$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e3baa8e1-c647-3c96-a38c-39faa625d5ca.roa File: e3baa8e1-c647-3c96-a38c-39faa625d5ca.roa (raw, json) Hash identifier: U9C/qsHNfx9zyOBpPv3vxLymwm1lWdT15a8iwoHV7jA= Subject key identifier: 79:00:30:B1:A5:DF:1F:C9:C1:94:DF:F5:8C:83:6A:55:61:2B:9F:BF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F49775B9DEE01B5031350D1C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e3baa8e1-c647-3c96-a38c-39faa625d5ca.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:5b:9d:ee:01:b5:03:13:50:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=83b6efe7-3281-4a71-a48a-436ef1bb3c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:aa:ae:0c:7c:57:6a:fa:8f:2a:61:33:ef:4c: 6b:7c:b3:98:2e:ae:59:38:e0:dc:5e:be:01:a7:04: 72:b3:98:df:0a:92:3b:6b:be:e6:3a:6d:37:68:73: f3:83:47:59:80:5b:7b:cd:4d:b9:9d:d7:86:77:9d: 05:0e:92:42:1d:05:ce:1a:81:c9:28:7b:a2:15:50: 79:9d:f6:3d:9d:0f:d0:24:93:48:35:6e:a7:1b:c4: db:60:d7:15:d6:4c:73:9b:db:cd:3d:90:69:3c:d7: 72:b6:f3:6c:fc:28:d4:38:b3:1b:bf:50:09:58:cd: 82:88:74:5c:fc:a4:1a:63:73:c9:69:b8:1f:dc:a2: 94:a1:68:82:1a:90:45:84:f9:87:d2:8b:47:44:a9: 19:c4:f6:4a:9f:11:8f:cd:1c:da:96:a5:34:f6:fb: 44:87:7b:c3:ac:31:ef:fa:d6:c7:eb:f1:1f:9c:0f: 52:c4:34:d6:2a:4f:98:57:32:ea:f0:f2:e7:81:07: 70:40:ed:1e:7e:cb:88:3e:3d:52:7d:9b:98:58:16: d6:75:cb:86:9e:9f:4b:95:2c:2d:1c:c7:41:b9:c7: e7:38:0d:20:51:41:f3:8f:84:a6:d8:09:b7:3d:14: 55:ea:0c:25:08:b5:f9:6b:8b:08:a7:b9:2f:12:03: 4b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:00:30:B1:A5:DF:1F:C9:C1:94:DF:F5:8C:83:6A:55:61:2B:9F:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e3baa8e1-c647-3c96-a38c-39faa625d5ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:fb:37:00:ee:d4:5b:75:13:63:39:67:4d:d8:02:13:8d:5e: 80:83:8b:79:ac:85:a8:48:7f:1f:d3:ee:e4:9e:ad:5a:61:64: 52:6c:1f:e7:22:67:c1:44:c5:21:c2:c9:f5:6d:ea:4d:95:f0: b3:55:5b:bd:0e:c9:51:72:81:0c:41:e2:94:0e:d7:4c:ba:13: d2:1f:84:a7:91:74:57:0a:52:17:3a:7d:ec:c0:f7:d8:98:57: 35:5b:6b:c6:0d:5e:7c:c4:c4:fe:5f:96:23:e4:eb:0c:0b:a5: 0c:62:f9:33:c9:30:0c:38:bb:a4:cc:a0:85:c1:44:a5:a3:d6: ea:14:b7:ba:45:0a:41:06:e6:a6:1a:44:87:4d:56:7b:23:2a: 41:c9:a1:da:23:b4:2b:4e:76:09:13:41:c7:05:ba:ee:9b:ca: 29:7d:3d:e3:fc:a5:6f:2a:23:d7:84:bb:8c:2e:cd:33:b6:8d: 02:1d:11:05:76:57:63:4e:9c:36:ad:fa:ad:f9:c2:68:fb:f1: 90:c0:39:9b:9d:2f:dc:99:9d:fe:c9:c9:87:fe:ed:d2:a0:95: dd:4a:89:52:21:c0:33:ad:8f:66:0f:fa:6d:1f:1d:03:70:a8: 8a:f1:91:3b:f4:30:b3:85:ab:a2:5f:3d:1b:94:92:1b:98:e2: d0:dc:9e:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd1ud7gG1AxNQ0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODNiNmVmZTctMzI4MS00YTcxLWE0OGEtNDM2ZWYxYmIzYzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9qquDHxXavqPKmEz70xrfLOYLq5ZOODcXr4B pwRys5jfCpI7a77mOm03aHPzg0dZgFt7zU25ndeGd50FDpJCHQXOGoHJKHuiFVB5 nfY9nQ/QJJNINW6nG8TbYNcV1kxzm9vNPZBpPNdytvNs/CjUOLMbv1AJWM2CiHRc /KQaY3PJabgf3KKUoWiCGpBFhPmH0otHRKkZxPZKnxGPzRzalqU09vtEh3vDrDHv +tbH6/EfnA9SxDTWKk+YVzLq8PLngQdwQO0efsuIPj1SfZuYWBbWdcuGnp9LlSwt HMdBucfnOA0gUUHzj4Sm2Am3PRRV6gwlCLX5a4sIp7kvEgNLfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkAMLGl3x/JwZTf9YyDalVhK5+/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTNiYWE4ZTEtYzY0Ny0z Yzk2LWEzOGMtMzlmYWE2MjVkNWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACH7NwDu1Ft1E2M5Z03YAhONXoCDi3mshahIfx/T7uSerVphZFJsH+ci Z8FExSHCyfVt6k2V8LNVW70OyVFygQxB4pQO10y6E9IfhKeRdFcKUhc6fezA99iY VzVba8YNXnzExP5fliPk6wwLpQxi+TPJMAw4u6TMoIXBRKWj1uoUt7pFCkEG5qYa RIdNVnsjKkHJodojtCtOdgkTQccFuu6byil9PeP8pW8qI9eEu4wuzTO2jQIdEQV2 V2NOnDat+q35wmj78ZDAOZudL9yZnf7JyYf+7dKgld1KiVIhwDOtj2YP+m0fHQNw qIrxkTv0MLOFq6JfPRuUkhuY4tDcni4= -----END CERTIFICATE-----Generated at Mon Sep 28 21:36:04 2026 by rpki-client