$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/38a16a71-c9e4-362c-96c8-1339370d9d6e.roa File: 38a16a71-c9e4-362c-96c8-1339370d9d6e.roa (raw, json) Hash identifier: Rq7aGAJgOqb927S8+2xwbF19i1JfZ0MwQYf583Fnry0= Subject key identifier: 83:83:B8:6E:A6:88:49:D8:1A:E8:7E:15:FF:CD:3C:99:0F:E0:C9:74 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DBD05A366BE488624229BFE70 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/38a16a71-c9e4-362c-96c8-1339370d9d6e.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:a3:66:be:48:86:24:22:9b:fe:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=54cf25a8-3c96-4ee1-97a9-0c8b94f4ffba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3f:9a:17:09:a0:46:41:00:4a:13:a7:e2:ab: e6:16:59:e9:bd:19:05:80:ea:7a:4d:8c:51:2d:27: 3b:76:a5:13:fc:32:1f:9a:fc:6a:0d:f7:b6:55:6d: d6:8f:9b:1c:dc:ab:f8:db:d0:23:cd:97:07:4c:aa: eb:4d:2c:52:ee:9f:18:7f:2c:73:8c:41:da:d9:dd: d6:95:0c:56:17:ec:a1:0d:b2:b3:92:9b:fa:22:25: 21:7b:a3:c5:a8:d6:f4:6d:95:1c:fd:47:33:50:a0: 48:9f:20:e1:97:87:71:8a:6e:d2:40:0d:15:58:15: 49:40:b2:d6:d1:09:5f:05:98:ec:a1:77:3a:11:14: 48:f8:ee:66:7f:5e:04:1b:cf:63:ab:d9:f7:fe:ef: ba:f6:e0:2a:e8:8b:b2:db:e8:5b:58:a0:02:58:f9: 35:b3:b7:14:87:4c:61:e1:55:c4:15:b7:79:86:06: 7f:cd:56:cb:a7:76:db:7c:07:d3:df:28:a5:c5:20: 8d:2e:48:8f:71:34:cb:97:1d:0c:6a:58:e7:5e:39: d3:b3:2b:0d:ef:61:e7:ff:4a:a5:9f:49:00:b5:e3: 88:52:c4:95:25:8c:53:ed:56:8f:e9:5b:73:1b:ab: 8f:19:06:47:3b:ea:f9:00:b7:40:7e:43:4c:c0:bc: 09:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:83:B8:6E:A6:88:49:D8:1A:E8:7E:15:FF:CD:3C:99:0F:E0:C9:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/38a16a71-c9e4-362c-96c8-1339370d9d6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:ff:71:51:c2:b7:8d:e9:6b:48:eb:88:df:12:e6:4a:8d:13: 5b:b3:da:18:33:9b:1b:3d:2d:a9:df:fa:de:34:15:4e:ae:57: 1b:7a:ad:02:70:cd:c4:7c:03:c3:ef:c5:f3:b3:a4:f4:cc:ab: af:97:96:fe:98:a0:69:43:d3:85:4c:77:02:e9:b7:5d:86:45: 51:00:e0:71:2a:79:47:dd:07:d3:49:67:3d:09:c2:30:66:d3: 63:c7:54:7c:97:3e:09:03:eb:ab:16:77:51:74:2f:4f:19:79: 72:aa:2a:db:3d:eb:83:e6:fa:90:2f:13:c7:6b:8a:c5:25:87: d4:49:40:b3:23:17:d3:a7:9e:d6:17:d2:cd:68:92:4d:bb:21: 4f:c4:86:a9:8d:0a:dd:b8:2e:e7:75:bc:ad:20:34:f0:80:87: 4a:11:bd:a3:51:39:a8:48:ca:84:65:67:ab:0e:75:69:61:84: e4:8b:f9:5a:08:df:ac:d0:62:77:5b:60:1b:49:27:91:bb:75: c7:9a:41:22:98:43:e1:ab:f8:d8:3e:8f:92:27:1e:95:7a:d4: 26:b7:2d:ee:df:12:ca:7d:ff:bf:7f:af:c4:4d:66:f3:d0:f6: 95:0f:a2:57:62:89:54:87:77:cd:1a:af:dc:cf:15:8a:65:2f: 4d:f2:f4:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BaNmvkiGJCKb/nAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk NTRjZjI1YTgtM2M5Ni00ZWUxLTk3YTktMGM4Yjk0ZjRmZmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT+aFwmgRkEAShOn4qvmFlnpvRkFgOp6TYxR LSc7dqUT/DIfmvxqDfe2VW3Wj5sc3Kv429AjzZcHTKrrTSxS7p8YfyxzjEHa2d3W lQxWF+yhDbKzkpv6IiUhe6PFqNb0bZUc/UczUKBInyDhl4dxim7SQA0VWBVJQLLW 0QlfBZjsoXc6ERRI+O5mf14EG89jq9n3/u+69uAq6Iuy2+hbWKACWPk1s7cUh0xh 4VXEFbd5hgZ/zVbLp3bbfAfT3yilxSCNLkiPcTTLlx0MaljnXjnTsysN72Hn/0ql n0kAteOIUsSVJYxT7VaP6VtzG6uPGQZHO+r5ALdAfkNMwLwJ4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIODuG6miEnYGuh+Ff/NPJkP4Ml0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzhhMTZhNzEtYzllNC0z NjJjLTk2YzgtMTMzOTM3MGQ5ZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEj/cVHCt43pa0jriN8S5kqNE1uz2hgzmxs9Lanf+t40FU6uVxt6rQJw zcR8A8PvxfOzpPTMq6+Xlv6YoGlD04VMdwLpt12GRVEA4HEqeUfdB9NJZz0JwjBm 02PHVHyXPgkD66sWd1F0L08ZeXKqKts964Pm+pAvE8drisUlh9RJQLMjF9OnntYX 0s1okk27IU/EhqmNCt24Lud1vK0gNPCAh0oRvaNROahIyoRlZ6sOdWlhhOSL+VoI 36zQYndbYBtJJ5G7dceaQSKYQ+Gr+Ng+j5InHpV61Ca3Le7fEsp9/79/r8RNZvPQ 9pUPoldiiVSHd80ar9zPFYplL03y9BI= -----END CERTIFICATE-----Generated at Wed May 13 13:49:22 2026 by rpki-client