$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/80e82465-c9d4-3c99-a3bc-a70a5dfd93f8.roa File: 80e82465-c9d4-3c99-a3bc-a70a5dfd93f8.roa (raw, json) Hash identifier: nd/dUsLsQfw/ZiFEXi6I0yoDUMSXQ3il2AIJ0yKIZl8= Subject key identifier: 5F:20:EB:DA:65:AD:69:48:C7:82:4D:D8:8F:09:31:31:AB:01:27:F8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D44FA4EE7F9860F2C5D58A920 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/80e82465-c9d4-3c99-a3bc-a70a5dfd93f8.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.33.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:4e:e7:f9:86:0f:2c:5d:58:a9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=2c813d6a-cc18-4924-8d92-3a6c5abe2af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8a:a5:c2:31:93:8f:2d:28:f8:3b:6c:b6:94: fc:88:2d:ae:62:c2:97:a0:59:91:35:63:15:65:0d: 40:57:ed:9c:a7:fe:5a:79:ea:bd:3e:62:ed:c5:b2: 76:f1:fb:69:7c:91:83:0a:4c:f8:6d:bf:e2:60:7c: bd:27:89:22:af:18:0e:29:75:17:76:db:a4:62:a5: a6:aa:35:5b:f8:62:c1:3d:08:63:d8:42:87:3d:08: 43:01:e5:42:d5:dc:4c:29:75:89:4f:ff:ac:39:dd: aa:8b:fe:4d:bc:ed:e6:e2:cd:9d:cf:dc:6f:3b:a0: 0e:76:32:ac:8b:0d:37:0e:d8:8e:9b:83:7f:f0:bc: c9:9f:ba:f9:1c:59:09:e6:d7:21:7f:9a:5b:fd:9f: 69:a9:00:34:08:c0:05:3b:85:21:49:70:b2:26:97: d3:7b:ab:00:d5:91:d4:5d:74:ff:b4:c6:56:c8:a8: 90:35:2b:36:e9:86:35:6f:a0:ea:38:57:d9:8c:db: cf:24:7d:6d:f4:da:8e:7f:dc:0a:87:d7:49:5e:7d: dc:9b:62:c8:98:79:91:4e:25:14:eb:55:89:ec:8a: d7:74:33:03:15:79:8d:e0:34:00:56:8c:06:c6:72: 5e:62:55:5f:58:f4:65:36:fc:75:b8:6f:7f:56:72: 17:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:20:EB:DA:65:AD:69:48:C7:82:4D:D8:8F:09:31:31:AB:01:27:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/80e82465-c9d4-3c99-a3bc-a70a5dfd93f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:15:29:b7:08:c6:77:e7:68:0b:dd:6a:1d:3f:70:da:ef:56: 55:fa:2d:16:92:e5:69:d8:1d:48:1e:39:8d:75:72:22:fb:4a: cd:1e:f5:31:6e:0a:d5:03:1a:d7:41:72:f7:f0:14:5d:31:46: 22:b9:3b:68:cd:1d:1f:f3:e3:86:99:6b:59:fc:85:02:23:b5: b8:7b:fc:99:c4:28:7b:ee:6c:7b:2c:31:26:67:e6:6b:34:39: f6:69:54:35:32:db:89:14:f8:aa:46:7d:0f:94:05:e2:8d:70: 57:bf:27:61:4e:f3:9a:a3:9a:4f:b8:b5:33:90:79:9c:3b:f0: 32:9d:be:09:66:36:f9:5e:87:d8:f8:87:21:07:72:78:38:72: db:a6:c8:f6:95:e8:19:4e:fe:31:22:f2:d4:45:4a:a0:30:cb: 03:6e:48:b0:cc:9b:61:ed:11:c4:64:ec:06:77:44:f3:f4:37: 74:72:bb:8f:dc:93:76:ed:ef:36:3a:3a:75:de:4b:f9:1c:b1: 0d:09:cd:5e:f8:99:48:d0:96:f7:aa:99:d1:83:31:91:12:d6: a0:72:dc:19:f0:a0:87:2f:02:4a:80:2e:46:0b:f6:c0:85:d7: 10:55:6c:cc:e4:4b:f4:81:22:a4:72:6f:9b:76:12:c7:c3:8b: cb:dc:8d:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+k7n+YYPLF1YqSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MmM4MTNkNmEtY2MxOC00OTI0LThkOTItM2E2YzVhYmUyYWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoqlwjGTjy0o+DtstpT8iC2uYsKXoFmRNWMV ZQ1AV+2cp/5aeeq9PmLtxbJ28ftpfJGDCkz4bb/iYHy9J4kirxgOKXUXdtukYqWm qjVb+GLBPQhj2EKHPQhDAeVC1dxMKXWJT/+sOd2qi/5NvO3m4s2dz9xvO6AOdjKs iw03DtiOm4N/8LzJn7r5HFkJ5tchf5pb/Z9pqQA0CMAFO4UhSXCyJpfTe6sA1ZHU XXT/tMZWyKiQNSs26YY1b6DqOFfZjNvPJH1t9NqOf9wKh9dJXn3cm2LImHmRTiUU 61WJ7IrXdDMDFXmN4DQAVowGxnJeYlVfWPRlNvx1uG9/VnIXBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8g69plrWlIx4JN2I8JMTGrASf4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODBlODI0NjUtYzlkNC0z Yzk5LWEzYmMtYTcwYTVkZmQ5M2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgVKbcIxnfnaAvdah0/cNrvVlX6LRaS5WnYHUgeOY11ciL7Ss0e9TFu CtUDGtdBcvfwFF0xRiK5O2jNHR/z44aZa1n8hQIjtbh7/JnEKHvubHssMSZn5ms0 OfZpVDUy24kU+KpGfQ+UBeKNcFe/J2FO85qjmk+4tTOQeZw78DKdvglmNvleh9j4 hyEHcng4ctumyPaV6BlO/jEi8tRFSqAwywNuSLDMm2HtEcRk7AZ3RPP0N3Ryu4/c k3bt7zY6OnXeS/kcsQ0JzV74mUjQlveqmdGDMZES1qBy3BnwoIcvAkqALkYL9sCF 1xBVbMzkS/SBIqRyb5t2EsfDi8vcjWc= -----END CERTIFICATE-----Generated at Thu Mar 26 05:19:17 2026 by rpki-client