$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f936e6cc-baa1-313f-bf0e-1713ad436581.roa File: f936e6cc-baa1-313f-bf0e-1713ad436581.roa (raw, json) Hash identifier: JG97Mr3UN2017mFIyfFipJjuju2nGp/viB0frEF431k= Subject key identifier: 27:27:86:D4:47:45:89:60:91:39:E7:88:E4:7B:A8:10:2D:E5:75:46 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DA6B029A1CE07CDD1062BC7A0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f936e6cc-baa1-313f-bf0e-1713ad436581.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:29:a1:ce:07:cd:d1:06:2b:c7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=70a960c5-2a46-4086-ba30-9acece00a466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b9:90:3b:8c:d0:9b:d4:74:c8:9b:f8:3c:a8: 61:42:9b:9b:ee:49:2d:c9:84:3b:de:2d:0c:6c:5e: 3a:6f:5f:61:e1:28:bc:b6:be:75:53:14:af:12:f7: f5:14:4a:14:d1:c9:47:10:96:16:e0:d6:cb:b6:0c: de:6e:80:a0:8f:8c:8b:de:2d:8f:e0:0d:d4:cb:b0: 63:50:1d:b3:15:5d:b8:3b:9b:83:36:69:f2:e7:7c: 47:f8:cb:02:94:98:3e:a9:c0:db:de:38:45:a1:d9: 40:18:f7:17:73:2a:a7:61:0a:9c:9e:20:e5:13:7a: de:88:1d:8a:e1:f5:09:23:4e:f0:11:3e:ce:33:e9: c2:5c:4f:a5:89:c9:43:86:e6:da:4b:ad:6a:64:3f: 55:ae:19:ee:69:17:40:2c:57:17:eb:77:34:85:1e: 23:c9:2e:f7:d9:25:54:1f:2d:16:06:57:08:61:8b: ab:94:f5:ce:dd:cd:d5:4b:a3:81:20:74:bb:3c:97: b8:62:de:c4:96:11:53:98:16:06:37:de:ec:96:24: 6b:1a:07:a0:28:93:4f:60:dd:84:61:f1:cf:18:43: 30:7b:a2:90:00:29:6c:57:6f:3d:ca:a1:55:3b:cd: 4d:e7:36:8f:71:f9:b4:5e:3d:7d:a9:32:69:9e:ec: c5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:27:86:D4:47:45:89:60:91:39:E7:88:E4:7B:A8:10:2D:E5:75:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f936e6cc-baa1-313f-bf0e-1713ad436581.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:b4:84:b9:96:6d:83:9d:cb:7b:4b:b6:0d:e9:25:4f:d1:a8: 2b:b7:83:3a:a1:e5:02:47:37:83:40:51:25:98:72:db:74:c5: c2:5f:10:35:cf:78:55:64:c9:16:ef:d4:22:5d:c0:c9:12:02: 37:09:ba:37:eb:f6:7f:76:94:af:1f:ce:98:76:74:8e:64:1c: 95:99:3a:a0:a3:34:da:0a:a5:18:16:37:39:d2:0d:25:66:e6: d4:b0:05:93:4d:2a:e6:ed:bb:cc:8d:78:d2:9c:9a:60:df:2b: 4d:12:71:c6:56:38:cb:25:20:3a:17:ab:4c:26:f0:ec:72:09: 7c:80:35:17:2f:bf:e0:3b:d1:86:e4:22:d4:5e:90:a2:e7:e3: 7f:76:dc:74:32:2b:50:cf:3e:f1:c4:a7:79:ad:c0:22:cc:b3: f6:ab:6f:37:22:b2:e2:ea:01:e8:da:26:c8:be:3d:e3:a0:bc: ec:35:9d:73:4e:9a:97:b1:19:63:24:2f:a5:d9:01:8f:02:4f: f8:95:8b:66:1c:49:ec:64:77:cc:78:28:de:5b:df:fb:87:d0: 29:16:a5:eb:2f:07:f5:d3:3a:78:e7:bb:18:fe:27:8f:d0:50: 6d:ea:ee:6c:87:be:e9:a6:5c:a4:29:16:db:60:e4:02:85:de: 70:5b:18:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msCmhzgfN0QYrx6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk NzBhOTYwYzUtMmE0Ni00MDg2LWJhMzAtOWFjZWNlMDBhNDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rmQO4zQm9R0yJv4PKhhQpub7kktyYQ73i0M bF46b19h4Si8tr51UxSvEvf1FEoU0clHEJYW4NbLtgzeboCgj4yL3i2P4A3Uy7Bj UB2zFV24O5uDNmny53xH+MsClJg+qcDb3jhFodlAGPcXcyqnYQqcniDlE3reiB2K 4fUJI07wET7OM+nCXE+liclDhubaS61qZD9VrhnuaRdALFcX63c0hR4jyS732SVU Hy0WBlcIYYurlPXO3c3VS6OBIHS7PJe4Yt7ElhFTmBYGN97sliRrGgegKJNPYN2E YfHPGEMwe6KQAClsV289yqFVO81N5zaPcfm0Xj19qTJpnuzFPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcnhtRHRYlgkTnniOR7qBAt5XVGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjkzNmU2Y2MtYmFhMS0z MTNmLWJmMGUtMTcxM2FkNDM2NTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADS0hLmWbYOdy3tLtg3pJU/RqCu3gzqh5QJHN4NAUSWYctt0xcJfEDXP eFVkyRbv1CJdwMkSAjcJujfr9n92lK8fzph2dI5kHJWZOqCjNNoKpRgWNznSDSVm 5tSwBZNNKubtu8yNeNKcmmDfK00SccZWOMslIDoXq0wm8OxyCXyANRcvv+A70Ybk ItRekKLn43923HQyK1DPPvHEp3mtwCLMs/arbzcisuLqAejaJsi+PeOgvOw1nXNO mpexGWMkL6XZAY8CT/iVi2YcSexkd8x4KN5b3/uH0CkWpesvB/XTOnjnuxj+J4/Q UG3q7myHvummXKQpFttg5AKF3nBbGGM= -----END CERTIFICATE-----Generated at Wed May 13 14:00:45 2026 by rpki-client