$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4eb720e4-01b2-3f16-8642-849e970123c0.roa File: 4eb720e4-01b2-3f16-8642-849e970123c0.roa (raw, json) Hash identifier: DYE26z9FUsah58jqXctokxU9Q+Kx20p7q/Wn511Oloo= Subject key identifier: FC:B2:DF:E0:F0:60:34:BB:E7:7E:28:CB:93:02:C0:CD:C0:29:01:84 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D44FA4E52E77F8B0673B9B080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4eb720e4-01b2-3f16-8642-849e970123c0.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.33.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:4e:52:e7:7f:8b:06:73:b9:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=1440592d-4cd5-4fed-83c3-12cfbe6f4276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fe:e4:7a:1a:0b:e4:d5:6d:92:9a:ed:83:11: 65:fc:8c:27:98:53:41:66:9a:2b:87:12:1a:08:e5: b4:ae:2b:d9:d9:2a:b5:40:0f:cd:8d:14:20:8f:8f: d6:79:5d:74:38:4a:5c:d6:6b:7d:00:37:4f:d3:56: ca:88:4c:ef:db:42:36:33:06:2b:8b:46:16:27:16: 05:5c:6d:32:1e:bd:c8:6c:eb:a9:b0:7e:0f:7e:a5: 35:c0:0b:25:72:af:af:16:1d:a2:2f:92:ce:c6:8b: 50:10:17:43:c9:f2:b4:49:af:87:9a:62:1e:0d:3b: fc:1e:7a:e8:05:1c:57:4e:1c:c7:db:93:6c:a5:57: 2b:3e:42:c4:18:e0:b9:9c:70:6d:a3:75:50:10:5a: 2e:3c:9e:00:63:7e:fa:6c:4e:bc:d7:88:bc:c4:5e: 0e:bb:ee:2e:61:ca:fb:56:f7:44:61:ae:02:46:f7: c6:ce:50:39:f2:79:12:69:31:65:8b:28:fb:ea:bf: ad:7c:95:3a:3d:a7:b7:f5:5c:c0:f6:fd:e8:7b:74: 92:21:dd:2c:fc:b9:d8:32:22:b7:1c:9b:ed:b9:06: 13:2a:a3:78:6d:ee:fb:bc:fd:16:34:f8:e1:07:e2: c6:0c:c9:78:92:2f:9c:48:d2:4a:1e:5e:fd:24:48: f9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B2:DF:E0:F0:60:34:BB:E7:7E:28:CB:93:02:C0:CD:C0:29:01:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4eb720e4-01b2-3f16-8642-849e970123c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:32:f6:83:6e:15:34:2e:27:a2:e4:72:0b:fb:1e:1f:c8:34: 6b:43:50:da:c9:43:e8:00:cd:22:99:40:1b:d9:20:f0:1d:c1: f0:bd:f7:f7:23:75:d6:14:bf:c9:5c:63:81:98:17:dc:2f:2e: 7b:c8:40:db:2d:75:74:c0:4d:e0:61:3a:e6:c7:b9:d9:ca:2b: 22:4e:9f:42:2c:e6:dd:3f:fe:c0:b7:21:1d:d3:c9:d4:e2:a0: 80:bb:e9:8c:1d:2c:f1:42:a0:01:54:bc:07:13:b4:93:78:ee: 7b:d3:b9:98:9a:30:e2:48:79:8b:6d:22:f5:dc:15:cb:5d:74: 15:ca:c4:9a:93:66:65:cd:9f:46:25:a8:34:9d:18:f4:49:ba: 1a:08:0d:8f:3c:8d:34:5c:35:e5:de:87:9e:bb:7a:44:5e:8e: cd:13:ee:d4:ce:c6:d9:c2:3b:79:02:12:25:a0:8a:b0:27:64: 92:f0:4b:e4:ed:c2:7c:0b:d0:3b:df:35:16:09:cf:b9:91:16: 80:8f:8e:18:69:9c:84:4d:fc:c4:59:e5:62:28:3d:f1:09:25: a2:af:88:8a:0b:17:22:48:5b:ca:e1:ad:3b:65:42:a6:d8:6c: 20:4a:a4:e5:f5:84:45:f7:81:4a:6c:75:9f:23:bd:ee:95:af: f7:7c:e9:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+k5S53+LBnO5sIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MTQ0MDU5MmQtNGNkNS00ZmVkLTgzYzMtMTJjZmJlNmY0Mjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP7kehoL5NVtkprtgxFl/IwnmFNBZporhxIa COW0rivZ2Sq1QA/NjRQgj4/WeV10OEpc1mt9ADdP01bKiEzv20I2MwYri0YWJxYF XG0yHr3IbOupsH4PfqU1wAslcq+vFh2iL5LOxotQEBdDyfK0Sa+HmmIeDTv8Hnro BRxXThzH25NspVcrPkLEGOC5nHBto3VQEFouPJ4AY376bE6814i8xF4Ou+4uYcr7 VvdEYa4CRvfGzlA58nkSaTFliyj76r+tfJU6Pae39VzA9v3oe3SSId0s/LnYMiK3 HJvtuQYTKqN4be77vP0WNPjhB+LGDMl4ki+cSNJKHl79JEj5jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyy3+DwYDS7534oy5MCwM3AKQGEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGViNzIwZTQtMDFiMi0z ZjE2LTg2NDItODQ5ZTk3MDEyM2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUy9oNuFTQuJ6Lkcgv7Hh/INGtDUNrJQ+gAzSKZQBvZIPAdwfC99/cj ddYUv8lcY4GYF9wvLnvIQNstdXTATeBhOubHudnKKyJOn0Is5t0//sC3IR3TydTi oIC76YwdLPFCoAFUvAcTtJN47nvTuZiaMOJIeYttIvXcFctddBXKxJqTZmXNn0Yl qDSdGPRJuhoIDY88jTRcNeXeh567ekRejs0T7tTOxtnCO3kCEiWgirAnZJLwS+Tt wnwL0DvfNRYJz7mRFoCPjhhpnIRN/MRZ5WIoPfEJJaKviIoLFyJIW8rhrTtlQqbY bCBKpOX1hEX3gUpsdZ8jve6Vr/d86bk= -----END CERTIFICATE-----Generated at Thu Mar 26 15:30:18 2026 by rpki-client