$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ede11131-09a5-3938-9e03-0196812fb57b.roa File: ede11131-09a5-3938-9e03-0196812fb57b.roa (raw, json) Hash identifier: NhVaJcF9XVw3DxB4RYhQROf0CtKNe/Gd5nhz00PRnvw= Subject key identifier: 3C:EA:8F:22:E1:38:4F:55:39:1A:A8:5F:89:23:73:1D:D1:53:DB:46 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F497F1E6C7AE7607338E12C00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ede11131-09a5-3938-9e03-0196812fb57b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:1e:6c:7a:e7:60:73:38:e1:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fcadc9b2-806a-423b-8fb0-c095f9128564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2e:21:b6:30:f1:eb:71:7d:44:9a:16:90:ea: 65:3b:18:fa:4e:82:a4:7c:a4:84:71:0b:f7:21:83: 9a:97:3f:84:b4:11:c2:29:b4:d1:5c:51:cc:c8:51: 13:3e:02:99:e6:c4:91:33:e3:88:ac:88:39:78:e4: f0:ea:e8:40:a9:25:c2:ea:a8:42:14:0e:71:9a:3f: 7e:24:eb:e8:38:3c:3a:c2:86:db:34:08:26:db:d0: 24:65:e6:47:ae:a1:c0:d9:52:14:a7:1d:67:97:5d: 87:1d:d7:fe:b4:60:75:75:5d:29:96:34:b0:d5:1d: cc:5e:13:62:af:2a:f7:a5:a3:de:d3:58:46:bc:65: d7:45:2b:0b:85:bc:f4:b7:35:17:06:09:7e:76:cd: bd:dd:06:38:cf:e8:80:2d:fd:ec:59:c4:8c:73:5b: de:7d:d3:45:48:33:a7:e2:ec:e3:86:39:d2:28:5e: 7f:2c:43:51:e8:e1:bf:89:cb:b2:5d:3a:a7:4a:fe: 9b:7d:d9:cd:70:b2:62:d1:c8:82:7c:cd:cf:db:f7: 1f:e9:b3:87:f3:16:40:b3:f1:c7:27:57:b3:72:50: ab:9d:db:ff:d8:4f:e8:3a:8e:bb:f9:22:10:b3:e7: b2:52:e6:4a:c3:c4:d6:e9:0a:b2:c8:85:77:39:13: d8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EA:8F:22:E1:38:4F:55:39:1A:A8:5F:89:23:73:1D:D1:53:DB:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ede11131-09a5-3938-9e03-0196812fb57b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:ef:41:51:4a:99:22:d2:93:ef:37:e4:e4:13:86:7d:9d:85: 79:12:88:7e:fd:26:0f:38:d8:1c:69:dc:59:77:fd:7a:78:48: 54:09:cf:bc:19:36:ba:23:e1:af:a1:a4:b7:fd:6b:48:fa:bb: 0c:5b:21:fa:da:f1:cc:7a:50:94:cb:5f:00:6f:09:93:29:a8: c5:73:b3:af:4c:a3:f7:26:5a:17:de:50:b8:af:f4:f3:2c:d1: 45:50:63:2c:78:5b:16:c4:4f:d0:a8:7a:6f:e8:93:e7:65:69: dd:1a:0c:3a:55:39:43:c4:1d:bf:6d:05:11:ad:d1:f4:9c:c8: d1:d9:e8:cd:70:c0:3c:c2:22:51:10:5b:54:fc:0c:d6:bb:fc: 1e:23:d2:e3:55:90:2e:ad:c2:27:70:da:04:4a:d2:2a:6b:7a: c7:e7:a9:bd:8f:9b:8f:f3:b6:0a:e2:90:e1:97:13:82:17:a9: ad:dd:12:22:39:36:e3:4b:c3:80:c6:8f:7c:3b:f3:03:d3:ac: a9:f7:de:8d:0d:52:35:0f:64:a1:27:6f:3b:f1:36:19:75:88: 63:1d:e4:d0:b0:13:e1:9c:a8:b6:92:8c:d6:19:83:94:ae:b8: 8a:87:e6:48:e1:0c:41:57:07:56:f0:c1:e0:4f:f0:a6:9a:5e: cd:77:95:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jfx5seudgczjhLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmNhZGM5YjItODA2YS00MjNiLThmYjAtYzA5NWY5MTI4NTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS4htjDx63F9RJoWkOplOxj6ToKkfKSEcQv3 IYOalz+EtBHCKbTRXFHMyFETPgKZ5sSRM+OIrIg5eOTw6uhAqSXC6qhCFA5xmj9+ JOvoODw6wobbNAgm29AkZeZHrqHA2VIUpx1nl12HHdf+tGB1dV0pljSw1R3MXhNi ryr3paPe01hGvGXXRSsLhbz0tzUXBgl+ds293QY4z+iALf3sWcSMc1vefdNFSDOn 4uzjhjnSKF5/LENR6OG/icuyXTqnSv6bfdnNcLJi0ciCfM3P2/cf6bOH8xZAs/HH J1ezclCrndv/2E/oOo67+SIQs+eyUuZKw8TW6QqyyIV3ORPY5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzqjyLhOE9VORqoX4kjcx3RU9tGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWRlMTExMzEtMDlhNS0z OTM4LTllMDMtMDE5NjgxMmZiNTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXvQVFKmSLSk+835OQThn2dhXkSiH79Jg842Bxp3Fl3/Xp4SFQJz7wZ Nroj4a+hpLf9a0j6uwxbIfra8cx6UJTLXwBvCZMpqMVzs69Mo/cmWhfeULiv9PMs 0UVQYyx4WxbET9Coem/ok+dlad0aDDpVOUPEHb9tBRGt0fScyNHZ6M1wwDzCIlEQ W1T8DNa7/B4j0uNVkC6twidw2gRK0ipresfnqb2Pm4/ztgrikOGXE4IXqa3dEiI5 NuNLw4DGj3w78wPTrKn33o0NUjUPZKEnbzvxNhl1iGMd5NCwE+GcqLaSjNYZg5Su uIqH5kjhDEFXB1bwweBP8KaaXs13lR4= -----END CERTIFICATE-----Generated at Mon Sep 28 22:30:42 2026 by rpki-client