$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/df8b7abc-0a4f-3be9-b3e3-c5086883b738.roa File: df8b7abc-0a4f-3be9-b3e3-c5086883b738.roa (raw, json) Hash identifier: +hHiKy8TDYGYClB2rDv2Zf9XlRpNg8yUoM4Ij+h7Ak4= Subject key identifier: 5F:0A:3B:72:9F:7B:DC:0E:51:1A:BC:0E:B5:16:76:A3:63:FC:74:74 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DCAFB0D538ACDA40AB939BA20 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/df8b7abc-0a4f-3be9-b3e3-c5086883b738.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:0d:53:8a:cd:a4:0a:b9:39:ba:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=b3e1a56c-03e0-4a4d-b992-25b4c4738f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:86:51:4e:48:64:69:79:84:d5:6a:9a:c4:8d: d7:3e:f8:45:01:e9:04:87:1b:aa:5b:2e:99:20:81: 6e:2d:8c:c8:c5:1a:80:99:55:a6:b2:98:49:e3:39: c0:03:89:d1:58:18:ad:8e:83:8c:e6:ee:e6:68:94: 91:fa:63:a1:1a:10:0b:1c:2a:48:1b:1a:ab:11:2b: 06:95:65:a2:62:e5:3d:9a:27:3b:2d:43:a9:8e:16: 65:d5:d8:12:f4:93:e8:ff:9a:94:6b:7b:72:a3:89: 2e:81:44:ef:fa:14:41:07:f5:51:59:2c:07:d8:1a: 95:81:5a:be:a3:cc:30:d8:58:1e:2c:e7:61:4a:24: e6:3f:19:56:ad:cd:00:60:8b:28:47:9f:a6:cb:d4: 5d:47:d4:ca:c7:92:52:14:2c:99:f0:b9:74:ce:4e: 70:df:a3:b1:fc:2d:f8:ab:d3:32:36:11:d3:2d:6e: fe:88:1d:7b:a5:10:7f:7b:d2:0b:90:b4:53:61:cc: c5:3c:18:be:b2:1f:9e:00:46:fe:e2:91:19:0a:77: 61:f0:71:1b:0c:61:94:2f:fe:81:25:67:b1:ce:c3: 0f:5a:99:cd:b7:2a:e4:86:e8:bb:e9:24:45:33:0a: c6:32:10:99:7c:9d:2d:28:b0:9e:f0:a1:d9:ea:ca: 32:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0A:3B:72:9F:7B:DC:0E:51:1A:BC:0E:B5:16:76:A3:63:FC:74:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/df8b7abc-0a4f-3be9-b3e3-c5086883b738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:7d:11:4d:4c:77:51:f0:39:29:5f:39:24:ec:db:cf:30:02: c9:92:c6:81:65:b0:84:b6:b0:a3:66:21:85:3e:6e:44:3a:9a: 21:2d:ee:52:2c:e7:41:05:90:65:39:8f:f4:0e:fa:b8:b5:fc: 33:3c:d2:33:0d:fc:2e:fd:2f:99:38:c0:65:ae:a8:ad:45:ed: b2:10:bb:6c:42:fb:bc:60:91:d2:67:8f:87:1e:52:7e:93:4f: 59:c4:7d:50:c8:91:f5:a9:5a:17:2a:c2:6d:63:4c:99:76:f3: 47:c1:cf:11:64:0f:64:54:69:f3:dd:eb:b4:06:11:c3:5f:67: 5c:6a:b4:d3:30:ae:10:fd:d3:ab:64:56:9d:a1:63:b8:32:9f: 8b:c9:90:72:17:7a:6b:e2:a1:54:83:e4:bf:2e:f4:6d:7b:eb: 7a:95:43:02:9b:3b:c9:4f:0c:20:bc:4b:34:e8:1c:99:ff:d5: 10:cc:6f:37:c1:91:eb:15:79:22:b4:f9:a9:73:1c:62:3c:9d: d1:88:47:f9:cc:ad:0c:98:20:05:d6:f3:e0:8e:bb:da:1f:88: fe:e9:ba:0f:f3:0a:b5:a5:ad:1a:e3:1c:ce:c7:28:f9:3d:c7: 45:11:36:31:50:26:b3:66:87:13:69:cb:ff:5f:71:f7:6a:85: 80:68:3e:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+w1Tis2kCrk5uiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk YjNlMWE1NmMtMDNlMC00YTRkLWI5OTItMjViNGM0NzM4ZjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24ZRTkhkaXmE1WqaxI3XPvhFAekEhxuqWy6Z IIFuLYzIxRqAmVWmsphJ4znAA4nRWBitjoOM5u7maJSR+mOhGhALHCpIGxqrESsG lWWiYuU9mic7LUOpjhZl1dgS9JPo/5qUa3tyo4kugUTv+hRBB/VRWSwH2BqVgVq+ o8ww2FgeLOdhSiTmPxlWrc0AYIsoR5+my9RdR9TKx5JSFCyZ8Ll0zk5w36Ox/C34 q9MyNhHTLW7+iB17pRB/e9ILkLRTYczFPBi+sh+eAEb+4pEZCndh8HEbDGGUL/6B JWexzsMPWpnNtyrkhui76SRFMwrGMhCZfJ0tKLCe8KHZ6soyJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8KO3Kfe9wOURq8DrUWdqNj/HR0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGY4YjdhYmMtMGE0Zi0z YmU5LWIzZTMtYzUwODY4ODNiNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADp9EU1Md1HwOSlfOSTs288wAsmSxoFlsIS2sKNmIYU+bkQ6miEt7lIs 50EFkGU5j/QO+ri1/DM80jMN/C79L5k4wGWuqK1F7bIQu2xC+7xgkdJnj4ceUn6T T1nEfVDIkfWpWhcqwm1jTJl280fBzxFkD2RUafPd67QGEcNfZ1xqtNMwrhD906tk Vp2hY7gyn4vJkHIXemvioVSD5L8u9G1763qVQwKbO8lPDCC8SzToHJn/1RDMbzfB kesVeSK0+alzHGI8ndGIR/nMrQyYIAXW8+COu9ofiP7pug/zCrWlrRrjHM7HKPk9 x0URNjFQJrNmhxNpy/9fcfdqhYBoPnQ= -----END CERTIFICATE-----Generated at Wed May 13 10:37:59 2026 by rpki-client