$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6bd5db9a-f36f-3176-9d56-0cd93acf873e.roa File: 6bd5db9a-f36f-3176-9d56-0cd93acf873e.roa (raw, json) Hash identifier: apPHGPNLdcDW58khOEShUcbKixAVN1hj3p+ZtmKF77A= Subject key identifier: 0F:38:EB:51:9A:89:04:93:59:84:7B:BA:4C:46:DD:EB:89:67:F8:BA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DADAAE7139979D57A190C3780 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6bd5db9a-f36f-3176-9d56-0cd93acf873e.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 8069 IP address blocks: 20.33.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:e7:13:99:79:d5:7a:19:0c:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=4265b44c-df28-415d-b127-a7f90e9dad22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d4:78:b4:ad:23:d2:f6:07:1c:83:f3:68:d9: 2e:e0:bf:47:31:22:1b:80:fe:ba:dc:3e:5b:fb:26: eb:66:74:16:47:2f:af:ca:cf:b2:a2:3f:65:22:3e: 46:ad:54:ad:b9:03:57:56:fa:47:ef:93:6d:72:9d: 08:12:bf:c0:04:6e:13:c8:6d:b0:a8:81:2e:a1:0a: 30:80:88:9d:35:49:aa:e2:4f:dc:2f:0b:09:4a:3d: 26:af:c7:19:0b:ba:82:a1:14:2e:30:4a:2a:e0:6d: e3:f2:13:87:70:ce:38:d1:ad:f2:eb:44:e5:36:77: 46:be:81:db:0e:55:31:ac:34:58:ff:ba:90:59:6e: ac:0d:2d:30:10:af:83:2b:f3:8d:f9:1e:ed:05:38: 22:69:49:4e:14:3e:0b:08:54:be:61:d7:d4:75:6a: e9:a8:19:07:09:f9:9f:f9:a1:de:10:16:49:89:56: 4e:31:3e:16:60:37:fd:b5:79:78:1e:01:25:59:80: e7:24:51:9c:03:9a:fa:99:99:e8:5f:c9:d5:6d:a4: 63:9e:af:0c:56:c9:d3:ae:86:53:a8:db:87:4d:3b: 86:04:6f:12:0b:d1:87:18:49:9f:15:f5:7a:db:c9: c8:c6:ed:7b:6a:a5:98:9f:f1:40:2c:a3:ab:19:4f: e0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:38:EB:51:9A:89:04:93:59:84:7B:BA:4C:46:DD:EB:89:67:F8:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6bd5db9a-f36f-3176-9d56-0cd93acf873e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:31:db:f5:01:56:27:c9:d3:ae:16:56:3d:26:7a:37:a9:23: ca:47:7e:77:da:4f:29:7f:58:b4:88:1b:14:3a:33:05:e8:f4: 2a:8f:89:29:1b:75:0a:7a:ac:21:3a:fb:f2:7f:f0:7d:49:e7: 13:14:19:8c:c7:77:de:b8:f3:e8:c9:c7:7f:27:b3:99:ac:40: 6e:1c:bc:95:c0:d5:1c:23:d1:08:69:af:b3:c0:7b:79:33:f1: 9b:01:09:2c:9f:b1:0f:d0:23:49:0c:bf:18:89:d1:22:57:cf: c7:c4:b3:f1:b2:b3:6e:28:9e:05:a1:04:b3:68:32:eb:4c:cf: f9:80:91:d4:17:44:71:d7:af:fe:c7:f4:87:2d:5b:9a:c8:33: 90:9e:a0:cd:67:ff:a8:f4:1e:29:58:76:37:3a:df:21:49:af: d7:36:f6:c9:67:f1:d7:3e:c7:cc:74:70:a6:e1:1a:08:e9:a8: 54:ee:94:d2:d9:88:58:d5:e0:7d:d3:94:3d:15:82:10:6d:0a: d0:37:b9:0e:2a:29:f1:2b:16:99:06:6e:60:dd:49:2b:15:2e: de:ca:5d:96:e6:2c:f2:e5:87:20:c3:0c:f0:2a:7b:81:78:ee: b1:5b:c4:11:0f:88:57:55:70:12:76:a7:f5:f4:37:13:a6:43: 6a:e1:b5:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tqucTmXnVehkMN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk NDI2NWI0NGMtZGYyOC00MTVkLWIxMjctYTdmOTBlOWRhZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NR4tK0j0vYHHIPzaNku4L9HMSIbgP663D5b +ybrZnQWRy+vys+yoj9lIj5GrVStuQNXVvpH75Ntcp0IEr/ABG4TyG2wqIEuoQow gIidNUmq4k/cLwsJSj0mr8cZC7qCoRQuMEoq4G3j8hOHcM440a3y60TlNndGvoHb DlUxrDRY/7qQWW6sDS0wEK+DK/ON+R7tBTgiaUlOFD4LCFS+YdfUdWrpqBkHCfmf +aHeEBZJiVZOMT4WYDf9tXl4HgElWYDnJFGcA5r6mZnoX8nVbaRjnq8MVsnTroZT qNuHTTuGBG8SC9GHGEmfFfV628nIxu17aqWYn/FALKOrGU/gKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8461GaiQSTWYR7ukxG3euJZ/i6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmJkNWRiOWEtZjM2Zi0z MTc2LTlkNTYtMGNkOTNhY2Y4NzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQx2/UBVifJ064WVj0mejepI8pHfnfaTyl/WLSIGxQ6MwXo9CqPiSkb dQp6rCE6+/J/8H1J5xMUGYzHd9648+jJx38ns5msQG4cvJXA1Rwj0Qhpr7PAe3kz 8ZsBCSyfsQ/QI0kMvxiJ0SJXz8fEs/Gys24ongWhBLNoMutMz/mAkdQXRHHXr/7H 9IctW5rIM5CeoM1n/6j0HilYdjc63yFJr9c29sln8dc+x8x0cKbhGgjpqFTulNLZ iFjV4H3TlD0VghBtCtA3uQ4qKfErFpkGbmDdSSsVLt7KXZbmLPLlhyDDDPAqe4F4 7rFbxBEPiFdVcBJ2p/X0NxOmQ2rhtaQ= -----END CERTIFICATE-----Generated at Wed May 13 14:55:59 2026 by rpki-client