$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2f4b3421-ca06-34d3-ad50-682de9195829.roa File: 2f4b3421-ca06-34d3-ad50-682de9195829.roa (raw, json) Hash identifier: /1k87+ev51vR9HrFyMM8yGsj1vU6YXEEy0ql2G7jIms= Subject key identifier: 23:78:B8:FC:7F:78:E7:D6:9F:E1:73:F6:BC:96:A1:31:70:B2:51:6B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D95F00D1579C1EBE84DD50700 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2f4b3421-ca06-34d3-ad50-682de9195829.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 8069 IP address blocks: 20.33.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:0d:15:79:c1:eb:e8:4d:d5:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=ab9ae6d1-9f7e-44b0-9bab-6cade8450b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:80:9e:45:36:c4:86:89:2d:52:5f:ea:9d:2c: 80:19:40:90:34:b4:5f:b0:de:12:03:90:a1:11:1f: d9:81:ca:ca:9b:fc:bf:9b:06:d1:3e:e1:2e:e1:c3: 62:23:4f:f0:d9:55:67:be:1a:5c:89:7c:e7:03:8e: e7:f0:29:c0:68:1c:c5:b2:86:9c:58:30:a1:41:79: 5b:61:9e:32:a5:1e:75:5b:bd:bc:28:81:d4:3e:62: e4:72:3a:f1:51:55:d7:b5:87:a7:56:a5:64:8a:69: d2:a4:73:6d:82:49:6b:80:cd:91:43:1f:28:28:e7: 6a:37:4e:0d:3b:3b:29:e5:f5:92:f0:ee:26:0a:53: cc:12:14:d9:97:3e:62:d4:d9:4d:4b:70:85:27:89: 5e:e0:db:c5:be:37:d9:50:9d:8d:17:d4:67:9e:d2: 0f:9a:fc:f0:0b:bb:91:8b:0b:90:39:dd:28:2d:0e: 28:ca:8d:80:aa:93:47:75:29:db:37:c7:41:87:d7: 3f:04:27:8f:d4:47:0e:26:2d:2c:82:3a:50:e4:9d: c4:df:8f:38:42:38:5f:c6:4e:0f:09:46:4a:b8:04: c5:2a:6b:18:41:4f:a0:36:8f:c7:78:b3:8e:24:8f: c3:ff:8c:0b:4a:f4:aa:21:5d:a3:74:34:33:1f:f5: 9c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:78:B8:FC:7F:78:E7:D6:9F:E1:73:F6:BC:96:A1:31:70:B2:51:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2f4b3421-ca06-34d3-ad50-682de9195829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:0d:5c:b2:ab:41:7f:8a:ff:e1:71:55:51:fd:37:48:ae:fd: e2:70:2f:0d:59:31:b9:ea:88:6e:3d:2e:95:4b:56:21:c7:b4: 00:62:bd:0f:41:34:74:d4:47:f1:d7:bc:92:bc:b0:27:00:e9: da:e1:ff:3b:df:41:d1:63:da:84:35:f3:57:f6:26:60:2a:c8: 73:55:22:f3:b1:5c:bd:88:b3:51:c7:37:8a:23:05:0e:f3:5b: 2d:5d:6b:dd:86:33:f8:9d:7d:cc:d0:bb:08:45:a8:d2:f3:d4: c6:7a:c6:f6:39:7a:f8:70:4e:03:2f:15:66:06:29:ef:61:6b: fa:30:ea:b1:8e:17:12:fe:a5:39:76:96:56:cc:b2:4c:0a:e6: 70:ae:96:00:c0:b9:8e:9c:8d:ff:58:ca:86:38:f5:34:40:2d: 65:9e:aa:68:ec:5b:f6:35:3c:76:40:78:29:7d:de:51:c5:ee: c2:c6:d8:22:f2:37:8c:b3:7c:bd:31:bf:23:27:98:2d:2a:79: f2:57:a7:37:f7:d7:c6:29:1e:ee:fb:3e:eb:01:5c:12:04:2e: 94:89:f9:8b:46:d9:40:be:1b:d8:01:82:32:bc:a0:60:06:69: 34:70:ef:30:99:36:de:43:4b:a3:16:5b:53:49:54:42:ac:78: 05:7c:c3:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8A0VecHr6E3VBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk YWI5YWU2ZDEtOWY3ZS00NGIwLTliYWItNmNhZGU4NDUwYjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ICeRTbEhoktUl/qnSyAGUCQNLRfsN4SA5Ch ER/ZgcrKm/y/mwbRPuEu4cNiI0/w2VVnvhpciXznA47n8CnAaBzFsoacWDChQXlb YZ4ypR51W728KIHUPmLkcjrxUVXXtYenVqVkimnSpHNtgklrgM2RQx8oKOdqN04N Ozsp5fWS8O4mClPMEhTZlz5i1NlNS3CFJ4le4NvFvjfZUJ2NF9RnntIPmvzwC7uR iwuQOd0oLQ4oyo2AqpNHdSnbN8dBh9c/BCeP1EcOJi0sgjpQ5J3E3484Qjhfxk4P CUZKuATFKmsYQU+gNo/HeLOOJI/D/4wLSvSqIV2jdDQzH/WcHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCN4uPx/eOfWn+Fz9ryWoTFwslFrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMmY0YjM0MjEtY2EwNi0z NGQzLWFkNTAtNjgyZGU5MTk1ODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcNXLKrQX+K/+FxVVH9N0iu/eJwLw1ZMbnqiG49LpVLViHHtABivQ9B NHTUR/HXvJK8sCcA6drh/zvfQdFj2oQ181f2JmAqyHNVIvOxXL2Is1HHN4ojBQ7z Wy1da92GM/idfczQuwhFqNLz1MZ6xvY5evhwTgMvFWYGKe9ha/ow6rGOFxL+pTl2 llbMskwK5nCulgDAuY6cjf9YyoY49TRALWWeqmjsW/Y1PHZAeCl93lHF7sLG2CLy N4yzfL0xvyMnmC0qefJXpzf318YpHu77PusBXBIELpSJ+YtG2UC+G9gBgjK8oGAG aTRw7zCZNt5DS6MWW1NJVEKseAV8w4E= -----END CERTIFICATE-----Generated at Wed May 13 14:18:32 2026 by rpki-client