$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4b0c2265-c6cc-304f-b1ab-afa0962ddec2.roa File: 4b0c2265-c6cc-304f-b1ab-afa0962ddec2.roa (raw, json) Hash identifier: 8c8CSfaqTHzS/eiBHWY4V0v8AJl/hcoIXlSWCmpKCQo= Subject key identifier: E7:77:90:57:92:07:46:7F:4D:3D:50:3C:44:1F:BD:83:B6:88:F9:67 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D60E50EA0EA3CC03EC31F7A80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4b0c2265-c6cc-304f-b1ab-afa0962ddec2.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:0e:a0:ea:3c:c0:3e:c3:1f:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=304e4871-43c6-4c1f-b411-d0ad2f4adaf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c7:86:70:26:c0:97:2e:14:63:9d:18:53:42: 62:a4:2c:af:26:43:76:7e:89:6e:6d:4a:f9:81:a2: 12:b4:cb:25:3e:2c:a9:da:b1:89:3e:25:d1:aa:a5: 2d:95:49:6b:53:93:2e:6d:f9:34:74:2f:a5:2a:74: 44:4f:bd:c5:59:63:e1:15:7c:a1:61:f9:e6:28:15: 78:d6:b4:f3:9d:33:7d:3b:69:ed:4f:6b:d8:f1:9f: 96:f1:a7:39:51:4e:a8:8d:3c:1a:70:12:04:11:c3: ad:cc:49:e1:1c:65:5c:2b:41:31:9d:fd:15:b8:a2: 7c:96:dd:6e:fa:4e:31:79:1f:10:b0:9b:a1:c1:d5: 2f:93:63:ee:08:04:c9:2f:c7:56:58:ed:21:86:3b: fd:ac:65:d0:44:4e:46:31:58:68:fe:2b:b1:53:16: e4:b0:21:ed:fb:56:a1:19:f5:5b:0d:ee:86:e1:c9: 7d:ac:77:30:e6:3d:c6:8c:ef:ec:75:d6:eb:44:61: 40:3c:63:d3:49:fa:94:89:a7:e0:4c:6b:45:c1:c6: a8:e4:12:c0:d9:ce:99:61:fc:fc:ad:15:f8:b3:e1: 91:ff:e9:0f:98:8f:32:0c:6c:42:8a:76:b2:5f:51: 53:8d:29:0a:a4:b3:ff:79:54:6e:83:96:33:0e:50: 7d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:77:90:57:92:07:46:7F:4D:3D:50:3C:44:1F:BD:83:B6:88:F9:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4b0c2265-c6cc-304f-b1ab-afa0962ddec2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:85:29:d7:8b:5e:80:b2:2c:c1:9b:64:6a:a9:30:28:e3:5c: 79:13:b3:15:9d:e0:a9:de:28:92:a1:12:ca:a2:8e:6f:93:a6: d7:c8:07:aa:3c:46:6a:3a:14:f4:a9:fb:d1:af:6d:45:00:8e: 3c:4f:13:d7:98:33:ee:65:32:8c:91:04:0b:de:9e:92:a8:55: 2b:04:8d:31:73:9d:a7:00:42:7f:c3:39:9d:51:c4:af:02:24: 1d:c9:36:67:07:ea:8a:ef:1d:7e:91:32:a4:bd:a3:db:0f:91: 5f:83:d0:ef:dd:af:4e:d0:6e:0d:01:87:be:ea:c1:1e:60:ba: 90:78:87:c0:f3:4f:5b:ae:8f:37:bf:de:ca:82:39:a5:a0:87: 33:75:3d:32:ec:d4:cd:c4:ec:40:d8:f1:17:06:5a:57:ed:60: 98:17:96:8d:48:4b:a5:95:bb:9b:24:45:08:1c:72:6e:53:dd: aa:f3:02:1b:3a:63:90:70:99:6d:90:16:2d:a5:00:d5:5b:3c: 8e:74:3a:2a:e8:e7:13:b2:e1:40:b7:6f:bd:3e:a8:ec:bb:81: a0:26:62:05:b5:bf:fa:3f:02:1b:36:41:ca:ea:fc:ca:6f:25: 8a:a2:28:d9:79:d4:8d:f8:f3:f4:f8:16:51:d0:ed:b4:0b:3d: 7c:29:5c:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5Q6g6jzAPsMfeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk MzA0ZTQ4NzEtNDNjNi00YzFmLWI0MTEtZDBhZDJmNGFkYWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyseGcCbAly4UY50YU0JipCyvJkN2folubUr5 gaIStMslPiyp2rGJPiXRqqUtlUlrU5Mubfk0dC+lKnRET73FWWPhFXyhYfnmKBV4 1rTznTN9O2ntT2vY8Z+W8ac5UU6ojTwacBIEEcOtzEnhHGVcK0Exnf0VuKJ8lt1u +k4xeR8QsJuhwdUvk2PuCATJL8dWWO0hhjv9rGXQRE5GMVho/iuxUxbksCHt+1ah GfVbDe6G4cl9rHcw5j3GjO/sddbrRGFAPGPTSfqUiafgTGtFwcao5BLA2c6ZYfz8 rRX4s+GR/+kPmI8yDGxCinayX1FTjSkKpLP/eVRug5YzDlB9tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOd3kFeSB0Z/TT1QPEQfvYO2iPlnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGIwYzIyNjUtYzZjYy0z MDRmLWIxYWItYWZhMDk2MmRkZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGFKdeLXoCyLMGbZGqpMCjjXHkTsxWd4KneKJKhEsqijm+TptfIB6o8 Rmo6FPSp+9GvbUUAjjxPE9eYM+5lMoyRBAvenpKoVSsEjTFznacAQn/DOZ1RxK8C JB3JNmcH6orvHX6RMqS9o9sPkV+D0O/dr07Qbg0Bh77qwR5gupB4h8DzT1uujze/ 3sqCOaWghzN1PTLs1M3E7EDY8RcGWlftYJgXlo1IS6WVu5skRQgccm5T3arzAhs6 Y5BwmW2QFi2lANVbPI50Oiro5xOy4UC3b70+qOy7gaAmYgW1v/o/Ahs2Qcrq/Mpv JYqiKNl51I348/T4FlHQ7bQLPXwpXBE= -----END CERTIFICATE-----Generated at Sat Apr 18 05:37:38 2026 by rpki-client