$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/32e61f71-42cb-3aa3-8fdc-307cc164b9ec.roa File: 32e61f71-42cb-3aa3-8fdc-307cc164b9ec.roa (raw, json) Hash identifier: YUr4a9j4YdKvyQ1+QE9+vQa2/B04t9/G9/1h/s1aim8= Subject key identifier: E6:24:92:5E:72:BF:55:EA:8B:15:7A:4A:FC:AA:82:30:41:43:ED:6F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D3E000AD29585EB40D356C900 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/32e61f71-42cb-3aa3-8fdc-307cc164b9ec.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 8069 IP address blocks: 20.33.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:0a:d2:95:85:eb:40:d3:56:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=caf6e104-c84a-4906-8ee9-18c425b29e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f3:d7:bb:27:66:16:f5:e0:90:8b:3c:f2:6c: 58:1d:83:56:48:e1:94:b2:52:c1:f1:a4:77:c3:a0: 1f:7c:d6:d9:5b:83:d1:c4:13:a5:7d:aa:29:8c:c3: 04:c8:78:70:dc:5d:c8:5e:f1:e0:a8:72:35:a4:df: 3d:e6:0b:18:d1:6e:9d:7a:59:f4:14:c3:24:13:7c: 19:d5:72:e8:ff:5d:7c:21:fd:ba:ce:92:45:8f:d4: 99:be:9e:ed:8d:c9:9f:a2:ea:93:85:89:5d:0a:2b: 4e:8e:94:20:a7:77:8f:33:6f:08:d7:56:75:89:6e: e5:0c:3a:15:48:ba:31:69:48:1a:2e:35:46:c5:b4: 04:72:0f:50:4b:53:36:43:be:1b:ca:78:43:52:4b: 64:da:78:eb:f0:78:08:ab:ec:95:b0:f5:30:fd:55: 6d:d1:96:3b:fc:6a:cb:69:ab:dc:2b:20:e5:ee:a5: 36:7e:9e:80:e8:a7:57:d5:03:4c:53:ad:b5:13:8a: 29:5c:95:7d:dc:c6:57:53:ce:d1:5d:f4:d2:f9:95: d9:8b:29:ab:4d:a0:6c:d4:98:7c:f5:a9:0a:1d:bd: 2f:54:88:06:f5:04:d7:a2:9d:cf:96:bc:f4:7d:12: 1d:84:93:5d:78:3a:80:4f:a9:7c:4c:ff:92:1b:b1: ee:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:24:92:5E:72:BF:55:EA:8B:15:7A:4A:FC:AA:82:30:41:43:ED:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/32e61f71-42cb-3aa3-8fdc-307cc164b9ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:50:03:f6:ef:f0:08:c7:1f:64:f2:6f:60:ee:0f:83:dc:96: 22:81:38:9b:d8:86:ea:80:8c:dd:d8:e9:fb:c8:ea:76:96:06: 08:b2:d9:f6:e5:c1:89:d4:ba:30:6a:2f:6b:c6:6f:a7:c9:98: 73:7b:7d:8d:03:b2:8c:87:fe:63:c5:df:f1:ee:4d:4f:f5:56: 03:a0:fb:8a:e4:45:f0:d9:1e:9b:39:d9:36:bd:0f:9e:3a:b2: f7:dd:95:c5:ff:a4:9d:25:ba:93:93:c6:e6:71:1a:2f:29:6e: 01:15:80:a3:6c:0a:12:ff:51:c6:86:69:ad:67:15:07:ec:54: c3:f8:be:63:c9:5b:fa:ca:20:13:00:d4:52:5f:ef:ec:f3:34: ac:94:1a:9d:51:e8:bf:38:39:ea:2a:66:2a:54:39:7b:2d:64: 0e:41:b1:c2:5f:5f:4d:a3:e9:e1:31:fc:e4:1d:7f:8e:a2:d8: d9:58:b7:65:d6:ae:8d:27:74:2f:b4:9a:9f:09:4a:7a:25:9f: ad:29:ab:95:83:be:15:e9:91:2a:bb:07:d6:7b:dd:30:6f:8e: e7:1c:8b:58:d8:68:d2:97:e8:29:67:cd:0d:bd:a1:47:5d:8e: 24:5e:de:51:62:a8:d6:07:d9:4a:73:be:2c:cc:4f:7f:a0:b3: e4:51:cf:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AArSlYXrQNNWyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk Y2FmNmUxMDQtYzg0YS00OTA2LThlZTktMThjNDI1YjI5ZTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/PXuydmFvXgkIs88mxYHYNWSOGUslLB8aR3 w6AffNbZW4PRxBOlfaopjMMEyHhw3F3IXvHgqHI1pN895gsY0W6deln0FMMkE3wZ 1XLo/118If26zpJFj9SZvp7tjcmfouqThYldCitOjpQgp3ePM28I11Z1iW7lDDoV SLoxaUgaLjVGxbQEcg9QS1M2Q74bynhDUktk2njr8HgIq+yVsPUw/VVt0ZY7/GrL aavcKyDl7qU2fp6A6KdX1QNMU621E4opXJV93MZXU87RXfTS+ZXZiymrTaBs1Jh8 9akKHb0vVIgG9QTXop3Plrz0fRIdhJNdeDqAT6l8TP+SG7HuEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYkkl5yv1XqixV6SvyqgjBBQ+1vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzJlNjFmNzEtNDJjYi0z YWEzLThmZGMtMzA3Y2MxNjRiOWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCFmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxQA/bv8AjHH2Tyb2DuD4PcliKBOJvYhuqAjN3Y6fvI6naWBgiy2fbl wYnUujBqL2vGb6fJmHN7fY0DsoyH/mPF3/HuTU/1VgOg+4rkRfDZHps52Ta9D546 svfdlcX/pJ0lupOTxuZxGi8pbgEVgKNsChL/UcaGaa1nFQfsVMP4vmPJW/rKIBMA 1FJf7+zzNKyUGp1R6L84OeoqZipUOXstZA5BscJfX02j6eEx/OQdf46i2NlYt2XW ro0ndC+0mp8JSnoln60pq5WDvhXpkSq7B9Z73TBvjucci1jYaNKX6ClnzQ29oUdd jiRe3lFiqNYH2UpzvizMT3+gs+RRz2U= -----END CERTIFICATE-----Generated at Thu Mar 26 18:50:09 2026 by rpki-client