$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/871537b1-1a3c-3d03-9ef9-2a8e3f5aa9e9.roa File: 871537b1-1a3c-3d03-9ef9-2a8e3f5aa9e9.roa (raw, json) Hash identifier: pl3iIos7OGheZUlJYgTxbiNlk8AFBIwQzgswTYC8/4A= Subject key identifier: 24:76:5A:8C:27:6F:8A:A0:00:D6:1D:A0:91:39:C1:E0:68:6D:BB:61 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DCAFB0CFCD44CDACDDD06D180 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/871537b1-1a3c-3d03-9ef9-2a8e3f5aa9e9.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:0c:fc:d4:4c:da:cd:dd:06:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=07b40318-dc9c-4dc6-a56e-62e62271db3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:68:5a:d0:c1:85:ab:ac:63:20:04:60:a7:62: 56:c9:53:91:82:14:c8:ba:30:b2:da:92:0f:b1:ba: 92:bb:2e:9d:d8:74:4a:22:6b:31:4f:db:68:ab:0e: 04:92:69:12:a1:7b:97:46:9b:65:f3:31:14:a5:31: b1:be:7c:aa:60:51:e3:9e:75:e1:7d:db:df:fd:89: 5e:d9:2c:19:ba:46:a8:99:72:7c:e0:b2:80:90:10: ab:5b:2b:ff:e7:bb:19:aa:33:1b:b2:de:86:a9:c9: ac:a2:68:d1:ba:f6:57:bc:95:52:06:fd:c6:e6:2a: 36:36:37:96:37:3b:44:63:28:0f:97:3d:1a:29:a7: d0:6e:84:89:a4:ad:8b:f3:17:f0:da:85:1b:7c:18: ff:5d:c0:10:5f:ee:20:cd:87:f7:78:df:7e:b1:ee: 87:c5:43:74:63:3a:e2:a1:6b:e3:0d:6d:fd:41:ae: 8c:5e:36:66:94:3c:35:23:63:b6:ed:5e:0a:f6:00: 22:74:ab:04:85:84:f9:b9:23:84:14:3a:39:be:13: f2:71:d0:06:38:2a:38:45:8c:9e:9b:71:e9:22:9f: 10:29:19:6c:f0:b4:e5:97:de:ac:a8:51:35:c2:a1: 38:4e:ed:71:c3:ff:a9:b8:0a:8a:cf:a6:69:08:ef: 7c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:76:5A:8C:27:6F:8A:A0:00:D6:1D:A0:91:39:C1:E0:68:6D:BB:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/871537b1-1a3c-3d03-9ef9-2a8e3f5aa9e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:fd:02:07:f2:86:cc:43:a3:6e:c5:00:fe:4f:e1:da:2e:55: 92:d0:4c:99:cd:eb:11:41:5f:98:cf:d1:99:27:ad:c7:84:df: 6c:8e:1f:e9:5c:9d:0f:1a:1d:3a:94:86:47:4b:78:b5:21:ba: bd:83:4e:44:f5:7b:f6:76:fb:31:f3:d5:96:15:19:07:60:d3: d6:59:f7:7d:c7:a0:fc:3e:62:ab:83:79:83:5a:2f:8e:24:7e: 72:22:94:7f:5b:7e:32:c0:00:86:0c:5b:0c:3c:2f:60:81:07: b8:7b:f7:95:20:89:80:4a:ca:d6:4b:7b:c2:40:83:f7:db:5c: f3:d5:f1:77:02:4e:3c:b1:81:29:ee:43:37:bf:f2:3f:19:46: d0:0d:c5:77:b1:0d:cb:16:2e:3a:f5:2b:d4:f5:62:de:73:eb: 27:df:ce:93:9a:3a:40:d3:d2:44:e3:48:b1:b7:29:3e:0d:ca: e8:80:d6:03:53:1f:b6:5a:78:59:a7:69:b7:79:3d:27:36:6c: 97:3d:f8:a3:fb:3c:80:d5:5a:49:a8:41:2b:c2:8b:b9:63:21: d5:28:ff:ab:6d:15:5b:5f:cb:26:c8:92:cd:5d:e6:44:4d:c6: f5:ca:a7:9c:20:16:72:b4:2b:a9:69:d1:8d:49:80:cc:9f:03: ef:09:4c:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+wz81Ezazd0G0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk MDdiNDAzMTgtZGM5Yy00ZGM2LWE1NmUtNjJlNjIyNzFkYjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGha0MGFq6xjIARgp2JWyVORghTIujCy2pIP sbqSuy6d2HRKImsxT9toqw4EkmkSoXuXRptl8zEUpTGxvnyqYFHjnnXhfdvf/Yle 2SwZukaomXJ84LKAkBCrWyv/57sZqjMbst6GqcmsomjRuvZXvJVSBv3G5io2NjeW NztEYygPlz0aKafQboSJpK2L8xfw2oUbfBj/XcAQX+4gzYf3eN9+se6HxUN0Yzri oWvjDW39Qa6MXjZmlDw1I2O27V4K9gAidKsEhYT5uSOEFDo5vhPycdAGOCo4RYye m3HpIp8QKRls8LTll96sqFE1wqE4Tu1xw/+puAqKz6ZpCO98/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCR2Wownb4qgANYdoJE5weBobbthMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODcxNTM3YjEtMWEzYy0z ZDAzLTllZjktMmE4ZTNmNWFhOWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI79AgfyhsxDo27FAP5P4douVZLQTJnN6xFBX5jP0ZknrceE32yOH+lc nQ8aHTqUhkdLeLUhur2DTkT1e/Z2+zHz1ZYVGQdg09ZZ933HoPw+YquDeYNaL44k fnIilH9bfjLAAIYMWww8L2CBB7h795UgiYBKytZLe8JAg/fbXPPV8XcCTjyxgSnu Qze/8j8ZRtANxXexDcsWLjr1K9T1Yt5z6yffzpOaOkDT0kTjSLG3KT4NyuiA1gNT H7ZaeFmnabd5PSc2bJc9+KP7PIDVWkmoQSvCi7ljIdUo/6ttFVtfyybIks1d5kRN xvXKp5wgFnK0K6lp0Y1JgMyfA+8JTA4= -----END CERTIFICATE-----Generated at Wed May 13 11:20:36 2026 by rpki-client