$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbf8d407-3c97-34a9-bd7e-e142d9f47946.roa File: dbf8d407-3c97-34a9-bd7e-e142d9f47946.roa (raw, json) Hash identifier: yaiiwpWfTqAeBIHtwfrTaMw48UCazLBCudqQRZVDP90= Subject key identifier: C4:44:C3:9B:F5:C7:47:62:B5:01:24:29:F3:5B:3F:15:51:C9:4A:00 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DBD05A343011FB834A0828780 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbf8d407-3c97-34a9-bd7e-e142d9f47946.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:a3:43:01:1f:b8:34:a0:82:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=ec4c863f-de65-47e9-be1a-25e840412b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:aa:52:fd:ab:21:4e:e4:72:e8:41:15:d6:a2: 33:e3:12:ae:42:e2:68:98:cd:eb:35:1c:35:85:11: d1:c5:c0:c5:70:c7:90:9c:0a:f6:a1:c6:03:30:cf: ce:67:5f:e2:83:21:d5:ec:86:d4:e5:a6:32:55:ce: 00:26:90:15:82:2e:5f:5e:37:69:8a:2b:6d:e6:c3: 4f:39:7f:34:2e:24:1b:ee:83:f5:df:b4:0e:b5:c5: 07:f7:aa:3c:db:4a:41:01:ae:cb:96:23:c9:e6:72: 72:2c:b7:b9:19:e9:19:4d:f4:1c:ed:fc:4a:d1:a2: 32:38:d6:a8:a8:1b:3f:d9:b1:16:e1:da:b3:41:ce: 3a:33:b4:a6:07:67:bb:4d:4a:2a:54:de:65:0c:79: b1:06:4a:87:b9:ea:d2:3c:0b:23:4c:b4:63:37:79: c9:be:d9:69:d3:7d:3f:55:0a:6d:89:af:99:47:49: 48:bb:16:d5:cb:2a:f9:cc:45:06:4f:1d:81:84:6f: 80:9c:c3:6e:62:9d:34:ff:84:27:84:02:e0:ec:d4: 53:6a:0f:fb:60:83:c0:02:0e:40:ab:1c:f5:ac:07: bd:81:05:aa:0d:18:9d:9d:60:37:a1:1c:90:0b:cc: ff:cc:4b:a3:a1:f6:bf:88:72:fe:8f:e4:06:35:28: 4e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:44:C3:9B:F5:C7:47:62:B5:01:24:29:F3:5B:3F:15:51:C9:4A:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbf8d407-3c97-34a9-bd7e-e142d9f47946.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:77:79:6d:0e:85:be:8d:81:4f:a8:c4:c9:39:53:5c:0a:38: 9d:11:b2:79:33:db:53:ba:26:de:d2:74:1f:cb:a8:d0:c7:fc: f4:ad:6d:77:20:6f:de:80:dd:f4:2c:b8:a9:30:6e:21:5c:54: 26:48:ed:66:46:10:5c:03:c4:48:f4:6c:51:4f:d2:ff:45:45: fa:29:82:98:9b:43:71:a5:00:14:c2:09:01:d6:3a:7f:ef:3a: ac:d0:8e:32:bb:c9:50:06:f1:e0:6f:69:0e:18:c3:8f:ca:b0: 0f:f4:bc:0c:84:af:35:65:c2:a9:66:d8:58:7b:86:35:c8:1d: b5:c7:69:3c:24:81:85:1a:88:58:1b:3f:98:af:3d:3d:6f:7b: b5:1c:2f:fe:e8:91:46:7b:6e:32:0f:04:10:b6:8f:a3:d8:70: a4:71:50:42:f7:43:23:36:de:6d:bf:e8:f6:1c:b6:7b:4d:6d: 0f:a6:30:20:63:c0:1f:d4:1c:7e:0f:05:a8:e4:2f:e4:d2:b8: 9f:c3:d5:d6:10:5a:6f:5a:80:4e:ef:c8:cf:47:3a:c0:95:06: c2:1b:d6:8e:a3:e8:62:3c:c4:9f:d5:26:62:fb:f1:83:dc:f1: 45:41:d4:95:81:97:17:1a:86:77:bd:79:d9:ca:e0:02:6b:99: 79:bd:7b:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BaNDAR+4NKCCh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk ZWM0Yzg2M2YtZGU2NS00N2U5LWJlMWEtMjVlODQwNDEyYjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qpS/ashTuRy6EEV1qIz4xKuQuJomM3rNRw1 hRHRxcDFcMeQnAr2ocYDMM/OZ1/igyHV7IbU5aYyVc4AJpAVgi5fXjdpiitt5sNP OX80LiQb7oP137QOtcUH96o820pBAa7LliPJ5nJyLLe5GekZTfQc7fxK0aIyONao qBs/2bEW4dqzQc46M7SmB2e7TUoqVN5lDHmxBkqHuerSPAsjTLRjN3nJvtlp030/ VQptia+ZR0lIuxbVyyr5zEUGTx2BhG+AnMNuYp00/4QnhALg7NRTag/7YIPAAg5A qxz1rAe9gQWqDRidnWA3oRyQC8z/zEujofa/iHL+j+QGNShORwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMREw5v1x0ditQEkKfNbPxVRyUoAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGJmOGQ0MDctM2M5Ny0z NGE5LWJkN2UtZTE0MmQ5ZjQ3OTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ93eW0Ohb6NgU+oxMk5U1wKOJ0Rsnkz21O6Jt7SdB/LqNDH/PStbXcg b96A3fQsuKkwbiFcVCZI7WZGEFwDxEj0bFFP0v9FRfopgpibQ3GlABTCCQHWOn/v OqzQjjK7yVAG8eBvaQ4Yw4/KsA/0vAyErzVlwqlm2Fh7hjXIHbXHaTwkgYUaiFgb P5ivPT1ve7UcL/7okUZ7bjIPBBC2j6PYcKRxUEL3QyM23m2/6PYctntNbQ+mMCBj wB/UHH4PBajkL+TSuJ/D1dYQWm9agE7vyM9HOsCVBsIb1o6j6GI8xJ/VJmL78YPc 8UVB1JWBlxcahne9ednK4AJrmXm9exg= -----END CERTIFICATE-----Generated at Wed May 13 07:30:51 2026 by rpki-client