$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/193b4617-c040-35e0-ad01-80a5e562b1ae.roa File: 193b4617-c040-35e0-ad01-80a5e562b1ae.roa (raw, json) Hash identifier: U5tvv2DHb739UrRZjymiEnooksFK0ptgiuy05tGxwUo= Subject key identifier: 5C:36:D4:52:81:D1:41:A6:81:F1:C6:00:10:A0:F7:F0:25:5C:9F:88 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D9B855A98B6FD944D9C5C5CC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/193b4617-c040-35e0-ad01-80a5e562b1ae.roa Signing time: Fri 24 Apr 2026 01:00:23 +0000 ROA not before: Fri 24 Apr 2026 01:00:23 +0000 ROA not after: Thu 23 Jul 2026 01:00:23 +0000 asID: 8069 IP address blocks: 20.33.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9b:85:5a:98:b6:fd:94:4d:9c:5c:5c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 24 01:00:23 2026 GMT Not After : Jul 23 01:00:23 2026 GMT Subject: CN=1145dcbe-c0d9-4e77-8fc4-e570698e4928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:14:56:43:ad:74:40:2c:83:84:3b:ad:da:4a: 81:a2:9f:2b:52:02:e1:08:45:35:62:af:46:d3:cd: d5:26:66:63:d1:ed:e6:a4:e8:f8:cb:a1:fd:c6:aa: 7b:d9:ba:1d:18:0f:c1:d9:b2:a5:8d:47:41:0f:50: 42:02:a2:c3:bb:4d:cd:68:5e:5d:ff:94:87:ec:92: 2d:70:fe:d5:99:62:88:34:23:ec:5d:38:22:09:fe: d7:da:1f:01:ef:e6:6b:03:e8:3b:3d:c6:13:3c:c5: 52:15:50:78:4b:76:e1:c9:07:bb:b5:7f:40:41:9d: 76:ae:de:61:5d:9f:55:75:6a:7e:b2:ec:a2:57:af: 4c:92:18:4e:f3:c0:6e:67:b5:f2:64:b6:61:6d:bf: be:16:ec:a6:9e:6d:d6:f8:a9:db:58:b1:19:75:00: 01:cb:8b:74:60:27:ff:4d:ba:91:1d:4e:b5:d8:cd: 30:29:8a:bd:36:e4:6b:b2:d0:cc:b2:e7:bc:43:04: a8:52:6e:90:db:6f:c4:a8:57:0c:a7:a9:c3:3e:de: 3d:3a:50:91:22:df:35:55:d5:65:e9:2a:57:80:7b: 93:04:41:b9:a6:e0:bf:66:88:e0:e1:07:00:25:e4: 84:4f:1e:53:4d:fe:c4:96:66:3a:64:21:c5:f1:9a: 78:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:36:D4:52:81:D1:41:A6:81:F1:C6:00:10:A0:F7:F0:25:5C:9F:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/193b4617-c040-35e0-ad01-80a5e562b1ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:7a:88:e1:7a:2d:46:2f:90:fd:26:be:19:47:9b:f6:7e:79: 88:5d:76:01:ef:49:2c:af:59:ac:fe:ad:eb:ba:cc:70:ba:d5: dd:13:4c:07:e0:66:a1:4b:58:1b:ef:6f:0c:51:e1:58:9b:12: ca:fe:25:5d:1a:20:55:73:15:98:34:76:4f:57:39:95:ca:a8: de:75:d8:62:dc:48:60:92:b0:cd:16:7e:33:79:a8:53:83:2d: 35:38:82:b4:f7:00:60:58:c7:cd:99:ff:61:89:52:98:b1:ea: a0:6b:c9:31:78:6a:4d:c7:78:b7:3c:b9:4f:f5:ef:b9:76:56: 3f:c3:38:a3:12:63:95:85:0a:76:e5:3c:d0:b2:98:95:e8:ce: d2:ef:7b:da:42:a0:b0:84:a7:98:e6:10:43:89:eb:f9:d0:fa: e6:2f:a4:f6:99:19:b1:6b:49:de:e8:18:bf:6a:3d:a4:85:11: 8c:d7:0a:63:f4:d8:d0:81:73:ba:c0:9f:38:7d:a9:a2:99:45: b3:aa:c9:eb:e6:3d:5e:7f:cc:10:a4:88:ff:c0:20:81:c6:87: 3c:f1:9f:08:4b:59:7d:a1:03:04:e0:9e:78:9d:27:df:5e:58: 0a:b2:83:c0:e6:ba:73:e4:e7:c3:0f:85:cc:19:f7:64:f9:f6: ac:d3:e7:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2bhVqYtv2UTZxcXMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk MTE0NWRjYmUtYzBkOS00ZTc3LThmYzQtZTU3MDY5OGU0OTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBRWQ610QCyDhDut2kqBop8rUgLhCEU1Yq9G 083VJmZj0e3mpOj4y6H9xqp72bodGA/B2bKljUdBD1BCAqLDu03NaF5d/5SH7JIt cP7VmWKINCPsXTgiCf7X2h8B7+ZrA+g7PcYTPMVSFVB4S3bhyQe7tX9AQZ12rt5h XZ9VdWp+suyiV69MkhhO88BuZ7XyZLZhbb++Fuymnm3W+KnbWLEZdQABy4t0YCf/ TbqRHU612M0wKYq9NuRrstDMsue8QwSoUm6Q22/EqFcMp6nDPt49OlCRIt81VdVl 6SpXgHuTBEG5puC/Zojg4QcAJeSETx5TTf7ElmY6ZCHF8Zp4mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFw21FKB0UGmgfHGABCg9/AlXJ+IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTkzYjQ2MTctYzA0MC0z NWUwLWFkMDEtODBhNWU1NjJiMWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAx6iOF6LUYvkP0mvhlHm/Z+eYhddgHvSSyvWaz+reu6zHC61d0TTAfg ZqFLWBvvbwxR4VibEsr+JV0aIFVzFZg0dk9XOZXKqN512GLcSGCSsM0WfjN5qFOD LTU4grT3AGBYx82Z/2GJUpix6qBryTF4ak3HeLc8uU/177l2Vj/DOKMSY5WFCnbl PNCymJXoztLve9pCoLCEp5jmEEOJ6/nQ+uYvpPaZGbFrSd7oGL9qPaSFEYzXCmP0 2NCBc7rAnzh9qaKZRbOqyevmPV5/zBCkiP/AIIHGhzzxnwhLWX2hAwTgnnidJ99e WAqyg8DmunPk58MPhcwZ92T59qzT598= -----END CERTIFICATE-----Generated at Wed May 13 13:10:32 2026 by rpki-client