$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4426bc50-c7c8-3db9-ba29-a76605eb28e0.roa File: 4426bc50-c7c8-3db9-ba29-a76605eb28e0.roa (raw, json) Hash identifier: q2tk6Q2fFWH6UJlAQPfWC7PezwUTmKUdWjTO6XnckOA= Subject key identifier: C2:39:9F:41:86:F2:B2:7C:12:89:B7:9D:8F:AD:7F:13:FD:50:C8:79 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D44FA4EC28FB3C94908B1CF40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4426bc50-c7c8-3db9-ba29-a76605eb28e0.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.33.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:4e:c2:8f:b3:c9:49:08:b1:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=d16529be-57a1-441c-9cfd-d1b42ca9ffae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:96:fa:30:e2:af:68:e2:27:79:74:16:b6:60: 0c:f9:e5:2c:59:99:21:e7:2f:82:89:ae:e6:7d:0e: 39:6b:78:9d:e3:e5:23:a7:a2:08:b0:87:1c:53:90: 46:91:a6:64:80:62:83:ea:18:43:cf:64:f2:7c:e2: cb:fd:53:64:05:8a:7a:d2:93:d6:35:17:95:a8:03: 90:13:7e:f3:f1:47:b2:7a:e0:bd:e1:20:8a:03:89: 98:54:26:ec:5d:e1:ef:43:ad:02:e1:13:98:56:31: d8:f7:f4:0b:27:52:42:1c:57:ed:0e:ed:8a:04:3f: 91:01:04:22:23:a1:89:70:ed:db:09:51:5d:39:3a: ca:97:68:45:4c:b5:82:8c:a7:a3:70:10:da:09:da: a0:75:1b:7a:fe:6d:cc:fe:70:6a:20:dd:63:57:43: f7:06:4c:68:6a:d4:df:dc:d1:d9:90:cc:b3:0a:d8: d6:01:4d:bb:4e:03:f1:a0:3b:81:40:a8:6d:3e:ec: 82:e6:db:80:80:58:e0:08:ca:35:36:89:d9:63:df: 8e:91:2d:85:c3:6a:36:9b:61:3a:f6:04:f9:da:2a: 46:6e:72:54:0e:26:fe:d4:a6:71:ef:37:be:7c:38: a6:31:0f:74:23:b6:37:38:53:d6:5c:bc:70:b7:1a: 36:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:39:9F:41:86:F2:B2:7C:12:89:B7:9D:8F:AD:7F:13:FD:50:C8:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4426bc50-c7c8-3db9-ba29-a76605eb28e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:dd:64:0e:c1:20:7a:1f:70:4d:05:42:95:cc:46:80:af:0e: 8f:35:cf:e3:64:22:95:df:d8:b7:67:e4:b9:29:c7:83:ef:d0: b2:28:d8:5e:14:3c:72:5f:86:11:2a:c2:a8:61:84:8a:15:11: 9e:ba:cc:f6:d6:28:6d:4c:96:c4:d6:c4:84:dc:7a:87:cd:8a: 63:0e:87:19:6e:c5:34:f4:fe:a1:d1:0d:f4:6f:74:14:e4:56: 89:ad:07:f0:6f:9f:5c:e3:2a:a1:8c:e6:7b:e3:71:89:2a:5b: 09:f5:1f:c1:fa:ad:55:6b:5f:5a:12:47:b3:59:a2:1f:e6:c2: 84:61:00:66:08:f7:47:8e:a6:fc:7e:f3:77:28:9b:88:6c:f0: 44:ec:b8:90:60:74:f0:97:f5:5a:04:77:8f:eb:2f:48:d2:a8: 0f:59:8a:26:fd:47:6d:f0:fb:61:fd:c4:5b:4c:71:2e:9b:17: 56:6a:59:74:6e:4e:2b:4f:a6:41:ae:ba:22:dc:fc:c2:a6:d2: 17:74:be:93:fd:6e:30:1a:e2:bf:3a:6b:81:03:28:bb:a6:d2: 0c:9a:84:a7:9b:df:30:5e:06:bb:e5:04:38:18:0c:84:f7:03: 2b:7a:ba:08:b7:86:e8:bc:54:1c:92:b7:6b:56:83:d2:7a:79: 3b:08:4a:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+k7Cj7PJSQixz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZDE2NTI5YmUtNTdhMS00NDFjLTljZmQtZDFiNDJjYTlmZmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZb6MOKvaOIneXQWtmAM+eUsWZkh5y+Cia7m fQ45a3id4+Ujp6IIsIccU5BGkaZkgGKD6hhDz2TyfOLL/VNkBYp60pPWNReVqAOQ E37z8UeyeuC94SCKA4mYVCbsXeHvQ60C4ROYVjHY9/QLJ1JCHFftDu2KBD+RAQQi I6GJcO3bCVFdOTrKl2hFTLWCjKejcBDaCdqgdRt6/m3M/nBqIN1jV0P3BkxoatTf 3NHZkMyzCtjWAU27TgPxoDuBQKhtPuyC5tuAgFjgCMo1NonZY9+OkS2Fw2o2m2E6 9gT52ipGbnJUDib+1KZx7ze+fDimMQ90I7Y3OFPWXLxwtxo2XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMI5n0GG8rJ8Eom3nY+tfxP9UMh5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDQyNmJjNTAtYzdjOC0z ZGI5LWJhMjktYTc2NjA1ZWIyOGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3dZA7BIHofcE0FQpXMRoCvDo81z+NkIpXf2Ldn5Lkpx4Pv0LIo2F4U PHJfhhEqwqhhhIoVEZ66zPbWKG1MlsTWxITceofNimMOhxluxTT0/qHRDfRvdBTk VomtB/Bvn1zjKqGM5nvjcYkqWwn1H8H6rVVrX1oSR7NZoh/mwoRhAGYI90eOpvx+ 83com4hs8ETsuJBgdPCX9VoEd4/rL0jSqA9Ziib9R23w+2H9xFtMcS6bF1ZqWXRu TitPpkGuuiLc/MKm0hd0vpP9bjAa4r86a4EDKLum0gyahKeb3zBeBrvlBDgYDIT3 Ayt6ugi3hui8VBySt2tWg9J6eTsISs4= -----END CERTIFICATE-----Generated at Thu Mar 26 03:49:38 2026 by rpki-client