$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/798adac3-d14c-35f6-92cf-8429aea1bb8e.roa File: 798adac3-d14c-35f6-92cf-8429aea1bb8e.roa (raw, json) Hash identifier: 4xVETtgTwIGP1TVm9/Dtah9gWWT+DB6xi0aFe2P07DA= Subject key identifier: 71:8F:2C:97:16:30:19:BF:C9:6B:E8:3C:74:1F:B0:C1:E2:75:4C:D9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DA6B02989FBB348B86CA26C80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/798adac3-d14c-35f6-92cf-8429aea1bb8e.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:29:89:fb:b3:48:b8:6c:a2:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=fb5b1887-aadb-4609-8e3e-d029cc2d7aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a9:83:96:85:8c:c4:63:7f:1c:91:89:c9:08: 7f:62:3b:60:13:28:ea:c9:d8:21:5d:0b:75:20:2f: d5:a5:3a:e1:e2:a0:ab:79:44:f6:b4:6a:3f:31:84: 7e:7f:6f:20:0b:81:55:56:33:14:bc:c4:75:95:53: c3:c1:fd:3b:54:ca:69:8c:b0:d7:39:ee:6c:92:b7: 66:73:eb:fc:85:0b:87:56:71:0c:e0:8d:71:22:67: 41:bf:28:de:34:b8:79:b4:d3:3d:07:29:99:d1:9a: c7:e9:c9:24:74:42:12:46:db:45:45:79:de:90:6d: 1e:c2:89:2c:e0:54:06:e5:60:04:ae:1d:8d:b3:d3: 6b:56:8a:7f:60:1c:09:90:0e:b0:a5:76:6d:18:23: 57:34:56:ae:6a:d3:51:80:c3:cf:47:31:1b:08:9e: 7b:8c:7d:c8:ad:62:19:40:bb:99:16:aa:a7:28:ab: 6b:2c:bf:a4:5e:7d:ba:b4:4a:6b:7f:03:c3:e5:0b: a0:9a:51:42:a1:3d:18:f5:1c:1c:d1:4c:07:94:9f: e8:89:c8:b2:4b:c0:70:58:ab:fc:85:22:a2:4f:d2: b1:34:c1:80:66:eb:66:09:a7:56:46:9e:8a:e4:22: ff:11:23:c5:32:05:0f:5f:df:48:a2:c8:cd:c8:c1: e3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:8F:2C:97:16:30:19:BF:C9:6B:E8:3C:74:1F:B0:C1:E2:75:4C:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/798adac3-d14c-35f6-92cf-8429aea1bb8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:15:14:63:28:f0:f5:8c:aa:27:99:cf:0b:a0:36:a4:93:07: a7:a4:5c:6c:85:f1:5a:d9:5f:51:d7:11:79:a3:32:75:0e:36: 95:b4:e0:e9:da:41:b2:a8:cb:10:61:23:b2:60:db:79:53:90: 52:18:59:75:c5:29:48:2a:18:18:8d:ae:96:6d:df:ee:11:ed: 58:56:b2:70:66:e8:35:2d:79:f9:b6:1d:59:6e:2c:a9:d8:a2: bf:c8:fc:39:78:35:e6:e6:66:11:6d:ea:02:95:74:3a:34:fb: 69:1d:e0:9c:4a:90:1b:1a:c1:c1:16:1b:d4:10:7d:ae:8f:c6: c9:9b:08:15:67:2a:2d:46:47:ba:04:c0:76:da:d4:59:91:c9: 3e:de:8d:e3:58:06:9b:23:60:d3:1e:7c:bd:39:29:2e:7e:28: f8:84:4f:3b:40:7d:7b:f4:22:ad:41:93:ed:17:97:3b:0a:c8: 35:0b:2b:98:96:bd:30:e8:f5:dc:85:df:3f:bb:4e:40:39:3c: d4:8f:7b:0b:31:2d:18:e4:cc:a7:c5:3d:cd:1a:f0:fd:ec:2f: 61:49:54:d9:bc:2d:60:08:da:5e:af:a5:ec:8b:e0:20:3b:4b: ba:79:09:f8:c0:9a:46:50:89:48:3b:c0:67:c0:e5:f5:4a:f9: 14:d6:38:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msCmJ+7NIuGyibIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk ZmI1YjE4ODctYWFkYi00NjA5LThlM2UtZDAyOWNjMmQ3YWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qmDloWMxGN/HJGJyQh/YjtgEyjqydghXQt1 IC/VpTrh4qCreUT2tGo/MYR+f28gC4FVVjMUvMR1lVPDwf07VMppjLDXOe5skrdm c+v8hQuHVnEM4I1xImdBvyjeNLh5tNM9BymZ0ZrH6ckkdEISRttFRXnekG0ewoks 4FQG5WAErh2Ns9NrVop/YBwJkA6wpXZtGCNXNFauatNRgMPPRzEbCJ57jH3IrWIZ QLuZFqqnKKtrLL+kXn26tEprfwPD5QugmlFCoT0Y9Rwc0UwHlJ/oiciyS8BwWKv8 hSKiT9KxNMGAZutmCadWRp6K5CL/ESPFMgUPX99IosjNyMHj4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGPLJcWMBm/yWvoPHQfsMHidUzZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzk4YWRhYzMtZDE0Yy0z NWY2LTkyY2YtODQyOWFlYTFiYjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0VFGMo8PWMqieZzwugNqSTB6ekXGyF8VrZX1HXEXmjMnUONpW04Ona QbKoyxBhI7Jg23lTkFIYWXXFKUgqGBiNrpZt3+4R7VhWsnBm6DUtefm2HVluLKnY or/I/Dl4NebmZhFt6gKVdDo0+2kd4JxKkBsawcEWG9QQfa6PxsmbCBVnKi1GR7oE wHba1FmRyT7ejeNYBpsjYNMefL05KS5+KPiETztAfXv0Iq1Bk+0XlzsKyDULK5iW vTDo9dyF3z+7TkA5PNSPewsxLRjkzKfFPc0a8P3sL2FJVNm8LWAI2l6vpeyL4CA7 S7p5CfjAmkZQiUg7wGfA5fVK+RTWOAo= -----END CERTIFICATE-----Generated at Wed May 13 12:49:10 2026 by rpki-client