$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dd987b5e-3883-33aa-beed-2bb079da51c0.roa File: dd987b5e-3883-33aa-beed-2bb079da51c0.roa (raw, json) Hash identifier: IcNr8HzSP1i769ZHyk2D5SdcQyy3qwuq7G3wYFhDYl0= Subject key identifier: 65:77:C9:D6:63:48:77:F1:95:B5:78:A3:35:2D:9F:58:97:A4:E0:7F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DA6B02A27289CF07762D18260 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dd987b5e-3883-33aa-beed-2bb079da51c0.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:2a:27:28:9c:f0:77:62:d1:82:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=3ffc9ce1-648e-4b9f-bbe4-48c1bfe10dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:87:e3:35:99:2e:c3:63:bb:a0:7d:6f:13:97: 9d:29:66:9e:c9:4a:ee:eb:cd:f2:1c:ec:8c:e8:50: 37:d3:91:f9:e5:8b:48:c2:5a:af:09:db:b5:1d:02: 89:90:19:72:28:e2:c0:99:82:94:7a:b8:be:6f:ec: 5b:ce:24:d4:5b:ee:b9:09:0e:1e:b3:6e:a3:21:b7: 28:c5:ab:86:ad:b3:e9:dc:6d:28:85:f7:20:2c:17: 18:4b:2d:fc:00:27:ae:ce:81:17:ef:46:bb:af:30: 72:fb:26:89:0e:4a:fc:f1:e3:13:5e:01:b2:90:74: 4e:12:44:82:e4:cc:46:5e:d1:60:f7:c6:81:8c:6e: ee:81:ca:19:31:f6:12:78:1d:df:c4:1b:c7:08:42: 75:05:a4:95:1d:5e:a6:91:e7:4a:d7:70:a7:73:6a: 6d:e5:e7:ef:52:36:2a:3e:8c:63:c3:ff:72:04:26: 34:c3:a8:75:d7:03:01:43:4a:2e:cc:1b:a7:3a:16: b7:58:48:e1:0c:cf:11:8f:78:ee:40:28:0d:7f:29: c9:f0:f1:6d:62:33:8b:f6:b1:4e:20:10:40:c8:53: ba:c3:a6:ea:85:03:0f:3b:44:ac:b3:1a:a9:8a:f4: bc:58:c7:8f:c3:6e:4e:90:4a:3c:45:00:29:3f:97: 08:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:77:C9:D6:63:48:77:F1:95:B5:78:A3:35:2D:9F:58:97:A4:E0:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dd987b5e-3883-33aa-beed-2bb079da51c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:b6:a3:69:25:e7:8e:08:44:4d:6b:0f:d9:0e:94:98:7a:03: 24:cf:eb:33:a4:3e:fd:72:bc:d7:c9:e7:fd:72:ea:53:dc:12: b0:1e:e5:20:5c:cc:08:23:0a:f5:f2:89:51:84:1f:a3:c3:f8: a2:73:26:7a:95:49:44:f4:7f:90:78:7a:c0:a7:39:9e:1f:a2: 54:2b:35:13:4f:45:43:77:26:d7:e7:c1:0d:70:78:bf:6a:24: 14:c1:d0:47:eb:2f:47:1a:bc:25:a7:13:f6:d4:23:2a:02:80: 96:4c:fc:c7:21:ee:9f:c0:0c:9e:48:e6:7c:ff:60:9d:98:c9: 52:52:18:56:1b:14:48:19:1f:0e:63:b4:da:39:c7:bd:ef:3c: 06:03:ca:4c:d6:24:fe:83:df:07:bc:43:01:cc:49:bc:57:2d: ba:2c:20:2f:bb:5c:98:e6:a4:ca:79:42:76:f2:75:b1:ba:51: 45:da:c1:37:b3:99:3d:2f:63:63:af:4c:54:de:b6:4c:a3:2b: a9:58:4a:f8:01:d3:d4:48:e8:11:49:ef:b8:c5:b6:e4:1a:1a: 93:c7:f3:91:14:ee:95:f9:37:4a:0a:37:20:8b:c0:ba:f5:91: a1:6c:07:87:ae:24:dd:24:2e:df:eb:68:65:f6:36:47:e4:42: cd:97:f9:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msConKJzwd2LRgmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk M2ZmYzljZTEtNjQ4ZS00YjlmLWJiZTQtNDhjMWJmZTEwZGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YfjNZkuw2O7oH1vE5edKWaeyUru683yHOyM 6FA305H55YtIwlqvCdu1HQKJkBlyKOLAmYKUeri+b+xbziTUW+65CQ4es26jIbco xauGrbPp3G0ohfcgLBcYSy38ACeuzoEX70a7rzBy+yaJDkr88eMTXgGykHROEkSC 5MxGXtFg98aBjG7ugcoZMfYSeB3fxBvHCEJ1BaSVHV6mkedK13Cnc2pt5efvUjYq Poxjw/9yBCY0w6h11wMBQ0ouzBunOha3WEjhDM8Rj3juQCgNfynJ8PFtYjOL9rFO IBBAyFO6w6bqhQMPO0SssxqpivS8WMePw25OkEo8RQApP5cIpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGV3ydZjSHfxlbV4ozUtn1iXpOB/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGQ5ODdiNWUtMzg4My0z M2FhLWJlZWQtMmJiMDc5ZGE1MWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFy2o2kl544IRE1rD9kOlJh6AyTP6zOkPv1yvNfJ5/1y6lPcErAe5SBc zAgjCvXyiVGEH6PD+KJzJnqVSUT0f5B4esCnOZ4folQrNRNPRUN3JtfnwQ1weL9q JBTB0EfrL0cavCWnE/bUIyoCgJZM/Mch7p/ADJ5I5nz/YJ2YyVJSGFYbFEgZHw5j tNo5x73vPAYDykzWJP6D3we8QwHMSbxXLbosIC+7XJjmpMp5QnbydbG6UUXawTez mT0vY2OvTFTetkyjK6lYSvgB09RI6BFJ77jFtuQaGpPH85EU7pX5N0oKNyCLwLr1 kaFsB4euJN0kLt/raGX2NkfkQs2X+d4= -----END CERTIFICATE-----Generated at Wed May 13 15:38:30 2026 by rpki-client