$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2752a970-d5ff-337c-a051-6b254bb9c802.roa File: 2752a970-d5ff-337c-a051-6b254bb9c802.roa (raw, json) Hash identifier: P8G7KPnsPm40u9726GmyyWgMVn+fOlHtiwE3zd64XE4= Subject key identifier: D5:1C:3F:23:93:70:59:D8:31:7A:0E:28:8E:82:06:6F:69:D3:DF:85 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D52438E28F6ABDFB08AFE6580 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2752a970-d5ff-337c-a051-6b254bb9c802.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 8069 IP address blocks: 20.33.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:8e:28:f6:ab:df:b0:8a:fe:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=7e6374c7-99a5-417c-94c1-f5b41a373729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5a:56:7b:72:90:c9:1b:39:fb:7a:d6:46:d7: 95:1a:cd:98:1f:4a:79:e3:1f:ff:ed:e0:8e:83:19: 2c:89:f4:36:a9:73:dc:4f:b3:25:74:c4:f1:f1:ac: d8:19:b7:51:a7:bb:87:d2:45:20:4f:c8:2d:da:f5: e5:91:e1:81:9d:61:93:1c:05:3b:22:9d:0c:87:5a: fb:f9:21:7f:6e:6e:f8:41:98:22:62:c8:5d:c7:52: 01:26:65:4a:04:69:7f:4f:7b:35:9f:ab:7d:64:b0: 0a:05:4e:54:97:97:c9:87:dd:99:7a:55:bc:48:67: 03:05:96:dc:85:2e:b6:59:af:93:1d:88:5b:26:f0: c6:d6:10:d7:17:84:e3:4a:d3:a3:be:31:c4:58:42: 22:cd:9c:9a:88:6e:7c:89:7e:6b:d0:cf:e2:2c:f5: 85:74:21:6b:46:ab:c2:2f:35:15:c2:8d:f1:5d:25: d5:d2:2e:23:e4:3c:a1:f5:16:57:8c:cb:75:23:6d: 78:bf:8f:ff:2c:6c:dd:d2:5b:cd:ef:d8:24:3e:28: 53:fa:7e:39:0b:d6:63:6e:4f:61:6d:20:c6:b2:b0: dd:57:ec:1d:50:7f:cd:16:fb:87:79:ed:39:4d:cd: 6a:1b:81:8c:48:cb:a0:fa:15:dd:be:85:92:99:84: bd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1C:3F:23:93:70:59:D8:31:7A:0E:28:8E:82:06:6F:69:D3:DF:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2752a970-d5ff-337c-a051-6b254bb9c802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:04:c4:c9:27:bb:59:63:79:8d:e5:a8:28:e0:32:d8:f4:b1: 76:d3:64:c2:c0:ea:1a:62:17:d4:56:5f:0f:e4:b2:63:5b:67: bc:66:7e:39:e7:9d:42:9c:42:16:1e:03:d8:bc:f3:df:f3:01: 1c:58:09:7b:a6:e6:ed:76:1f:5a:37:dd:d6:21:4b:a9:81:1f: 73:a4:2b:19:8b:3c:82:5b:aa:4f:06:fe:da:e5:f3:45:33:15: de:75:5c:6d:63:fb:ab:8a:c0:fc:e2:cf:3f:cf:d0:25:7a:73: f7:ea:17:cb:ed:13:d9:c0:07:dc:15:81:4a:da:c8:1b:a0:2e: 02:4c:b5:dd:ee:37:48:89:5c:43:c3:69:57:c7:3e:55:8d:ca: c2:d4:42:43:2d:14:47:78:3b:7f:38:24:0f:c0:c7:c8:c5:7f: ac:63:d1:93:6b:71:46:ed:ac:0a:26:24:a1:b5:39:7a:c2:4b: bc:cd:a8:61:de:53:7f:9e:36:9e:79:3a:08:89:8f:02:20:e5: 58:4a:78:b2:e7:73:83:fb:8d:b6:96:a2:d2:cf:5b:b9:42:ec: 8c:d7:74:fb:f6:55:28:93:4b:bf:ef:69:92:fd:e6:bf:6a:fd: ac:63:c8:62:9d:d0:32:39:e3:70:b2:a6:a7:c3:aa:be:00:75: 34:e9:99:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ44o9qvfsIr+ZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk N2U2Mzc0YzctOTlhNS00MTdjLTk0YzEtZjViNDFhMzczNzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFpWe3KQyRs5+3rWRteVGs2YH0p54x//7eCO gxksifQ2qXPcT7MldMTx8azYGbdRp7uH0kUgT8gt2vXlkeGBnWGTHAU7Ip0Mh1r7 +SF/bm74QZgiYshdx1IBJmVKBGl/T3s1n6t9ZLAKBU5Ul5fJh92ZelW8SGcDBZbc hS62Wa+THYhbJvDG1hDXF4TjStOjvjHEWEIizZyaiG58iX5r0M/iLPWFdCFrRqvC LzUVwo3xXSXV0i4j5Dyh9RZXjMt1I214v4//LGzd0lvN79gkPihT+n45C9Zjbk9h bSDGsrDdV+wdUH/NFvuHee05Tc1qG4GMSMug+hXdvoWSmYS9bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUcPyOTcFnYMXoOKI6CBm9p09+FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjc1MmE5NzAtZDVmZi0z MzdjLWEwNTEtNmIyNTRiYjljODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKsExMknu1ljeY3lqCjgMtj0sXbTZMLA6hpiF9RWXw/ksmNbZ7xmfjnn nUKcQhYeA9i889/zARxYCXum5u12H1o33dYhS6mBH3OkKxmLPIJbqk8G/trl80Uz Fd51XG1j+6uKwPzizz/P0CV6c/fqF8vtE9nAB9wVgUrayBugLgJMtd3uN0iJXEPD aVfHPlWNysLUQkMtFEd4O384JA/Ax8jFf6xj0ZNrcUbtrAomJKG1OXrCS7zNqGHe U3+eNp55OgiJjwIg5VhKeLLnc4P7jbaWotLPW7lC7IzXdPv2VSiTS7/vaZL95r9q /axjyGKd0DI543CypqfDqr4AdTTpmV0= -----END CERTIFICATE-----Generated at Fri Apr 17 23:41:00 2026 by rpki-client