$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5411a0e2-71bf-3e49-a170-f2238edd14df.roa File: 5411a0e2-71bf-3e49-a170-f2238edd14df.roa (raw, json) Hash identifier: tAhuTet3aGeOoclX9Ehbw2Us2TYNh0+QanjjmiZoA5M= Subject key identifier: B9:93:FE:3C:4D:C1:22:BA:69:AF:FC:A3:E6:ED:36:E9:50:10:9E:FE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D44FA4E97317E1139A95F5D80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5411a0e2-71bf-3e49-a170-f2238edd14df.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.33.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:4e:97:31:7e:11:39:a9:5f:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=53252c00-870c-4ffd-a707-ad246cf3205b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d6:d8:2f:0c:d0:ce:a5:5f:d7:dc:16:90:a8: c5:6f:c9:c0:ae:2a:84:fa:d8:42:6c:86:72:bc:af: 76:37:89:5d:67:26:25:af:0c:89:05:a4:6f:6c:a1: b5:ad:9f:ac:a2:d6:c7:07:b3:64:88:fe:3d:89:c9: 64:97:4c:39:98:5a:b0:3a:b1:95:e1:81:81:32:98: fe:f7:9c:0b:a9:ea:01:b3:17:50:7f:41:5d:be:6d: b6:ae:27:6a:c6:64:84:7e:3d:3e:ee:a6:7f:1e:8f: 20:ab:27:3f:09:cc:0a:43:7b:d5:d0:4e:1e:06:aa: ac:07:44:4d:a0:e5:49:b9:dc:02:fe:cd:60:e9:1b: e2:1c:e8:0f:66:ab:09:59:ed:bd:ef:52:c5:26:a5: 58:3e:bf:61:8a:e9:85:c6:f2:b8:da:39:00:e2:01: 92:0e:4a:a8:43:75:ff:65:4b:51:0a:3d:79:f3:f4: 6f:8d:47:3e:1c:f0:3a:86:21:5f:22:10:c0:51:ed: f9:bc:5e:e3:f1:8b:65:1b:d8:e9:26:a5:0a:e6:f6: 73:02:a2:e6:9c:10:4e:7b:4e:b6:21:4e:13:68:e4: b0:54:37:a7:6c:16:80:8a:38:71:24:c5:96:d6:52: 40:46:95:37:67:bd:94:69:1a:94:fb:f8:cd:01:0d: d5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:93:FE:3C:4D:C1:22:BA:69:AF:FC:A3:E6:ED:36:E9:50:10:9E:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5411a0e2-71bf-3e49-a170-f2238edd14df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:13:64:6f:33:00:a1:26:e7:9e:e4:86:fd:35:16:9a:ae:4d: 38:a5:e1:cb:fd:fd:99:1c:ce:11:22:54:cd:c0:a7:c3:ff:56: 34:87:34:45:04:dd:32:3e:14:c6:03:88:c8:ba:9c:c4:11:73: c5:7a:0d:8e:2f:1c:e2:18:d0:2c:60:15:f8:73:4c:83:13:4f: ab:cd:a5:d9:ee:f7:e2:1e:9f:82:c8:2e:15:0a:23:ac:e0:47: cc:0d:49:88:e0:33:3c:da:ef:ca:de:fe:16:06:07:da:1a:f5: d9:f5:f2:94:88:87:95:4b:95:75:29:0a:c0:4d:0c:3a:69:c2: 92:e8:cf:33:b1:fc:b5:93:b5:51:54:e0:d7:a3:14:25:53:a9: a9:60:38:a8:2b:64:69:04:8e:e1:3c:2f:d1:e3:12:77:58:50: 3b:7d:5e:08:84:3e:0b:e6:6a:95:75:08:ce:4f:32:4b:88:e0: 33:61:17:31:80:37:2e:fe:cf:42:cf:c0:01:8a:47:5b:0e:20: 1d:7a:9b:3d:39:8e:87:fb:ee:53:d0:a2:06:31:0c:34:f9:49: 5d:fe:ed:34:21:e5:a8:e3:1d:a7:ae:53:9a:cb:21:98:6b:8f: 94:99:df:3c:d9:21:f7:91:d8:ae:f1:c9:65:a0:ed:34:cd:b5: bc:e5:68:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+k6XMX4ROalfXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NTMyNTJjMDAtODcwYy00ZmZkLWE3MDctYWQyNDZjZjMyMDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdbYLwzQzqVf19wWkKjFb8nAriqE+thCbIZy vK92N4ldZyYlrwyJBaRvbKG1rZ+sotbHB7NkiP49iclkl0w5mFqwOrGV4YGBMpj+ 95wLqeoBsxdQf0Fdvm22ridqxmSEfj0+7qZ/Ho8gqyc/CcwKQ3vV0E4eBqqsB0RN oOVJudwC/s1g6RviHOgPZqsJWe2971LFJqVYPr9hiumFxvK42jkA4gGSDkqoQ3X/ ZUtRCj158/RvjUc+HPA6hiFfIhDAUe35vF7j8YtlG9jpJqUK5vZzAqLmnBBOe062 IU4TaOSwVDenbBaAijhxJMWW1lJARpU3Z72UaRqU+/jNAQ3VhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmT/jxNwSK6aa/8o+btNulQEJ7+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTQxMWEwZTItNzFiZi0z ZTQ5LWExNzAtZjIyMzhlZGQxNGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwTZG8zAKEm557khv01FpquTTil4cv9/ZkczhEiVM3Ap8P/VjSHNEUE 3TI+FMYDiMi6nMQRc8V6DY4vHOIY0CxgFfhzTIMTT6vNpdnu9+Ien4LILhUKI6zg R8wNSYjgMzza78re/hYGB9oa9dn18pSIh5VLlXUpCsBNDDppwpLozzOx/LWTtVFU 4NejFCVTqalgOKgrZGkEjuE8L9HjEndYUDt9XgiEPgvmapV1CM5PMkuI4DNhFzGA Ny7+z0LPwAGKR1sOIB16mz05jof77lPQogYxDDT5SV3+7TQh5ajjHaeuU5rLIZhr j5SZ3zzZIfeR2K7xyWWg7TTNtbzlaKE= -----END CERTIFICATE-----Generated at Thu Mar 26 19:31:34 2026 by rpki-client