$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4765031d-1fb0-368a-b723-e6788ae0b6c0.roa File: 4765031d-1fb0-368a-b723-e6788ae0b6c0.roa (raw, json) Hash identifier: 2QM/K5F5jMty3pYgMYVLEUBvqRHRq721Nli1BAAxQvw= Subject key identifier: 67:7B:01:19:1C:38:9D:86:C5:63:3F:87:33:04:81:95:6D:D5:60:DA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DA6B02A95337BC978D2CCBA8F Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4765031d-1fb0-368a-b723-e6788ae0b6c0.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:2a:95:33:7b:c9:78:d2:cc:ba:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=0c6e19b7-14ca-40a1-a6ae-1fc7e177fc3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:83:3d:37:77:eb:77:b0:84:b8:e5:50:f1:18: 70:6f:39:03:ca:d8:bb:54:00:c3:95:d7:cd:d2:f2: 92:d6:24:a9:ae:fe:7b:f7:0f:99:d5:79:ba:8b:80: 7b:5a:19:eb:d1:71:0f:fe:c8:8b:ce:86:de:10:32: 84:e5:9e:ea:a4:2c:2a:df:a9:8b:95:5b:60:b2:98: 99:db:21:4d:f2:09:1d:f6:b9:75:f6:ff:8b:fc:d3: 37:94:e4:4c:9f:0e:d9:c3:d6:61:f1:74:6c:b9:5a: b4:ca:a4:67:eb:d0:59:90:c8:35:5b:01:dd:cd:96: ed:10:83:83:b0:2d:4a:4b:df:72:18:72:0c:b9:99: 54:f9:1a:f7:dc:d5:7b:d2:f0:bc:b4:5c:ec:c3:f0: 18:82:85:e3:78:c8:95:37:57:73:a0:81:0a:1e:c1: df:5c:e7:70:48:6f:42:84:2f:32:4b:7f:1c:67:4f: 99:01:1e:70:2b:92:a7:b5:3a:60:2d:a0:8d:c0:f1: 72:e3:a7:f8:f4:b5:90:5a:88:05:02:98:b3:10:12: ea:85:f1:54:ab:e7:be:85:ba:d5:14:85:ab:75:2b: 8d:30:d0:56:9a:c7:00:49:35:84:b4:ed:78:b6:d4: 8a:b7:27:2d:d0:51:e3:e7:dd:fd:f9:47:53:ee:e3: 8b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7B:01:19:1C:38:9D:86:C5:63:3F:87:33:04:81:95:6D:D5:60:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4765031d-1fb0-368a-b723-e6788ae0b6c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:8a:7d:6e:5d:1e:1c:8e:54:38:27:f0:55:db:d3:c4:c3:5c: 1b:f9:aa:a9:bc:1d:53:9a:18:fd:4e:53:b4:44:44:b0:30:bd: 25:3f:3a:72:2f:3e:d7:e9:a8:1f:d4:15:9e:b6:f8:11:d7:02: d5:ad:ba:68:c5:0e:9d:76:a7:8e:c9:e8:b4:76:cf:3e:80:83: 5a:ff:1f:4f:4f:b1:09:0d:30:f1:1f:2f:59:64:c9:63:d8:d1: 47:36:47:03:bb:df:8d:c6:39:95:56:06:73:72:2c:f2:78:43: ba:61:19:b2:a5:17:b9:de:49:56:bb:23:88:9f:4c:30:f2:a7: 40:63:6b:61:db:00:75:9c:fc:4c:1c:f6:9f:4a:4b:0b:32:23: 0a:de:fe:68:68:16:99:12:2e:ea:63:85:88:6d:05:af:5a:df: 35:a7:e4:20:b7:c2:31:1a:73:64:7e:2e:a6:a2:fe:82:44:a1: 80:1b:02:6c:f8:d8:a7:6c:ff:26:b8:c7:4f:1a:63:5a:f0:b9: 34:39:43:32:c3:cb:de:6c:8d:39:c3:18:ee:fc:84:d1:77:cd: dc:eb:cf:c2:df:ae:0b:cf:97:d1:ae:ce:fe:5c:46:bf:59:b4: 3f:d4:a5:9c:e9:8b:db:53:8f:7a:75:7d:df:f1:ad:06:3e:3b: ce:23:a5:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msCqVM3vJeNLMuo8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk MGM2ZTE5YjctMTRjYS00MGExLWE2YWUtMWZjN2UxNzdmYzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4M9N3frd7CEuOVQ8RhwbzkDyti7VADDldfN 0vKS1iSprv579w+Z1Xm6i4B7Whnr0XEP/siLzobeEDKE5Z7qpCwq36mLlVtgspiZ 2yFN8gkd9rl19v+L/NM3lORMnw7Zw9Zh8XRsuVq0yqRn69BZkMg1WwHdzZbtEIOD sC1KS99yGHIMuZlU+Rr33NV70vC8tFzsw/AYgoXjeMiVN1dzoIEKHsHfXOdwSG9C hC8yS38cZ0+ZAR5wK5KntTpgLaCNwPFy46f49LWQWogFApizEBLqhfFUq+e+hbrV FIWrdSuNMNBWmscASTWEtO14ttSKtyct0FHj5939+UdT7uOLpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGd7ARkcOJ2GxWM/hzMEgZVt1WDaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDc2NTAzMWQtMWZiMC0z NjhhLWI3MjMtZTY3ODhhZTBiNmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESKfW5dHhyOVDgn8FXb08TDXBv5qqm8HVOaGP1OU7RERLAwvSU/OnIv PtfpqB/UFZ62+BHXAtWtumjFDp12p47J6LR2zz6Ag1r/H09PsQkNMPEfL1lkyWPY 0Uc2RwO7343GOZVWBnNyLPJ4Q7phGbKlF7neSVa7I4ifTDDyp0Bja2HbAHWc/Ewc 9p9KSwsyIwre/mhoFpkSLupjhYhtBa9a3zWn5CC3wjEac2R+Lqai/oJEoYAbAmz4 2Kds/ya4x08aY1rwuTQ5QzLDy95sjTnDGO78hNF3zdzrz8LfrgvPl9Guzv5cRr9Z tD/UpZzpi9tTj3p1fd/xrQY+O84jpdg= -----END CERTIFICATE-----Generated at Wed May 13 11:24:09 2026 by rpki-client