$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ffb5f399-7910-3515-819d-e4fcf15480cf.roa File: ffb5f399-7910-3515-819d-e4fcf15480cf.roa (raw, json) Hash identifier: Z4+nJs5KH4sueuSRGhpGt7GdwCxePGgI7WTF04KfIpg= Subject key identifier: 2F:D0:37:43:9E:F9:71:53:45:61:A6:71:DA:FC:CB:B3:9C:7A:3E:1D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F85787606B9C6CBB25DEEDFE0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ffb5f399-7910-3515-819d-e4fcf15480cf.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:76:06:b9:c6:cb:b2:5d:ee:df:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=b0beecff-e27c-4978-be85-72eaed0a8a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ef:b8:9c:10:a5:e1:23:5f:f6:22:8c:fc:96: f5:5d:19:12:5d:9f:61:09:2f:db:05:12:68:e0:94: db:60:e5:6e:8f:26:91:ce:97:27:c3:67:2f:47:3a: ed:c5:fd:ab:bb:3b:9f:93:f2:db:c0:55:ed:fa:89: 26:4f:f1:b2:81:5c:66:26:8e:d8:e4:73:dc:47:4f: 89:97:4e:b6:7a:e3:60:f3:85:f0:a9:6d:3d:35:1c: d6:58:47:c7:cb:94:b1:cc:61:de:cd:a6:75:b4:ae: 92:50:41:f2:0d:fc:1a:50:7b:eb:28:17:d4:2c:36: d7:09:fe:bd:79:74:05:77:8b:7e:b9:fd:24:e1:87: 2e:96:eb:ad:c9:88:3a:af:69:20:21:69:53:42:3a: 1c:9a:4d:0a:63:66:24:23:21:e0:e6:a2:fd:74:59: b5:0f:41:e8:c0:11:77:69:51:99:11:8e:c8:31:dd: 58:c0:d6:7c:24:f7:cb:9d:d8:86:58:7b:97:1b:3a: e4:6f:82:27:af:a9:5c:74:b5:23:11:66:d7:be:b3: 9e:e5:00:e6:33:ba:98:91:b5:20:18:9e:26:08:0c: 10:c4:16:0b:36:a1:55:3f:ee:22:e3:33:80:eb:e4: da:a6:24:f0:c0:f6:c3:4f:6e:72:8e:d6:c4:e3:ba: aa:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D0:37:43:9E:F9:71:53:45:61:A6:71:DA:FC:CB:B3:9C:7A:3E:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ffb5f399-7910-3515-819d-e4fcf15480cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:55:fe:48:e6:a5:0f:cb:9b:b3:4a:2d:d8:38:a4:96:1e:e6: c1:12:d0:54:ea:18:1e:01:45:8b:8a:60:ba:ff:1f:2b:42:af: b2:94:0c:2b:ae:1b:44:91:9d:53:e6:72:de:a3:e7:ff:64:59: c7:d8:bb:e4:f0:1a:0a:4a:e1:6e:30:df:d3:fc:bd:a2:5c:46: ca:a1:c2:87:5c:e0:96:31:43:f3:5f:89:41:ad:c0:74:f2:89: 01:38:86:b9:1a:5b:cd:75:bd:c2:1a:6b:1e:f2:29:5f:f1:60: c1:43:61:bb:71:81:7b:bf:5f:59:b0:8d:58:0b:87:59:60:8b: 2e:c6:83:c7:17:ed:cd:44:8d:bb:a0:75:d5:27:42:17:5e:35: 4a:39:55:d8:d2:f3:5e:39:eb:6b:aa:a9:47:cb:4a:08:b3:49: 9f:4d:40:19:2a:8d:03:25:39:f5:af:d2:3d:97:19:0d:15:c2: 9d:a9:c3:8f:74:42:d1:70:58:87:5e:2d:f6:7f:a9:92:35:bd: 13:80:14:e5:e9:6c:17:41:22:ce:60:7f:4a:93:c0:73:02:c5: cc:c5:68:34:1f:bf:5c:49:80:ca:08:14:12:28:5e:66:9f:56: e9:27:d4:96:b1:68:b0:f2:de:42:49:d9:ca:ec:30:b7:77:0a: 53:27:47:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeHYGucbLsl3u3+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk YjBiZWVjZmYtZTI3Yy00OTc4LWJlODUtNzJlYWVkMGE4YTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu+4nBCl4SNf9iKM/Jb1XRkSXZ9hCS/bBRJo 4JTbYOVujyaRzpcnw2cvRzrtxf2ruzufk/LbwFXt+okmT/GygVxmJo7Y5HPcR0+J l062euNg84XwqW09NRzWWEfHy5SxzGHezaZ1tK6SUEHyDfwaUHvrKBfULDbXCf69 eXQFd4t+uf0k4YculuutyYg6r2kgIWlTQjocmk0KY2YkIyHg5qL9dFm1D0HowBF3 aVGZEY7IMd1YwNZ8JPfLndiGWHuXGzrkb4Inr6lcdLUjEWbXvrOe5QDmM7qYkbUg GJ4mCAwQxBYLNqFVP+4i4zOA6+TapiTwwPbDT25yjtbE47qqawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/QN0Oe+XFTRWGmcdr8y7Ocej4dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZmZiNWYzOTktNzkxMC0z NTE1LTgxOWQtZTRmY2YxNTQ4MGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZV/kjmpQ/Lm7NKLdg4pJYe5sES0FTqGB4BRYuKYLr/HytCr7KUDCuu G0SRnVPmct6j5/9kWcfYu+TwGgpK4W4w39P8vaJcRsqhwodc4JYxQ/NfiUGtwHTy iQE4hrkaW811vcIaax7yKV/xYMFDYbtxgXu/X1mwjVgLh1lgiy7Gg8cX7c1Ejbug ddUnQhdeNUo5VdjS814562uqqUfLSgizSZ9NQBkqjQMlOfWv0j2XGQ0Vwp2pw490 QtFwWIdeLfZ/qZI1vROAFOXpbBdBIs5gf0qTwHMCxczFaDQfv1xJgMoIFBIoXmaf Vukn1JaxaLDy3kJJ2crsMLd3ClMnR04= -----END CERTIFICATE-----Generated at Tue Oct 27 09:24:03 2026 by rpki-client