$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/524ef244-3b54-3576-ac95-cc9390d8e648.roa File: 524ef244-3b54-3576-ac95-cc9390d8e648.roa (raw, json) Hash identifier: By22Pp89ZCwInt19lAeWsk8SCkh2NjigQqWara9UYSM= Subject key identifier: B8:D5:04:8F:61:9C:96:12:88:24:4C:92:27:BD:34:B0:FD:BE:FE:41 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DCAFB0D870E40241278640100 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/524ef244-3b54-3576-ac95-cc9390d8e648.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:0d:87:0e:40:24:12:78:64:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=38c50160-fddb-4fd3-a9ed-b37cfd98c7ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:79:ab:cf:36:93:fa:4e:2e:ea:d3:fb:d4:0b: 0a:51:cf:29:31:01:60:6b:30:96:42:af:c0:20:f3: 94:8d:77:27:48:d4:ff:9b:52:c4:4a:9a:44:61:f5: b6:05:ba:a8:1b:a0:46:f9:af:5d:4d:af:27:0e:66: bd:12:61:af:70:35:d6:8f:4b:5d:52:12:c9:aa:da: 39:5c:ce:b0:51:af:b2:3a:76:f9:39:24:ef:ac:c1: 8e:ef:21:62:11:13:1c:69:08:e3:88:ec:80:17:c3: 9a:6b:3d:f4:e8:f6:15:b1:da:46:49:b1:85:1a:97: bc:8d:9b:ad:8e:95:0a:8c:98:ee:c2:57:85:31:68: 66:e1:c7:bc:36:a9:a7:4a:f4:73:61:22:0b:36:e5: 8e:1f:f4:31:61:cc:9c:3e:d4:50:cc:2e:8a:dc:59: 3a:b5:2c:8a:69:28:30:0c:11:af:10:98:44:7d:e9: 51:2d:8e:34:4c:89:68:d2:e1:30:cc:0f:08:b7:76: 61:7c:ce:d3:6d:0e:15:de:6b:11:00:9f:15:d2:e4: 8e:26:e0:14:f9:fb:11:24:14:e2:b3:61:6c:6d:c7: f3:8b:42:db:e9:28:31:54:2b:53:ff:d5:8a:97:6d: fe:f6:49:ff:5a:5b:ec:dc:65:52:c6:1a:fd:f5:84: c4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D5:04:8F:61:9C:96:12:88:24:4C:92:27:BD:34:B0:FD:BE:FE:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/524ef244-3b54-3576-ac95-cc9390d8e648.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:e4:39:99:34:37:f6:3c:1e:c8:36:c7:85:dd:fe:58:f1:f6: 8e:85:b9:bc:a4:6f:a6:e3:c3:4d:c9:ea:e6:96:df:66:05:86: e0:a9:0d:aa:01:58:d9:74:d1:f3:dc:66:3e:4a:23:60:a9:ab: 2f:d3:b2:32:12:be:88:97:4b:44:e5:9d:97:98:90:3e:76:5a: fb:42:b0:59:e9:9a:91:e4:ba:ac:3b:7d:af:b1:32:25:f0:db: 84:96:ae:88:e7:43:ac:c3:15:fc:b3:b8:c9:c2:84:6c:7e:7b: 1a:fc:6d:a3:39:ca:ea:1f:f3:bb:fd:e5:33:78:39:98:65:01: aa:5c:56:f0:d1:45:49:26:25:b2:e8:22:be:e0:65:4d:8f:69: 99:8f:36:69:cf:e4:e3:c6:dd:a7:83:eb:1a:ad:c5:59:de:a9: 20:eb:f9:45:b4:e2:8e:76:64:97:f4:cb:8d:1e:e6:e0:63:3e: 29:6f:34:35:18:c5:1b:6f:a3:d1:d3:63:6e:d0:a0:f1:71:6b: 25:2a:95:3f:a5:49:43:d7:3a:07:99:73:55:ef:e0:40:3b:fc: 3b:e9:6f:41:7f:67:85:dd:f0:8b:16:b2:78:41:3d:7c:46:0b: 59:af:f5:48:87:26:b1:0d:f1:9b:c8:16:2f:dc:8e:3c:15:90: 08:bd:0f:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+w2HDkAkEnhkAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk MzhjNTAxNjAtZmRkYi00ZmQzLWE5ZWQtYjM3Y2ZkOThjN2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHmrzzaT+k4u6tP71AsKUc8pMQFgazCWQq/A IPOUjXcnSNT/m1LESppEYfW2BbqoG6BG+a9dTa8nDma9EmGvcDXWj0tdUhLJqto5 XM6wUa+yOnb5OSTvrMGO7yFiERMcaQjjiOyAF8Oaaz306PYVsdpGSbGFGpe8jZut jpUKjJjuwleFMWhm4ce8NqmnSvRzYSILNuWOH/QxYcycPtRQzC6K3Fk6tSyKaSgw DBGvEJhEfelRLY40TIlo0uEwzA8It3ZhfM7TbQ4V3msRAJ8V0uSOJuAU+fsRJBTi s2Fsbcfzi0Lb6SgxVCtT/9WKl23+9kn/Wlvs3GVSxhr99YTEuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjVBI9hnJYSiCRMkie9NLD9vv5BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTI0ZWYyNDQtM2I1NC0z NTc2LWFjOTUtY2M5MzkwZDhlNjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADkOZk0N/Y8Hsg2x4Xd/ljx9o6Fubykb6bjw03J6uaW32YFhuCpDaoB WNl00fPcZj5KI2Cpqy/TsjISvoiXS0TlnZeYkD52WvtCsFnpmpHkuqw7fa+xMiXw 24SWrojnQ6zDFfyzuMnChGx+exr8baM5yuof87v95TN4OZhlAapcVvDRRUkmJbLo Ir7gZU2PaZmPNmnP5OPG3aeD6xqtxVneqSDr+UW04o52ZJf0y40e5uBjPilvNDUY xRtvo9HTY27QoPFxayUqlT+lSUPXOgeZc1Xv4EA7/Dvpb0F/Z4Xd8IsWsnhBPXxG C1mv9UiHJrEN8ZvIFi/cjjwVkAi9Dwg= -----END CERTIFICATE-----Generated at Wed May 13 15:35:27 2026 by rpki-client