$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b12175cf-2702-3731-83e8-14996dac56a9.roa File: b12175cf-2702-3731-83e8-14996dac56a9.roa (raw, json) Hash identifier: w28EeKH7BaApzafVmUeqy9PrXxug4BjrOzxkoRIGqAo= Subject key identifier: 8C:D3:F9:FE:41:6D:63:45:E1:4A:5C:8A:81:52:DC:AC:D0:93:9D:D6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D44FA4EB50CB7660BFB1A4600 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b12175cf-2702-3731-83e8-14996dac56a9.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.33.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:4e:b5:0c:b7:66:0b:fb:1a:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=a1c77948-cc82-4ce1-ba42-884ecc837b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7a:74:60:b1:1c:6e:e0:63:5c:c9:e4:86:2a: 4a:36:04:f8:22:17:9d:1a:8f:d7:8c:16:2a:3f:3a: d0:2b:df:1e:4a:b3:21:62:96:e6:65:45:a6:ba:2a: 03:57:ed:72:f6:6e:59:33:39:e6:fb:25:a8:e9:14: 1d:62:18:39:8e:cf:39:ac:44:56:6d:79:29:5d:51: 8c:77:71:32:49:a4:d5:87:db:2a:0c:5a:22:d2:82: 6e:2e:8c:8f:14:3f:0e:5f:37:6e:88:05:d4:0a:f0: 84:04:9d:8e:8a:d4:47:1d:73:61:5c:1f:d8:94:b2: 82:3c:be:f8:77:20:25:15:08:c4:56:66:fb:67:2b: 35:89:69:2a:d3:14:f0:d3:ba:aa:92:89:f9:13:d0: 46:10:2d:ee:8c:86:b2:25:b0:ec:34:44:c6:e8:c0: 92:ca:6a:27:7d:c7:ee:76:6c:0a:6f:e0:4b:89:00: 32:54:0e:9a:55:e3:ba:a1:e9:55:c1:41:0a:84:e9: ff:29:05:79:ab:7c:49:ec:55:d8:ea:fa:96:a9:e4: 17:88:55:ae:5c:20:d2:f0:92:ee:f7:4d:cf:59:28: 24:fa:26:34:15:22:00:27:9b:39:24:0c:71:84:ad: 85:8a:0a:a1:62:80:76:f8:8f:19:8a:37:7c:59:8e: 4d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D3:F9:FE:41:6D:63:45:E1:4A:5C:8A:81:52:DC:AC:D0:93:9D:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b12175cf-2702-3731-83e8-14996dac56a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:1e:bb:99:03:09:e1:d3:5a:eb:9c:19:4f:47:41:45:7e:b8: f5:7f:2c:ad:0d:82:ad:24:6a:ea:a2:08:3f:dc:e7:ca:dc:5e: 6c:ab:ed:dc:bb:15:b8:9c:61:b4:28:74:ad:c9:47:32:e9:a6: b1:c1:12:48:4a:7e:bd:fb:2a:33:4f:9d:1d:cf:5a:52:fb:ca: 22:ff:1e:f3:74:4c:f3:50:c6:9e:c1:73:9e:af:d7:0b:bc:84: dd:c9:b2:6d:93:a4:f7:9c:20:8a:d1:3e:61:70:14:06:16:e7: 38:2c:b9:94:e1:69:14:cd:9c:87:7e:86:ad:96:e9:6e:a7:a7: c4:a2:99:64:3d:c0:44:6f:f6:66:6f:db:c1:3b:ea:61:f6:f0: 89:d9:c0:bc:3f:01:db:05:77:26:a2:78:f3:f8:23:77:d1:c5: b2:20:c2:fb:c5:1a:73:2a:dd:33:c2:8f:c9:ab:89:69:41:f3: d4:da:43:35:44:38:2a:e2:1a:84:6c:68:67:ae:39:0c:4c:15: 9f:1f:07:a4:1e:b6:e8:df:55:b3:ef:29:0e:38:18:10:f0:fd: 62:1a:0a:b0:ea:94:e0:dd:83:a3:44:7d:d5:4d:16:79:77:c6: df:94:08:2b:90:e9:2c:80:c1:61:3c:af:9c:7a:06:bc:5a:48: af:55:99:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+k61DLdmC/saRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk YTFjNzc5NDgtY2M4Mi00Y2UxLWJhNDItODg0ZWNjODM3YjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonp0YLEcbuBjXMnkhipKNgT4IhedGo/XjBYq PzrQK98eSrMhYpbmZUWmuioDV+1y9m5ZMznm+yWo6RQdYhg5js85rERWbXkpXVGM d3EySaTVh9sqDFoi0oJuLoyPFD8OXzduiAXUCvCEBJ2OitRHHXNhXB/YlLKCPL74 dyAlFQjEVmb7Zys1iWkq0xTw07qqkon5E9BGEC3ujIayJbDsNETG6MCSymonfcfu dmwKb+BLiQAyVA6aVeO6oelVwUEKhOn/KQV5q3xJ7FXY6vqWqeQXiFWuXCDS8JLu 903PWSgk+iY0FSIAJ5s5JAxxhK2FigqhYoB2+I8Zijd8WY5N6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzT+f5BbWNF4UpcioFS3KzQk53WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjEyMTc1Y2YtMjcwMi0z NzMxLTgzZTgtMTQ5OTZkYWM1NmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGceu5kDCeHTWuucGU9HQUV+uPV/LK0Ngq0kauqiCD/c58rcXmyr7dy7 FbicYbQodK3JRzLpprHBEkhKfr37KjNPnR3PWlL7yiL/HvN0TPNQxp7Bc56v1wu8 hN3Jsm2TpPecIIrRPmFwFAYW5zgsuZThaRTNnId+hq2W6W6np8SimWQ9wERv9mZv 28E76mH28InZwLw/AdsFdyaiePP4I3fRxbIgwvvFGnMq3TPCj8mriWlB89TaQzVE OCriGoRsaGeuOQxMFZ8fB6QetujfVbPvKQ44GBDw/WIaCrDqlODdg6NEfdVNFnl3 xt+UCCuQ6SyAwWE8r5x6BrxaSK9VmR8= -----END CERTIFICATE-----Generated at Thu Mar 26 23:53:42 2026 by rpki-client