$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/37580c0c-2a55-33b3-8370-f1de0df7a3d3.roa File: 37580c0c-2a55-33b3-8370-f1de0df7a3d3.roa (raw, json) Hash identifier: pe31sYFowcbRZO+h0gMlrM317arGQe1BTSi/w+iHQu4= Subject key identifier: FE:45:BB:87:6D:0F:15:29:48:08:B8:D5:E7:02:5A:11:A6:B6:61:EF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D3E000B01B42DDDC602F335F0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/37580c0c-2a55-33b3-8370-f1de0df7a3d3.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 8069 IP address blocks: 20.33.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:0b:01:b4:2d:dd:c6:02:f3:35:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=58427137-6c8b-4339-915e-96b3596cc44e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:17:53:1f:2d:f9:6f:dc:3c:d5:63:87:82:f6: 44:e0:c3:35:10:cb:99:d5:02:4d:56:59:62:cc:80: a0:46:7d:00:27:c6:ee:5f:06:bc:28:c0:1d:47:9e: 21:e9:a3:48:2b:89:95:29:2d:3f:e0:e2:40:b6:59: d9:ec:12:4b:9d:9d:a7:3d:e0:19:0a:f0:3b:07:3e: 3d:98:25:8a:97:0a:c6:9f:3f:41:b4:da:f2:56:c7: 0f:54:c3:41:21:f9:59:80:87:d9:b1:cd:62:5c:21: 35:0c:e9:7c:55:22:7c:34:e6:24:6f:ed:e3:65:fb: 8e:89:76:95:22:b2:25:1c:93:b7:1d:15:b9:2b:e4: 08:56:34:d6:4a:46:57:2d:5f:3a:40:ae:98:7f:66: 45:4d:5c:6d:44:12:fc:a8:29:3b:d8:97:76:05:5c: 95:8d:ac:d3:a5:9c:71:23:4e:8b:f6:11:66:e0:c8: 4e:b7:2c:13:fb:44:17:82:67:de:30:9b:b1:59:87: fd:01:7a:8d:89:fc:e6:e0:d1:71:3c:fa:3a:0f:02: 9b:2b:17:2e:aa:aa:bc:2d:9c:a0:30:ea:ee:e1:84: ea:d2:49:70:a2:4d:c8:27:99:d9:7a:f8:aa:ab:a7: 0c:60:ad:d0:7b:e9:57:be:08:79:23:ff:8c:f8:f7: 39:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:45:BB:87:6D:0F:15:29:48:08:B8:D5:E7:02:5A:11:A6:B6:61:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/37580c0c-2a55-33b3-8370-f1de0df7a3d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:a7:20:b8:b8:3d:dd:aa:30:17:af:e8:30:46:58:f8:4c:d5: d9:53:26:47:cf:40:ab:3c:03:46:b2:41:20:91:fb:c3:db:71: 31:fb:ed:dd:76:46:a6:59:0c:fb:74:34:f6:2f:da:dd:3d:4d: 77:f0:1c:f4:94:67:5a:04:8f:62:a2:dc:eb:a5:82:55:57:5e: d2:e2:3f:77:6f:d5:eb:bd:4c:eb:34:9e:be:f8:0b:7c:a7:3a: 79:16:cc:af:0e:98:4d:26:da:33:30:b3:09:75:18:a3:80:9c: f5:9f:a3:81:8b:8f:e6:a9:0d:4c:89:e7:2e:b1:f2:20:c8:42: a4:e2:f4:89:f0:54:df:b2:b8:2d:aa:11:91:f6:21:81:11:d2: e4:9e:22:0a:42:4d:df:b9:2c:ae:be:46:ff:e6:c4:bb:9a:9a: 1d:b9:e2:5c:00:03:a8:d1:d7:08:db:6a:cf:81:4e:44:43:d8: 9f:c5:df:ed:4d:15:33:9a:ed:c6:09:3c:64:08:73:59:29:09: a0:fb:d7:ef:3a:c5:dd:31:8d:e6:9e:7b:6c:f5:f9:1a:e3:8c: 65:53:3a:6f:30:5d:5d:7d:de:ec:ff:46:de:79:f9:fd:c6:94: 3b:1c:e7:42:9b:85:2b:5f:4d:0b:0b:c1:9a:be:d0:85:d3:32: 0f:49:24:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAsBtC3dxgLzNfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NTg0MjcxMzctNmM4Yi00MzM5LTkxNWUtOTZiMzU5NmNjNDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhdTHy35b9w81WOHgvZE4MM1EMuZ1QJNVlli zICgRn0AJ8buXwa8KMAdR54h6aNIK4mVKS0/4OJAtlnZ7BJLnZ2nPeAZCvA7Bz49 mCWKlwrGnz9BtNryVscPVMNBIflZgIfZsc1iXCE1DOl8VSJ8NOYkb+3jZfuOiXaV IrIlHJO3HRW5K+QIVjTWSkZXLV86QK6Yf2ZFTVxtRBL8qCk72Jd2BVyVjazTpZxx I06L9hFm4MhOtywT+0QXgmfeMJuxWYf9AXqNifzm4NFxPPo6DwKbKxcuqqq8LZyg MOru4YTq0klwok3IJ5nZeviqq6cMYK3Qe+lXvgh5I/+M+Pc5vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5Fu4dtDxUpSAi41ecCWhGmtmHvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzc1ODBjMGMtMmE1NS0z M2IzLTgzNzAtZjFkZTBkZjdhM2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADunILi4Pd2qMBev6DBGWPhM1dlTJkfPQKs8A0ayQSCR+8PbcTH77d12 RqZZDPt0NPYv2t09TXfwHPSUZ1oEj2Ki3OulglVXXtLiP3dv1eu9TOs0nr74C3yn OnkWzK8OmE0m2jMwswl1GKOAnPWfo4GLj+apDUyJ5y6x8iDIQqTi9InwVN+yuC2q EZH2IYER0uSeIgpCTd+5LK6+Rv/mxLuamh254lwAA6jR1wjbas+BTkRD2J/F3+1N FTOa7cYJPGQIc1kpCaD71+86xd0xjeaee2z1+RrjjGVTOm8wXV193uz/Rt55+f3G lDsc50KbhStfTQsLwZq+0IXTMg9JJPs= -----END CERTIFICATE-----Generated at Thu Mar 26 04:00:09 2026 by rpki-client