$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d31bb3df-dc29-3abb-89db-3bdc50d24026.roa File: d31bb3df-dc29-3abb-89db-3bdc50d24026.roa (raw, json) Hash identifier: PHIDJiNrp8XMRxoFUO4RCGI0gjWWYZ3gnqhAqVDuV9Q= Subject key identifier: 73:68:06:8F:24:1E:81:BC:34:CA:55:E9:B9:9A:B4:E0:65:B7:35:DA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F3FAD435C5CABDD15EAA61EC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d31bb3df-dc29-3abb-89db-3bdc50d24026.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:43:5c:5c:ab:dd:15:ea:a6:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=94f9666c-68f9-4907-96c9-2a3b7e862398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b6:4a:e3:79:81:1c:9b:1e:0c:13:71:94:34: 00:d3:1c:57:c5:d8:5c:ee:c9:36:17:8b:0e:59:91: 78:e4:23:98:96:20:40:80:0d:7a:ca:af:60:b2:f5: bc:ba:d2:a0:6d:15:65:05:3e:a1:34:f5:ba:e9:d7: c4:73:e3:0c:84:3e:a7:e7:e8:fe:8e:ec:30:0e:e9: b0:6b:04:c8:a0:f5:ef:9e:ab:6b:00:46:38:5e:c2: e0:4b:d6:3c:a0:1b:68:f8:f3:96:4d:1b:b5:96:bf: b7:06:15:72:66:5f:5e:a4:1a:c2:85:66:c5:02:e5: 07:17:f0:ad:fa:64:ed:ca:fa:f4:41:bf:c6:b3:5e: 4c:f2:af:e8:e5:48:d0:7c:04:52:50:90:12:c5:9c: 17:5b:5c:da:c2:48:3f:28:d7:a5:0c:f3:bf:8e:7e: 0a:59:ae:5f:f7:a7:c4:5a:28:1d:d8:af:9f:51:95: 3e:f6:24:27:e2:38:28:ad:90:68:56:95:ac:6f:db: be:52:68:97:38:76:fe:b8:c3:d2:5f:28:93:ad:c2: fc:14:d1:62:e8:f8:09:fe:01:e1:9c:0a:31:1d:c5: 74:c3:f3:e4:2f:ae:90:5a:35:f2:4a:ce:0d:4c:9c: e2:db:ac:cb:b8:7b:cc:6e:27:42:c6:97:2f:7a:0f: 67:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:68:06:8F:24:1E:81:BC:34:CA:55:E9:B9:9A:B4:E0:65:B7:35:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d31bb3df-dc29-3abb-89db-3bdc50d24026.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:31:05:18:69:49:50:ca:5e:6c:66:4e:c8:96:a7:bb:68:1f: c1:44:20:4f:11:14:1c:07:27:7c:46:4a:cf:f8:12:87:4c:af: 1f:53:28:b4:39:fa:08:8a:a9:4a:7b:32:99:d1:b7:50:ff:04: 96:13:48:58:e0:35:31:dc:d6:b6:08:4a:86:1b:e5:26:12:00: 0e:56:d8:17:80:80:86:9e:17:2f:79:66:37:3c:c3:dc:ad:f6: 46:a7:8e:cc:b5:5a:3f:b3:d8:d7:8a:c5:db:ba:63:02:29:a0: b6:48:bb:4e:19:5a:78:21:53:e8:4a:fe:6d:d1:25:1f:da:73: 3a:26:6e:01:99:82:ca:47:04:94:ed:c5:49:62:d9:a2:02:e6: b8:4e:57:98:f0:fc:05:0b:4e:82:bf:a0:6e:b7:41:36:4d:cd: d4:c0:19:82:30:6f:45:90:a1:85:d6:de:30:19:9a:de:71:91: db:14:02:6e:f8:83:27:5f:d7:f3:fe:dc:0f:6a:6c:98:94:34: 46:a1:2b:8d:19:df:25:c1:40:81:6b:e2:86:5c:2b:69:b7:31: f2:89:6f:16:46:14:2f:58:d4:e2:77:49:44:7f:22:71:73:4a: 55:d9:23:72:7b:92:99:c8:d7:3b:c6:f1:33:da:2f:e4:ab:a3: 62:03:26:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rUNcXKvdFeqmHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk OTRmOTY2NmMtNjhmOS00OTA3LTk2YzktMmEzYjdlODYyMzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLZK43mBHJseDBNxlDQA0xxXxdhc7sk2F4sO WZF45COYliBAgA16yq9gsvW8utKgbRVlBT6hNPW66dfEc+MMhD6n5+j+juwwDumw awTIoPXvnqtrAEY4XsLgS9Y8oBto+POWTRu1lr+3BhVyZl9epBrChWbFAuUHF/Ct +mTtyvr0Qb/Gs15M8q/o5UjQfARSUJASxZwXW1zawkg/KNelDPO/jn4KWa5f96fE Wigd2K+fUZU+9iQn4jgorZBoVpWsb9u+UmiXOHb+uMPSXyiTrcL8FNFi6PgJ/gHh nAoxHcV0w/PkL66QWjXySs4NTJzi26zLuHvMbidCxpcveg9nZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNoBo8kHoG8NMpV6bmatOBltzXaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDMxYmIzZGYtZGMyOS0z YWJiLTg5ZGItM2JkYzUwZDI0MDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0xBRhpSVDKXmxmTsiWp7toH8FEIE8RFBwHJ3xGSs/4EodMrx9TKLQ5 +giKqUp7MpnRt1D/BJYTSFjgNTHc1rYISoYb5SYSAA5W2BeAgIaeFy95Zjc8w9yt 9kanjsy1Wj+z2NeKxdu6YwIpoLZIu04ZWnghU+hK/m3RJR/aczombgGZgspHBJTt xUli2aIC5rhOV5jw/AULToK/oG63QTZNzdTAGYIwb0WQoYXW3jAZmt5xkdsUAm74 gydf1/P+3A9qbJiUNEahK40Z3yXBQIFr4oZcK2m3MfKJbxZGFC9Y1OJ3SUR/InFz SlXZI3J7kpnI1zvG8TPaL+Sro2IDJos= -----END CERTIFICATE-----Generated at Mon Sep 28 18:03:00 2026 by rpki-client