$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/db4e4f6a-d694-32a7-b2e1-f4d4ee97c262.roa File: db4e4f6a-d694-32a7-b2e1-f4d4ee97c262.roa (raw, json) Hash identifier: 6SBTJMNJAXpGmlGdqI0aM5Sbb5E4j+HGMksTkMCtvyY= Subject key identifier: DE:D6:2D:58:44:BD:8B:7E:3C:75:52:51:3E:DB:99:A7:6B:88:75:51 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DA6B029ADBDD0BB63FA1C8040 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/db4e4f6a-d694-32a7-b2e1-f4d4ee97c262.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:29:ad:bd:d0:bb:63:fa:1c:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=1490eb34-4f91-4c04-8c07-93e96e67bc81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:54:0f:6c:d9:57:3c:21:f0:e4:d4:6a:3f:8e: 87:80:7b:e8:d3:6d:1f:d2:a1:00:1a:d5:ca:fa:90: 71:e3:11:48:1e:bb:39:9a:b3:19:1d:c8:e2:55:c9: 69:c1:6f:22:a6:90:e1:1a:b7:a8:0a:9d:9b:ec:ea: 0b:df:aa:40:20:eb:ab:28:e0:93:10:e7:c0:be:7d: dd:d0:fb:36:56:cf:0a:4b:85:3b:66:17:51:50:49: 6e:58:13:83:5b:75:6d:92:0e:3c:e3:b9:ea:34:7d: c8:f2:c7:2e:c8:57:e8:80:cb:09:64:c2:f3:90:a6: d1:d6:19:01:56:a0:a0:de:0d:b6:ce:9b:95:37:f8: 55:06:38:81:37:cf:ef:46:92:7b:b4:34:77:42:26: f0:6c:9c:80:71:1c:30:d2:ea:92:04:b8:c2:b7:71: 00:33:05:ab:f1:18:df:08:fd:60:c6:bd:39:6c:08: 1c:b0:6b:b6:14:31:ed:66:29:65:b7:0e:d1:e3:bd: 7a:1a:50:07:c3:7f:6e:23:f4:72:e3:54:40:43:e7: 3b:59:64:17:80:8f:c0:2d:c5:5d:e4:da:a9:f3:ea: 45:49:cd:22:6d:d3:f1:d9:ab:00:2b:a5:88:51:dd: e6:1a:95:b8:71:6f:73:82:9f:06:d8:63:a2:a4:b4: 28:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D6:2D:58:44:BD:8B:7E:3C:75:52:51:3E:DB:99:A7:6B:88:75:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/db4e4f6a-d694-32a7-b2e1-f4d4ee97c262.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:4e:40:e2:19:a3:54:5b:61:22:20:e3:77:36:6a:a4:92:1a: d8:60:5d:7f:32:5d:17:37:c3:2c:48:ea:88:5f:d9:9d:91:ea: c4:e7:75:80:c4:1d:2c:40:4b:fa:cf:af:3a:37:32:86:f1:c8: 57:90:96:e9:df:3b:43:9f:f7:ca:6d:43:de:ab:13:e7:0c:22: b4:64:fa:1b:c1:f1:5a:b3:b4:20:0b:e7:ba:90:b8:7b:84:53: 35:8f:d0:fb:3f:d0:07:6a:b7:a4:49:ec:bf:e0:c3:65:16:93: 12:3d:9f:c6:67:f3:e4:9e:0e:d0:5b:ed:05:b7:03:95:3f:3f: ef:dc:c4:61:74:43:1b:71:f1:6c:20:2f:cd:8d:0b:ae:b3:8b: b0:89:b3:55:03:ee:c7:5d:52:64:63:ed:23:f8:f3:63:ce:b6: 38:64:ac:49:cf:29:9c:06:e0:88:cb:4b:b7:18:f0:96:bc:a7: bf:53:78:e6:1a:bd:88:39:0c:31:0e:84:61:f1:73:c0:06:12: ac:02:61:ff:70:90:f2:76:a2:35:61:a1:9d:00:fe:d8:86:97: 73:39:1d:a1:7a:ca:3c:57:60:d8:83:b8:9d:cd:5b:86:cb:de: 12:c1:36:db:59:fb:53:88:a6:51:ad:d5:df:8a:c7:ce:07:61: f6:a0:3f:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msCmtvdC7Y/ocgEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk MTQ5MGViMzQtNGY5MS00YzA0LThjMDctOTNlOTZlNjdiYzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlQPbNlXPCHw5NRqP46HgHvo020f0qEAGtXK +pBx4xFIHrs5mrMZHcjiVclpwW8ippDhGreoCp2b7OoL36pAIOurKOCTEOfAvn3d 0Ps2Vs8KS4U7ZhdRUEluWBODW3Vtkg4847nqNH3I8scuyFfogMsJZMLzkKbR1hkB VqCg3g22zpuVN/hVBjiBN8/vRpJ7tDR3QibwbJyAcRww0uqSBLjCt3EAMwWr8Rjf CP1gxr05bAgcsGu2FDHtZilltw7R4716GlAHw39uI/Ry41RAQ+c7WWQXgI/ALcVd 5Nqp8+pFSc0ibdPx2asAK6WIUd3mGpW4cW9zgp8G2GOipLQoewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7WLVhEvYt+PHVSUT7bmadriHVRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGI0ZTRmNmEtZDY5NC0z MmE3LWIyZTEtZjRkNGVlOTdjMjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFOQOIZo1RbYSIg43c2aqSSGthgXX8yXRc3wyxI6ohf2Z2R6sTndYDE HSxAS/rPrzo3MobxyFeQlunfO0Of98ptQ96rE+cMIrRk+hvB8VqztCAL57qQuHuE UzWP0Ps/0Adqt6RJ7L/gw2UWkxI9n8Zn8+SeDtBb7QW3A5U/P+/cxGF0Qxtx8Wwg L82NC66zi7CJs1UD7sddUmRj7SP482POtjhkrEnPKZwG4IjLS7cY8Ja8p79TeOYa vYg5DDEOhGHxc8AGEqwCYf9wkPJ2ojVhoZ0A/tiGl3M5HaF6yjxXYNiDuJ3NW4bL 3hLBNttZ+1OIplGt1d+Kx84HYfagP1E= -----END CERTIFICATE-----Generated at Wed May 13 08:20:42 2026 by rpki-client