$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01affdc8-cfde-39b2-92d1-54dc8e367c0e.roa File: 01affdc8-cfde-39b2-92d1-54dc8e367c0e.roa (raw, json) Hash identifier: xJE8O5QL72obNC0w11nReVGUVVT2pbzkatimqTcPZDI= Subject key identifier: 7E:42:3B:66:ED:17:96:F3:4B:31:04:06:E8:F3:89:DC:6C:29:CD:F9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D44FA4E8A36719D57AF995C00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01affdc8-cfde-39b2-92d1-54dc8e367c0e.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.33.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:4e:8a:36:71:9d:57:af:99:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=a924fcf0-0e24-4a80-854e-8090828a37a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:92:07:dc:cf:40:90:87:44:49:96:d3:56:d4: ce:d1:65:7b:e0:43:eb:a5:ac:aa:fb:aa:fb:77:b2: f5:b9:22:f5:5c:9e:53:1e:60:a0:12:d8:1b:8b:b3: a6:e4:67:27:81:d6:f5:e9:2f:5a:d1:d6:6e:2d:25: f4:47:79:61:39:e3:d1:7b:31:47:71:cb:69:3d:38: a8:6f:2f:0f:aa:bd:ac:42:4c:7e:15:0d:e7:a9:20: cf:6c:fa:85:20:8d:9b:3c:32:a7:33:3a:90:72:f9: 5a:1d:fe:7c:16:03:81:6f:db:9f:dc:64:07:e2:00: e1:02:a4:33:fd:fa:b5:5c:97:4a:b7:a5:a2:f7:f2: 5d:5c:a2:1d:5b:8e:bf:05:21:7f:d4:73:22:15:d2: 1c:2c:11:4a:2e:e9:f0:d0:9f:f6:4c:1d:fa:32:4b: f1:01:f3:e5:3e:1c:01:50:80:e2:6f:f6:f7:2e:fd: 66:95:9b:69:92:cf:b6:07:c4:28:1a:af:43:27:96: 41:db:ca:cf:17:7d:7c:79:ba:8f:82:75:4a:c6:8c: 86:2b:20:e7:f8:48:e3:27:a5:ba:d3:1d:e6:cb:24: 9e:31:fa:7f:98:a3:c9:ce:2c:64:b3:82:d5:6d:7e: 0d:23:16:e5:30:11:db:7c:20:a0:f5:b0:89:35:d7: fa:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:42:3B:66:ED:17:96:F3:4B:31:04:06:E8:F3:89:DC:6C:29:CD:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01affdc8-cfde-39b2-92d1-54dc8e367c0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:e6:0c:32:01:0c:a9:c6:ff:db:26:9e:27:97:8c:22:8d:a8: 59:9c:9f:55:2c:21:cd:f0:a6:60:62:82:6b:0c:22:9e:f0:0e: 61:27:93:ce:fc:0e:14:95:50:2e:a5:73:2c:e8:f5:84:fc:0d: 16:90:22:1a:09:e8:0f:3d:9f:66:76:d7:85:44:67:43:d5:12: f0:5c:2e:27:a8:bf:a2:af:91:58:85:ec:2b:e5:15:99:36:ca: 31:8f:2e:09:6a:af:1b:f5:8e:5b:0f:ef:fe:8c:28:b1:e2:4e: 6f:83:c1:e6:38:33:49:b0:33:7b:69:02:7e:ab:29:aa:96:6e: fd:51:2c:71:45:fe:ab:a1:ab:e6:66:1d:5c:70:d1:c1:bd:cd: d3:b6:94:e3:9f:6b:6d:c3:ea:26:fc:04:3f:dd:dd:1f:bc:8a: 78:ab:fe:5f:38:d2:32:7f:9c:58:d3:19:ef:4b:0e:11:db:3b: fc:11:e5:91:bd:ce:bf:d8:2a:e4:f0:b7:13:19:b0:3b:08:48: 1e:7c:33:7a:06:0d:f8:25:8f:b9:ca:f6:79:1f:ed:bc:72:b0: 07:2c:dd:6a:da:55:e4:73:25:dc:46:83:0c:96:c8:20:30:6b: 95:3b:52:8b:d8:9c:52:e8:e2:5a:51:2c:cc:f8:4d:83:a6:07: 16:05:66:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+k6KNnGdV6+ZXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk YTkyNGZjZjAtMGUyNC00YTgwLTg1NGUtODA5MDgyOGEzN2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpIH3M9AkIdESZbTVtTO0WV74EPrpayq+6r7 d7L1uSL1XJ5THmCgEtgbi7Om5Gcngdb16S9a0dZuLSX0R3lhOePRezFHcctpPTio by8Pqr2sQkx+FQ3nqSDPbPqFII2bPDKnMzqQcvlaHf58FgOBb9uf3GQH4gDhAqQz /fq1XJdKt6Wi9/JdXKIdW46/BSF/1HMiFdIcLBFKLunw0J/2TB36MkvxAfPlPhwB UIDib/b3Lv1mlZtpks+2B8QoGq9DJ5ZB28rPF318ebqPgnVKxoyGKyDn+EjjJ6W6 0x3myySeMfp/mKPJzixks4LVbX4NIxblMBHbfCCg9bCJNdf6HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5CO2btF5bzSzEEBujzidxsKc35MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDFhZmZkYzgtY2ZkZS0z OWIyLTkyZDEtNTRkYzhlMzY3YzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLmDDIBDKnG/9smnieXjCKNqFmcn1UsIc3wpmBigmsMIp7wDmEnk878 DhSVUC6lcyzo9YT8DRaQIhoJ6A89n2Z214VEZ0PVEvBcLieov6KvkViF7CvlFZk2 yjGPLglqrxv1jlsP7/6MKLHiTm+DweY4M0mwM3tpAn6rKaqWbv1RLHFF/quhq+Zm HVxw0cG9zdO2lOOfa23D6ib8BD/d3R+8inir/l840jJ/nFjTGe9LDhHbO/wR5ZG9 zr/YKuTwtxMZsDsISB58M3oGDfglj7nK9nkf7bxysAcs3WraVeRzJdxGgwyWyCAw a5U7UovYnFLo4lpRLMz4TYOmBxYFZqw= -----END CERTIFICATE-----Generated at Thu Mar 26 07:34:00 2026 by rpki-client