$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5611583f-0381-377c-8dab-8bb3ddb62332.roa File: 5611583f-0381-377c-8dab-8bb3ddb62332.roa (raw, json) Hash identifier: yEw1w+DvBBWNg/ZeuNAZPVwTVwSg+qtEN+myb2wgkBk= Subject key identifier: 12:3D:D9:AB:7A:DD:36:7C:8C:12:5C:BD:52:EF:C8:C9:25:53:F0:3C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D95F00D20D230ACEED94FA9E8 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5611583f-0381-377c-8dab-8bb3ddb62332.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 8069 IP address blocks: 20.33.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:0d:20:d2:30:ac:ee:d9:4f:a9:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=a06c83d9-b12b-4096-a204-f72dfe46409c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f4:11:b5:11:aa:f6:28:f8:a2:a3:cc:63:32: f3:8d:73:0f:b1:3e:49:bf:90:7b:bb:71:ba:60:21: bb:8e:b8:a8:3a:c4:12:a1:b5:ad:96:7a:71:83:36: 84:6d:f5:06:42:23:91:61:20:14:20:d1:8d:b1:01: 6d:d2:e9:ec:8d:70:30:08:1a:34:cd:8d:d2:94:4e: d5:ea:49:42:7a:b9:b3:d8:b9:2f:06:1d:4e:69:4f: 13:1d:95:c2:1a:c9:21:2a:3b:b3:00:a6:6f:e8:19: 7d:f6:4f:a3:7b:52:ee:bd:6b:40:8a:b7:b7:ab:24: 00:a9:2a:e7:a7:2c:e8:26:00:96:7f:c1:8b:c5:82: ef:5a:b3:0e:18:ce:52:c2:c3:a3:2e:03:b1:96:79: 5c:64:32:b6:5d:c1:43:5a:16:66:11:41:f9:b0:ae: e5:7d:65:ce:2a:5a:f4:fa:60:45:e2:49:75:97:2e: ef:20:cb:8e:aa:15:85:b4:5a:90:35:38:b3:64:ed: eb:e7:82:0a:95:5a:ec:66:c3:c6:40:a1:cb:64:f4: fe:e1:73:de:d1:8c:87:83:79:13:8f:6e:97:b9:f8: 94:08:11:e2:8e:59:6c:23:54:5d:8d:42:c3:83:0f: d4:cb:02:21:f5:e2:f5:81:27:82:49:23:92:a2:9f: 76:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3D:D9:AB:7A:DD:36:7C:8C:12:5C:BD:52:EF:C8:C9:25:53:F0:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5611583f-0381-377c-8dab-8bb3ddb62332.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:44:33:f2:13:10:46:8f:fd:5e:e5:c0:84:11:f4:00:f3:77: b4:3a:ef:c8:70:40:84:b5:b3:c6:1d:35:da:55:7f:b9:83:01: 82:a1:dc:96:96:11:d4:99:73:77:a0:a9:20:bb:40:c5:6a:75: a5:aa:de:12:ee:f1:1d:0c:48:a3:2e:be:21:ae:71:9b:85:36: 0a:af:bd:8d:98:ec:a7:c6:04:39:c5:3d:4a:ab:c4:7c:07:e4: 9b:40:c7:0a:e2:ac:6b:f8:3e:1c:5d:f2:20:d4:f2:03:c9:d7: 66:ea:22:55:03:f3:26:fb:0e:2f:67:13:5e:6f:62:2d:ee:42: be:bd:5d:9d:2e:41:47:9c:7c:eb:56:8d:83:8c:d5:9f:1e:e0: 79:f1:9b:e1:b3:69:c5:70:93:a5:ea:03:61:cb:cf:4d:e7:af: 4e:b1:a2:d1:f4:15:28:ce:75:89:6d:c7:0a:3d:c1:6b:80:66: f1:94:18:58:08:aa:88:ea:c7:78:77:62:33:34:13:cb:22:33: 29:1c:8e:8a:77:88:bc:09:0b:a2:1f:b6:63:68:02:90:61:dc: 6d:1e:85:4c:c1:3a:69:e4:64:5f:ce:35:b1:5f:44:24:f4:94: b5:72:3a:ae:6e:01:56:d5:7a:a0:21:1c:19:f7:9b:50:38:d1: e8:2e:58:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8A0g0jCs7tlPqegwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk YTA2YzgzZDktYjEyYi00MDk2LWEyMDQtZjcyZGZlNDY0MDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/QRtRGq9ij4oqPMYzLzjXMPsT5Jv5B7u3G6 YCG7jrioOsQSobWtlnpxgzaEbfUGQiORYSAUINGNsQFt0unsjXAwCBo0zY3SlE7V 6klCermz2LkvBh1OaU8THZXCGskhKjuzAKZv6Bl99k+je1LuvWtAire3qyQAqSrn pyzoJgCWf8GLxYLvWrMOGM5SwsOjLgOxlnlcZDK2XcFDWhZmEUH5sK7lfWXOKlr0 +mBF4kl1ly7vIMuOqhWFtFqQNTizZO3r54IKlVrsZsPGQKHLZPT+4XPe0YyHg3kT j26XufiUCBHijllsI1RdjULDgw/UywIh9eL1gSeCSSOSop92GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBI92at63TZ8jBJcvVLvyMklU/A8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTYxMTU4M2YtMDM4MS0z NzdjLThkYWItOGJiM2RkYjYyMzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5EM/ITEEaP/V7lwIQR9ADzd7Q678hwQIS1s8YdNdpVf7mDAYKh3JaW EdSZc3egqSC7QMVqdaWq3hLu8R0MSKMuviGucZuFNgqvvY2Y7KfGBDnFPUqrxHwH 5JtAxwrirGv4Phxd8iDU8gPJ12bqIlUD8yb7Di9nE15vYi3uQr69XZ0uQUecfOtW jYOM1Z8e4Hnxm+GzacVwk6XqA2HLz03nr06xotH0FSjOdYltxwo9wWuAZvGUGFgI qojqx3h3YjM0E8siMykcjop3iLwJC6IftmNoApBh3G0ehUzBOmnkZF/ONbFfRCT0 lLVyOq5uAVbVeqAhHBn3m1A40eguWMg= -----END CERTIFICATE-----Generated at Wed May 13 11:43:16 2026 by rpki-client