052ce.roa (raw, json) Hash identifier: LTpt+3hU+xFE1QXSqRXaHWYFZCYqxHbBehK4sCU7jEQ= Subject key identifier: 97:B4:26:AE:54:95:77:FF:61:88:E9:97:FD:E7:F7:9C:61:AB:22:BD Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F15CCFE3A37C7030158B8EC80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8a8728a-6384-37c5-8183-84d8806052ce.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:fe:3a:37:c7:03:01:58:b8:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=294df1dd-63ce-4f5f-95aa-c93232e237ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:40:10:75:be:0b:68:af:16:2c:04:0a:96:d1: 1c:a2:2f:92:29:c8:af:29:d4:5f:99:97:58:d3:e0: 05:66:5a:db:92:f1:c1:ed:33:6f:38:5f:3e:0d:8c: 4c:55:5d:d9:2b:cf:22:fd:cc:dd:3f:53:35:65:4c: 84:6c:a3:c2:d0:4c:b2:ce:47:fc:80:cd:30:14:56: 8a:fe:14:fb:ec:79:e3:14:09:3e:94:82:3c:18:ab: 68:cb:24:1c:b8:5f:7e:12:de:64:c7:b7:7b:9f:71: db:41:58:50:b6:69:6e:93:53:c5:3c:9a:55:b0:56: c7:0d:d8:13:a7:1c:de:0c:0f:b1:4f:16:e5:16:1e: 6a:9a:f7:fb:34:7e:a2:89:39:d9:53:63:49:76:f6: 0c:c3:9a:0a:f0:e3:ea:d8:fc:86:04:f9:11:6c:53: e1:89:6e:b1:20:41:db:c2:44:ed:62:c9:de:41:5f: 71:02:c7:b4:a7:42:a4:cc:88:08:84:54:a7:b6:54: f4:a8:ab:c4:ec:3d:2d:fb:c0:61:3f:59:12:59:cc: 92:b3:bd:ae:54:ff:e3:42:1a:3e:5f:bf:56:66:34: 87:1a:54:9e:3e:b8:86:63:14:c0:66:a7:1c:bc:ba: f9:7d:1c:11:aa:cc:ab:ba:ad:d6:0a:6b:1e:a2:d8: b3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B4:26:AE:54:95:77:FF:61:88:E9:97:FD:E7:F7:9C:61:AB:22:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8a8728a-6384-37c5-8183-84d8806052ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d6:87:24:55:fb:3c:0f:f9:c1:23:84:91:28:e4:14:eb:1a: f9:10:e9:0b:0c:c2:91:db:9f:8d:ca:f5:90:85:e9:8c:93:ae: e2:80:1a:7e:8f:72:89:b4:c4:f3:92:1b:a7:0d:df:98:8b:c6: eb:57:48:5c:cf:3e:c1:62:48:df:20:39:cf:f8:1f:46:38:f3: d2:e7:ab:37:07:d8:49:7d:74:01:1e:69:a9:c2:c4:f5:37:06: 45:f4:32:1f:c7:82:e1:fc:49:86:b6:c5:a4:4d:c1:9c:89:08: 8e:7b:91:b0:fc:d0:fc:44:33:d8:a6:6d:7d:90:1c:f2:d3:8d: a7:38:80:47:2a:12:1c:29:e0:0a:f3:8d:1e:8e:65:cf:c6:89: 43:4f:d6:27:25:44:85:95:e1:f7:7a:82:16:f5:6b:18:f4:a8: a0:a3:f2:5c:a9:f3:67:34:4b:31:35:4d:7b:05:d4:1f:15:f9: c7:98:9b:cd:11:52:cf:f2:39:50:e4:87:49:0d:b2:b2:60:1d: b1:b3:cf:49:47:92:eb:74:37:f3:ba:0e:99:1b:02:b5:c6:85: 88:13:d0:79:fd:3f:6f:73:be:c6:a6:4d:fd:7e:72:ef:d4:64: 57:c3:9c:68:16:b7:ae:7f:75:48:40:0a:5b:db:79:da:12:40: b6:c4:c8:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzP46N8cDAVi47IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk Mjk0ZGYxZGQtNjNjZS00ZjVmLTk1YWEtYzkzMjMyZTIzN2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEAQdb4LaK8WLAQKltEcoi+SKcivKdRfmZdY 0+AFZlrbkvHB7TNvOF8+DYxMVV3ZK88i/czdP1M1ZUyEbKPC0Eyyzkf8gM0wFFaK /hT77HnjFAk+lII8GKtoyyQcuF9+Et5kx7d7n3HbQVhQtmluk1PFPJpVsFbHDdgT pxzeDA+xTxblFh5qmvf7NH6iiTnZU2NJdvYMw5oK8OPq2PyGBPkRbFPhiW6xIEHb wkTtYsneQV9xAse0p0KkzIgIhFSntlT0qKvE7D0t+8BhP1kSWcySs72uVP/jQho+ X79WZjSHGlSePriGYxTAZqccvLr5fRwRqsyruq3WCmseotizXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJe0Jq5UlXf/YYjpl/3n95xhqyK9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzhhODcyOGEtNjM4NC0z N2M1LTgxODMtODRkODgwNjA1MmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3WhyRV+zwP+cEjhJEo5BTrGvkQ6QsMwpHbn43K9ZCF6YyTruKAGn6P com0xPOSG6cN35iLxutXSFzPPsFiSN8gOc/4H0Y489LnqzcH2El9dAEeaanCxPU3 BkX0Mh/HguH8SYa2xaRNwZyJCI57kbD80PxEM9imbX2QHPLTjac4gEcqEhwp4Arz jR6OZc/GiUNP1iclRIWV4fd6ghb1axj0qKCj8lyp82c0SzE1TXsF1B8V+ceYm80R Us/yOVDkh0kNsrJgHbGzz0lHkut0N/O6DpkbArXGhYgT0Hn9P29zvsamTf1+cu/U ZFfDnGgWt65/dUhAClvbedoSQLbEyII= -----END CERTIFICATE-----Generated at Sat Oct 3 13:20:51 2026 by rpki-client