$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72d9f07c-a11c-33df-ab2e-319967d0580d.roa File: 72d9f07c-a11c-33df-ab2e-319967d0580d.roa (raw, json) Hash identifier: h8+F5KEqYl+g2iupRGzKXZ6e4YkIK2jOVAmz/B0tmBg= Subject key identifier: 48:3D:0D:8F:C2:48:13:92:74:2D:9A:FF:36:20:2B:0A:7E:5E:7E:99 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DADAAE707AE73E3FE0EAB7480 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72d9f07c-a11c-33df-ab2e-319967d0580d.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 8069 IP address blocks: 20.33.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:e7:07:ae:73:e3:fe:0e:ab:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=161cffc2-e2f0-482a-93ff-c9dfde2e2124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ac:31:91:17:7b:d8:ec:f2:cf:fa:7a:d4:1b: 95:b5:54:eb:82:4c:58:6d:89:d0:c0:90:d7:40:d3: 7f:22:02:0c:97:47:38:33:4e:68:55:be:5e:25:59: 59:a3:b0:02:36:3f:f2:5f:27:a2:3d:29:e2:37:bc: 40:cb:f5:db:35:11:00:96:34:26:e6:d0:b6:e9:a6: de:7a:e6:65:ec:72:38:e0:57:51:ff:ae:e1:9c:c1: 66:f1:2f:f8:23:95:d2:13:7b:ca:30:60:1d:fe:54: 70:74:5d:55:32:a8:d0:37:bb:07:42:45:23:5c:ff: d2:3d:cb:b4:f2:06:c5:9e:57:27:0b:1b:14:64:1f: a6:2c:9d:b0:e4:52:c0:69:90:ba:8e:ef:af:d8:19: 11:5e:e7:1a:cf:2f:14:ae:6c:e6:d5:32:79:2f:1d: f3:1f:ce:f3:d7:c1:82:a3:aa:08:19:27:19:b5:c9: 7c:8e:42:1b:c7:62:8c:70:7a:eb:d9:bd:f4:44:9d: 4d:63:58:4d:67:3f:20:ac:9d:1a:09:c8:ed:be:b0: 9c:c3:09:1c:61:37:27:05:a1:0a:f2:aa:91:cf:cb: 4a:ff:e3:bc:27:8a:d3:41:2f:1e:7f:14:99:0d:c7: 35:25:04:c8:1a:67:74:50:9c:0b:66:55:b3:46:b2: bd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:3D:0D:8F:C2:48:13:92:74:2D:9A:FF:36:20:2B:0A:7E:5E:7E:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72d9f07c-a11c-33df-ab2e-319967d0580d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:2d:59:86:fe:d9:13:0e:22:f6:a0:12:14:31:d1:16:a4:57: 15:f0:eb:f8:a6:a2:60:0b:f9:eb:da:83:83:c1:2f:30:c3:45: b2:63:c5:1c:4f:bb:c9:2f:13:48:18:78:cd:7e:98:64:32:67: 02:bb:25:d8:5d:79:8b:60:f7:23:56:f3:80:fa:6f:2c:c9:d0: 25:e2:18:69:4e:71:3b:61:49:8e:16:4c:bf:d2:31:ac:94:9e: ac:40:18:26:10:f2:c6:a6:9d:2b:51:82:4f:df:c9:8d:2d:1e: 32:57:94:10:29:b7:9f:cb:0d:47:a5:d5:f1:c3:98:32:22:b5: fb:6b:28:26:c5:37:4e:67:cf:79:07:2a:c5:32:34:43:31:0f: 28:22:0f:3d:d1:de:27:6c:a0:eb:c6:0b:8e:55:2d:95:3f:58: 45:00:22:de:4d:f9:b3:d3:8e:6f:5a:ad:07:c3:fa:88:f8:26: 83:c4:4c:6c:ac:96:04:4f:be:36:1a:ff:45:ee:d8:a5:0f:28: 0f:02:44:d6:59:7f:7e:82:0a:e0:39:af:11:a1:e7:4b:f2:08: e5:18:f4:1d:f1:a7:c2:8c:ac:65:55:38:78:ff:60:45:37:b5: fe:d4:c9:cb:85:66:a6:54:a1:28:7d:8b:f6:f6:8b:f7:ae:c6: b0:c5:96:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tqucHrnPj/g6rdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk MTYxY2ZmYzItZTJmMC00ODJhLTkzZmYtYzlkZmRlMmUyMTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKwxkRd72Ozyz/p61BuVtVTrgkxYbYnQwJDX QNN/IgIMl0c4M05oVb5eJVlZo7ACNj/yXyeiPSniN7xAy/XbNREAljQm5tC26abe euZl7HI44FdR/67hnMFm8S/4I5XSE3vKMGAd/lRwdF1VMqjQN7sHQkUjXP/SPcu0 8gbFnlcnCxsUZB+mLJ2w5FLAaZC6ju+v2BkRXucazy8Urmzm1TJ5Lx3zH87z18GC o6oIGScZtcl8jkIbx2KMcHrr2b30RJ1NY1hNZz8grJ0aCcjtvrCcwwkcYTcnBaEK 8qqRz8tK/+O8J4rTQS8efxSZDcc1JQTIGmd0UJwLZlWzRrK9vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEg9DY/CSBOSdC2a/zYgKwp+Xn6ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzJkOWYwN2MtYTExYy0z M2RmLWFiMmUtMzE5OTY3ZDA1ODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCETMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEItWYb+2RMOIvagEhQx0RakVxXw6/imomAL+evag4PBLzDDRbJjxRxP u8kvE0gYeM1+mGQyZwK7JdhdeYtg9yNW84D6byzJ0CXiGGlOcTthSY4WTL/SMayU nqxAGCYQ8samnStRgk/fyY0tHjJXlBApt5/LDUel1fHDmDIitftrKCbFN05nz3kH KsUyNEMxDygiDz3R3idsoOvGC45VLZU/WEUAIt5N+bPTjm9arQfD+oj4JoPETGys lgRPvjYa/0Xu2KUPKA8CRNZZf36CCuA5rxGh50vyCOUY9B3xp8KMrGVVOHj/YEU3 tf7UycuFZqZUoSh9i/b2i/euxrDFlpc= -----END CERTIFICATE-----Generated at Wed May 13 10:05:18 2026 by rpki-client