$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/980bd9a5-a720-3958-9261-a727982ef901.roa File: 980bd9a5-a720-3958-9261-a727982ef901.roa (raw, json) Hash identifier: /k0jQ3T5nBbkZx91WFAOUu7w4yfr6y8agsuvEtOBKAI= Subject key identifier: FE:B0:0B:00:21:E9:5C:DB:D3:C5:88:4C:21:4C:28:10:D7:4A:F2:B1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DBD05A34EE3C8789EF989CF50 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/980bd9a5-a720-3958-9261-a727982ef901.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:a3:4e:e3:c8:78:9e:f9:89:cf:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=6df54da1-f69c-4c35-8698-e1646ede5a83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0e:46:bd:df:b6:15:48:88:c9:83:34:0e:97: ed:42:66:f8:6f:b1:4b:75:46:8a:85:1e:60:6c:57: 8a:38:2b:25:d0:3f:d3:6d:4b:0f:2b:7e:ec:9e:87: ff:00:6b:0e:c5:2a:9c:2c:c7:af:3b:90:88:d5:ca: 8b:22:05:ac:72:23:64:36:21:8e:ab:9a:23:ff:80: fc:b3:a7:0d:47:5b:5b:64:7e:9a:bc:2d:4c:7d:65: cb:94:2d:6a:42:93:04:41:e1:85:e1:b5:9d:89:ac: bf:b4:d6:da:3e:4e:f0:17:3e:fd:42:5c:d6:62:9c: ed:e5:c5:07:f1:d8:53:c0:95:eb:ee:3a:10:81:49: 84:99:b0:60:da:41:d9:81:8d:a0:70:3f:b3:d4:6d: d1:f6:f6:fd:40:cf:4a:ca:20:8d:db:e5:c6:b1:64: 62:1c:07:4b:fc:ac:59:0f:07:14:41:bf:87:b2:89: 8a:b2:ff:3f:b5:91:88:80:92:8c:22:5b:42:0f:7b: bd:c6:f5:3e:ef:28:ac:a1:c2:7f:89:28:03:d7:63: c2:7a:45:df:1d:92:ee:a8:a2:da:19:9c:b4:42:20: 01:46:0c:09:ca:8b:d5:2d:af:12:d1:a8:06:3b:df: 65:97:19:be:67:9c:b3:a3:56:3e:21:0d:f1:f6:4d: 9f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B0:0B:00:21:E9:5C:DB:D3:C5:88:4C:21:4C:28:10:D7:4A:F2:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/980bd9a5-a720-3958-9261-a727982ef901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:8b:b4:c5:74:a2:f5:50:4a:93:63:12:04:c6:64:58:b1:b3: 91:bf:3f:7a:c9:ed:9a:09:46:d1:96:e0:b0:8b:f3:ba:5c:fd: bd:fa:0c:92:b5:32:0a:69:8f:83:6c:6e:75:84:32:69:d2:88: ef:f3:02:ce:3a:48:92:39:59:3b:db:f3:de:64:c9:d3:c7:c4: fd:bf:c5:92:3c:a9:18:db:0f:d2:5c:b8:60:96:ea:bd:57:16: 2e:99:24:17:37:5c:c8:c4:43:75:52:fa:90:27:bf:89:14:a7: 5f:fd:f6:c8:13:a5:db:7d:b1:47:15:cf:1a:bc:b5:81:f5:b6: 79:80:55:70:06:f1:32:c2:c1:7f:b6:22:f9:2c:77:a9:24:82: d0:98:ed:12:cf:6e:50:a3:b5:cb:58:6d:de:3f:72:a3:59:e8: 98:a3:4e:51:94:9a:de:0b:69:dd:98:bf:2d:75:68:3b:73:32: 31:71:72:f2:0d:da:21:7a:ab:a9:43:f7:5a:a9:47:d7:9e:21: f3:97:2d:2d:c1:06:3f:69:ce:84:77:0e:e5:c6:44:ae:e6:17: 20:ca:c4:89:ad:13:bc:6a:a1:de:fe:8c:81:06:e2:2d:de:e0: b2:00:40:5f:0e:16:b4:db:7f:50:9a:0b:2d:1b:98:45:d5:d4: 6c:56:e7:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BaNO48h4nvmJz1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk NmRmNTRkYTEtZjY5Yy00YzM1LTg2OTgtZTE2NDZlZGU1YTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgw5Gvd+2FUiIyYM0DpftQmb4b7FLdUaKhR5g bFeKOCsl0D/TbUsPK37snof/AGsOxSqcLMevO5CI1cqLIgWsciNkNiGOq5oj/4D8 s6cNR1tbZH6avC1MfWXLlC1qQpMEQeGF4bWdiay/tNbaPk7wFz79QlzWYpzt5cUH 8dhTwJXr7joQgUmEmbBg2kHZgY2gcD+z1G3R9vb9QM9KyiCN2+XGsWRiHAdL/KxZ DwcUQb+HsomKsv8/tZGIgJKMIltCD3u9xvU+7yisocJ/iSgD12PCekXfHZLuqKLa GZy0QiABRgwJyovVLa8S0agGO99llxm+Z5yzo1Y+IQ3x9k2fJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6wCwAh6Vzb08WITCFMKBDXSvKxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTgwYmQ5YTUtYTcyMC0z OTU4LTkyNjEtYTcyNzk4MmVmOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImLtMV0ovVQSpNjEgTGZFixs5G/P3rJ7ZoJRtGW4LCL87pc/b36DJK1 Mgppj4NsbnWEMmnSiO/zAs46SJI5WTvb895kydPHxP2/xZI8qRjbD9JcuGCW6r1X Fi6ZJBc3XMjEQ3VS+pAnv4kUp1/99sgTpdt9sUcVzxq8tYH1tnmAVXAG8TLCwX+2 Ivksd6kkgtCY7RLPblCjtctYbd4/cqNZ6JijTlGUmt4Lad2Yvy11aDtzMjFxcvIN 2iF6q6lD91qpR9eeIfOXLS3BBj9pzoR3DuXGRK7mFyDKxImtE7xqod7+jIEG4i3e 4LIAQF8OFrTbf1CaCy0bmEXV1GxW50c= -----END CERTIFICATE-----Generated at Wed May 13 15:50:04 2026 by rpki-client