$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2c2aeecb-6fa1-3eb0-95f9-a54c25fd21a0.roa File: 2c2aeecb-6fa1-3eb0-95f9-a54c25fd21a0.roa (raw, json) Hash identifier: SrCgBgZxU5ktW/yj8zHSxdN6ctA69OQ+69Zv1tq9D/E= Subject key identifier: B7:ED:FA:C9:CE:84:4F:E9:DE:E4:40:2E:73:11:A9:DD:D4:55:07:3E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D9B855A19E75DE37518903A00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2c2aeecb-6fa1-3eb0-95f9-a54c25fd21a0.roa Signing time: Fri 24 Apr 2026 01:00:23 +0000 ROA not before: Fri 24 Apr 2026 01:00:23 +0000 ROA not after: Thu 23 Jul 2026 01:00:23 +0000 asID: 8069 IP address blocks: 20.33.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9b:85:5a:19:e7:5d:e3:75:18:90:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 24 01:00:23 2026 GMT Not After : Jul 23 01:00:23 2026 GMT Subject: CN=842fafe8-56c5-4405-bc80-c479d19f8270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3c:2e:b8:c9:87:08:bb:cb:cf:59:9a:bb:88: f1:e2:99:a9:b5:6a:bf:63:2e:ad:c2:2e:00:1a:c7: 5a:19:ee:ae:fb:7c:82:c9:f5:2e:c0:47:4e:ff:99: 57:e4:89:d4:a6:8a:d0:f1:43:59:c6:1b:53:f4:71: e4:85:de:a3:15:48:86:68:85:66:ba:21:64:fb:fe: 2a:1d:1c:5b:5d:87:1a:16:d5:d3:75:2a:21:3e:47: 18:b5:8c:e5:f3:5a:3a:f1:de:20:b5:37:76:85:26: 67:b6:d5:3d:73:b6:8e:0c:7b:b1:e4:26:9d:d0:cc: 1e:3d:d3:19:c3:61:c3:7c:27:0d:c1:0d:bd:1b:4e: 74:06:a2:17:77:16:59:24:cf:bd:e7:9b:32:a0:6e: 8b:4c:ad:d9:bb:e9:93:aa:5a:3b:1a:c6:1e:15:f5: 12:3e:fe:dc:2e:2e:47:9f:e1:10:ca:1b:ec:84:2a: 72:85:71:89:53:86:6f:81:14:21:2f:94:63:8e:6c: 87:58:35:81:df:c6:67:1d:73:21:ca:a4:2f:74:fe: e8:ca:e7:d2:41:3c:7f:8a:95:41:60:7e:3b:fe:a7: 69:9f:92:4d:ba:30:d1:00:6a:59:e9:4b:2c:77:de: 2a:45:e0:ac:dd:31:3a:73:ee:de:42:4c:11:26:c1: d3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:ED:FA:C9:CE:84:4F:E9:DE:E4:40:2E:73:11:A9:DD:D4:55:07:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2c2aeecb-6fa1-3eb0-95f9-a54c25fd21a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:af:1f:1f:ab:d9:f3:9e:3f:92:9a:20:cc:d6:da:7d:ab:74: c5:1e:fe:f0:2a:2f:ae:7f:45:a3:01:4f:ec:df:f7:2b:c6:ed: 46:3e:98:10:af:a7:ec:0d:d1:69:34:da:54:89:ea:e5:99:1f: c8:89:05:7b:f5:95:c7:ec:f7:57:3c:cc:41:21:65:0c:b6:92: 14:e2:0e:51:65:29:d1:5e:27:ec:0c:97:b6:db:5e:1a:38:d8: 8e:cb:d7:82:76:74:a3:ec:1c:88:68:7d:c3:1b:44:4c:a5:ba: 90:6d:2e:c2:8e:9c:3d:bf:87:88:6e:f6:b1:dc:f4:f1:03:32: 78:16:04:37:e1:26:3c:17:ec:11:1f:01:5c:c9:48:65:8c:67: 08:da:6f:a5:ad:4f:03:84:43:28:26:58:0c:bf:58:56:b5:34: f9:da:c0:7f:2b:59:ca:e3:2a:03:27:b8:21:46:a4:0a:ba:6e: fd:7b:01:24:be:c0:4d:f7:02:ec:9e:28:8e:3e:b9:a2:35:33: aa:ef:4e:1e:83:6f:83:a9:b7:12:23:e2:5b:9e:c8:bd:ae:e8: 7b:4e:d7:be:8b:92:d6:f4:6a:b5:73:27:75:6c:17:5c:5e:a3: 08:82:d7:43:74:ba:a8:34:42:8c:bc:f9:39:01:21:d1:1c:ef: 48:a1:df:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2bhVoZ513jdRiQOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk ODQyZmFmZTgtNTZjNS00NDA1LWJjODAtYzQ3OWQxOWY4MjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDwuuMmHCLvLz1mau4jx4pmptWq/Yy6twi4A GsdaGe6u+3yCyfUuwEdO/5lX5InUporQ8UNZxhtT9HHkhd6jFUiGaIVmuiFk+/4q HRxbXYcaFtXTdSohPkcYtYzl81o68d4gtTd2hSZnttU9c7aODHux5Cad0MwePdMZ w2HDfCcNwQ29G050BqIXdxZZJM+955syoG6LTK3Zu+mTqlo7GsYeFfUSPv7cLi5H n+EQyhvshCpyhXGJU4ZvgRQhL5RjjmyHWDWB38ZnHXMhyqQvdP7oyufSQTx/ipVB YH47/qdpn5JNujDRAGpZ6Ussd94qReCs3TE6c+7eQkwRJsHTRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLft+snOhE/p3uRALnMRqd3UVQc+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMmMyYWVlY2ItNmZhMS0z ZWIwLTk1ZjktYTU0YzI1ZmQyMWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACavHx+r2fOeP5KaIMzW2n2rdMUe/vAqL65/RaMBT+zf9yvG7UY+mBCv p+wN0Wk02lSJ6uWZH8iJBXv1lcfs91c8zEEhZQy2khTiDlFlKdFeJ+wMl7bbXho4 2I7L14J2dKPsHIhofcMbREylupBtLsKOnD2/h4hu9rHc9PEDMngWBDfhJjwX7BEf AVzJSGWMZwjab6WtTwOEQygmWAy/WFa1NPnawH8rWcrjKgMnuCFGpAq6bv17ASS+ wE33AuyeKI4+uaI1M6rvTh6Db4OptxIj4lueyL2u6HtO176Lktb0arVzJ3VsF1xe owiC10N0uqg0Qoy8+TkBIdEc70ih34g= -----END CERTIFICATE-----Generated at Wed May 13 11:41:15 2026 by rpki-client