$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/75001df1-5e21-3546-b115-8de972f910a8.roa File: 75001df1-5e21-3546-b115-8de972f910a8.roa (raw, json) Hash identifier: Gp+4yqtFSuRSJ8YErutmQTqJl3RzXUry0Wfxzpy+IEY= Subject key identifier: 83:25:BF:E4:1A:1A:C4:F6:71:6C:09:E7:6B:88:B4:33:80:D0:9A:C8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DA6B02A331FEC7F39D7BE4780 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/75001df1-5e21-3546-b115-8de972f910a8.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:2a:33:1f:ec:7f:39:d7:be:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=ac756ab3-514b-47da-a378-7ad0bc1cbaea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:56:8c:86:9e:3d:fc:4e:9d:73:9a:fd:9e:b3: 62:28:f7:0d:1b:59:c5:5d:bd:8c:97:7f:62:92:9d: b3:d4:af:e8:fe:17:85:1e:a5:e0:de:ef:cb:3f:ae: 6e:0a:c0:5e:c4:d0:6f:b5:2b:97:98:eb:d7:92:73: c4:56:98:ad:10:13:d4:a3:d8:c8:92:92:4b:fa:cf: 0d:e1:be:a4:0f:1a:cd:82:ab:25:a9:3d:39:6a:81: d4:03:f4:a1:1b:ba:61:be:d9:b6:4a:77:be:99:c1: 14:2a:92:61:eb:8a:57:7e:91:38:f7:8f:23:64:54: 3a:20:5f:91:bb:1f:8d:f4:a2:4b:80:58:5d:d5:5a: 9b:9c:c6:26:02:7c:6a:6e:26:87:71:55:a0:4f:fc: 84:7e:f0:bb:d9:45:22:12:a6:ec:6c:6d:89:1d:1b: c7:08:28:bf:d4:98:32:b7:3b:67:a0:ef:4f:3c:13: c7:b7:67:a0:bf:a0:da:8d:bd:90:d8:f9:b0:d1:89: d3:38:54:3f:04:ad:10:73:82:ec:bb:52:22:ba:b9: 17:6b:27:96:3a:91:66:4a:e1:9e:e7:0c:d4:9b:a2: ce:3d:6e:a1:1c:0f:bb:b7:cd:c6:f1:91:e5:61:a7: 93:83:6b:3b:61:f1:c5:69:0d:30:bd:5a:9e:fd:1d: 88:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:25:BF:E4:1A:1A:C4:F6:71:6C:09:E7:6B:88:B4:33:80:D0:9A:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/75001df1-5e21-3546-b115-8de972f910a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:42:74:ee:36:25:1d:c4:d8:72:54:80:48:27:22:02:40:8b: ad:2d:02:31:2a:74:ba:9c:64:58:19:f7:fc:6a:fc:5c:7d:72: a2:cc:93:b8:a8:69:6d:64:12:24:07:69:10:78:3b:f3:f6:c3: bd:40:28:4e:c7:28:d1:c6:7c:1a:4e:94:92:be:fd:a4:bb:71: b8:b5:4e:93:57:00:1b:c7:7a:5f:b9:19:ea:26:1c:d0:df:41: d0:87:c2:0b:a7:c6:d0:2b:63:4c:36:cb:0c:d1:00:6f:90:93: 0c:c6:45:df:a3:86:b7:02:57:6b:db:4d:03:d1:a8:b6:ed:a9: ec:cc:61:c8:ca:9f:79:ab:93:a7:df:9a:a4:35:ff:85:a6:16: 82:55:d1:8f:a5:c6:d1:89:e1:ac:07:f2:57:19:c9:df:72:9e: d2:07:10:cb:00:1b:91:6c:0f:d8:ca:ec:51:f1:54:bd:d5:e3: 4a:ce:35:5b:31:6e:7e:de:1d:06:9a:bc:1c:fc:27:65:c0:5a: bf:88:2d:a6:c6:a9:50:a6:b3:0b:48:b3:2e:93:05:76:11:67: 30:77:16:f0:2a:4c:0b:b8:d6:ff:65:db:c0:9e:5e:d3:71:b7: 8e:a2:68:2f:07:4e:f5:19:f9:33:8a:7b:4c:5f:b0:79:d6:f6: 86:54:04:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msCozH+x/Ode+R4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk YWM3NTZhYjMtNTE0Yi00N2RhLWEzNzgtN2FkMGJjMWNiYWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1aMhp49/E6dc5r9nrNiKPcNG1nFXb2Ml39i kp2z1K/o/heFHqXg3u/LP65uCsBexNBvtSuXmOvXknPEVpitEBPUo9jIkpJL+s8N 4b6kDxrNgqslqT05aoHUA/ShG7phvtm2Sne+mcEUKpJh64pXfpE4948jZFQ6IF+R ux+N9KJLgFhd1VqbnMYmAnxqbiaHcVWgT/yEfvC72UUiEqbsbG2JHRvHCCi/1Jgy tztnoO9PPBPHt2egv6Dajb2Q2Pmw0YnTOFQ/BK0Qc4Lsu1IiurkXayeWOpFmSuGe 5wzUm6LOPW6hHA+7t83G8ZHlYaeTg2s7YfHFaQ0wvVqe/R2IfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMlv+QaGsT2cWwJ52uItDOA0JrIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzUwMDFkZjEtNWUyMS0z NTQ2LWIxMTUtOGRlOTcyZjkxMGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdCdO42JR3E2HJUgEgnIgJAi60tAjEqdLqcZFgZ9/xq/Fx9cqLMk7io aW1kEiQHaRB4O/P2w71AKE7HKNHGfBpOlJK+/aS7cbi1TpNXABvHel+5GeomHNDf QdCHwgunxtArY0w2ywzRAG+QkwzGRd+jhrcCV2vbTQPRqLbtqezMYcjKn3mrk6ff mqQ1/4WmFoJV0Y+lxtGJ4awH8lcZyd9yntIHEMsAG5FsD9jK7FHxVL3V40rONVsx bn7eHQaavBz8J2XAWr+ILabGqVCmswtIsy6TBXYRZzB3FvAqTAu41v9l28CeXtNx t46iaC8HTvUZ+TOKe0xfsHnW9oZUBH8= -----END CERTIFICATE-----Generated at Wed May 13 15:10:33 2026 by rpki-client