$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d5fa6f42-1cfd-3e11-bde6-d02e0d0a9b06.roa File: d5fa6f42-1cfd-3e11-bde6-d02e0d0a9b06.roa (raw, json) Hash identifier: snzlK/L+m9wI2mudaAKxpBUTly1CXcDU+Nk1nAsl8LE= Subject key identifier: 44:F4:67:67:2B:8D:14:21:61:E8:BA:BF:40:B8:90:E8:E5:A2:5C:89 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D386A53C693B93ADC750FCF80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d5fa6f42-1cfd-3e11-bde6-d02e0d0a9b06.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 8069 IP address blocks: 20.33.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:53:c6:93:b9:3a:dc:75:0f:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=0d96c0ce-0221-4a88-8f80-39ea22050b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:07:f1:76:c0:eb:2e:1b:ca:49:86:83:15:c2: 8c:40:b3:57:2c:cd:df:a9:8b:c1:cf:14:19:e2:5e: 09:02:f9:a3:5b:51:65:46:ad:54:cb:13:4e:a8:e9: e0:5a:b5:aa:d2:0b:7f:30:53:d1:7a:8f:d3:f9:ea: 27:f5:af:db:4a:8d:9b:84:99:52:e0:e8:e6:06:c3: 94:ef:3c:01:b7:19:81:12:d3:f1:2d:2a:67:97:7c: 44:e9:79:b1:a3:31:6d:5e:a3:2b:2f:5f:72:83:5c: 34:08:6e:06:cf:8e:ad:89:14:98:0d:62:d6:3f:93: d5:f4:06:c7:f0:ee:05:f3:3d:96:71:d5:f2:45:65: 86:06:cc:7a:9a:b9:0d:70:14:f8:68:5d:72:77:03: 42:f4:0d:13:70:b5:cf:d9:d0:07:42:69:f3:11:26: 27:1f:13:f2:bd:16:1e:3c:0c:5d:77:c7:cf:4c:5f: b5:75:85:7c:79:e3:a3:f4:61:85:21:5d:22:51:f2: a5:92:c4:f9:07:e7:2d:90:83:1f:7d:e2:69:dc:04: e2:a0:b8:25:1f:47:e0:65:af:cd:4a:ee:41:16:a0: a1:e6:ee:dc:b4:8d:9a:9a:ff:36:f3:44:b3:b0:bc: 77:dd:fd:4f:fb:d3:96:f5:41:c8:d8:69:6b:6b:38: 3f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F4:67:67:2B:8D:14:21:61:E8:BA:BF:40:B8:90:E8:E5:A2:5C:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d5fa6f42-1cfd-3e11-bde6-d02e0d0a9b06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:db:df:99:47:1c:eb:5a:ac:fd:37:06:d5:f4:36:fb:e5:25: c7:fa:f2:0a:db:cd:0c:59:20:1b:aa:40:b5:76:8c:58:0a:ef: ea:48:d6:4e:ec:eb:04:85:00:76:2c:41:b1:c3:b0:87:cd:e6: 9f:8f:50:05:63:be:09:d8:ab:59:c3:b9:62:e2:54:ad:7c:07: f1:a7:87:2e:33:f8:93:7e:c1:87:1e:96:b4:ae:7b:c1:35:09: 29:10:d0:cc:f2:b6:db:bb:45:04:0d:d3:ba:6b:c4:f0:07:a2: 75:4c:b0:d6:66:89:de:75:ae:a3:b4:48:0a:f4:d9:8b:24:e5: ba:78:4e:ca:bb:e5:9f:6d:72:b1:cb:4d:cd:61:e5:b3:54:2a: 20:f1:de:8a:d5:c7:fa:ea:2e:e9:de:32:66:df:97:61:ca:e3: f5:46:21:64:96:8a:fd:9c:d5:fa:9d:6f:ce:e7:83:8a:a6:5e: ab:b5:99:01:f2:bb:dd:e9:7a:25:c7:03:a2:92:2a:8c:8d:d0: 47:3f:db:f9:79:78:bd:c1:9b:88:82:61:07:23:58:1e:7d:9c: f2:dc:a5:6b:b3:bd:b2:16:e6:b6:1f:0d:71:a9:60:fd:ed:22: f9:aa:15:3f:8b:e8:31:57:d0:e3:f4:e2:4d:ab:71:25:93:48: 8a:6d:37:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04alPGk7k63HUPz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk MGQ5NmMwY2UtMDIyMS00YTg4LThmODAtMzllYTIyMDUwYjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAfxdsDrLhvKSYaDFcKMQLNXLM3fqYvBzxQZ 4l4JAvmjW1FlRq1UyxNOqOngWrWq0gt/MFPReo/T+eon9a/bSo2bhJlS4OjmBsOU 7zwBtxmBEtPxLSpnl3xE6XmxozFtXqMrL19yg1w0CG4Gz46tiRSYDWLWP5PV9AbH 8O4F8z2WcdXyRWWGBsx6mrkNcBT4aF1ydwNC9A0TcLXP2dAHQmnzESYnHxPyvRYe PAxdd8fPTF+1dYV8eeOj9GGFIV0iUfKlksT5B+ctkIMffeJp3ATioLglH0fgZa/N Su5BFqCh5u7ctI2amv8280SzsLx33f1P+9OW9UHI2Glrazg/HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFET0Z2crjRQhYei6v0C4kOjlolyJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDVmYTZmNDItMWNmZC0z ZTExLWJkZTYtZDAyZTBkMGE5YjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHb35lHHOtarP03BtX0NvvlJcf68grbzQxZIBuqQLV2jFgK7+pI1k7s 6wSFAHYsQbHDsIfN5p+PUAVjvgnYq1nDuWLiVK18B/Gnhy4z+JN+wYcelrSue8E1 CSkQ0Mzyttu7RQQN07prxPAHonVMsNZmid51rqO0SAr02Ysk5bp4Tsq75Z9tcrHL Tc1h5bNUKiDx3orVx/rqLuneMmbfl2HK4/VGIWSWiv2c1fqdb87ng4qmXqu1mQHy u93peiXHA6KSKoyN0Ec/2/l5eL3Bm4iCYQcjWB59nPLcpWuzvbIW5rYfDXGpYP3t IvmqFT+L6DFX0OP04k2rcSWTSIptN2k= -----END CERTIFICATE-----Generated at Thu Mar 26 03:45:18 2026 by rpki-client