$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/54229034-9041-3ee3-bfcd-6d8d02da3700.roa File: 54229034-9041-3ee3-bfcd-6d8d02da3700.roa (raw, json) Hash identifier: ud+XB2c3MDGCwwMUcXx7HyzyKuU2yXyodeygWEQp/tA= Subject key identifier: 68:BA:18:5F:5F:AA:45:DF:74:7A:5C:B6:49:94:3A:00:80:CC:12:C5 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D60E50E7DABFEC7E21954C500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/54229034-9041-3ee3-bfcd-6d8d02da3700.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:0e:7d:ab:fe:c7:e2:19:54:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=520977a1-0d41-4548-8316-1db1c947a100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8d:1c:e4:c8:1b:03:4a:de:d5:60:81:36:28: 88:27:21:fc:a7:3d:3b:a2:50:b0:31:ec:3f:f6:23: fd:65:d0:2f:66:79:3a:41:28:48:29:10:1e:7d:73: 8f:96:d1:9b:c3:2c:9c:32:fc:e2:55:ce:aa:97:da: 0e:bd:1e:e6:89:32:8c:11:12:07:d0:bd:b4:b4:5b: 15:4e:1e:41:fe:ca:0a:b9:71:25:39:2e:df:6f:fa: 8f:ac:95:9b:39:fe:16:64:94:05:dd:63:c9:8c:72: 81:52:0e:14:94:b5:3f:0d:e9:be:70:de:ec:df:5f: 2c:a8:1b:32:db:f5:91:78:3d:74:f4:bc:84:e8:72: 1a:09:68:5f:5a:29:0d:db:1d:17:c2:d6:7c:11:70: 38:ff:f3:b3:82:76:2c:fa:2b:bf:20:9f:b6:13:08: 7d:28:e0:34:6c:38:ab:a9:ea:01:91:d7:78:fe:38: af:fc:48:45:24:e1:ab:a8:cc:d4:45:ee:29:e1:cd: ec:14:38:97:ca:37:6a:73:02:0a:83:15:d0:08:7f: a3:6d:ab:02:b2:e9:de:83:79:43:c0:f2:2f:92:7b: 05:3b:bf:76:7a:79:98:a1:bd:77:e4:47:35:04:56: 65:bb:89:c6:96:e5:81:29:b7:3b:77:77:e6:bc:ef: e0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BA:18:5F:5F:AA:45:DF:74:7A:5C:B6:49:94:3A:00:80:CC:12:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/54229034-9041-3ee3-bfcd-6d8d02da3700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ea:e3:c0:96:10:21:ed:76:1e:9b:d6:f4:8a:e2:b4:93:68: a9:fe:44:a9:81:ca:17:f9:cc:b1:cd:e4:f8:8f:ad:51:e2:fd: 0e:dd:ee:99:0d:f0:2c:b6:17:35:c2:b2:c8:89:d5:bf:d5:4a: a0:f3:5a:39:4a:2f:2a:b4:77:f8:80:f7:c4:ea:73:85:37:b2: 05:ae:d1:b0:03:a2:31:32:c8:ce:74:fa:eb:3f:24:fd:1c:90: 50:a1:05:44:c6:32:24:9b:d8:f8:bd:d7:48:23:99:dc:b6:c7: c7:bf:cd:f4:5c:4b:a7:7f:5a:7a:15:3a:50:54:aa:24:ec:cd: bf:76:88:c7:19:0c:14:92:80:ea:c7:a9:c5:b0:a1:d7:fc:69: ca:80:08:cb:79:99:d1:c8:90:eb:04:dc:43:32:e8:94:c3:38: 68:55:6f:f4:11:3c:60:c8:ae:30:ac:33:84:71:7e:5d:6a:15: dd:1f:e1:37:ab:26:16:d6:b3:3d:90:57:f6:f3:ab:f1:19:da: 3a:1a:cf:2b:db:9c:92:71:09:66:60:dc:ab:6d:3d:75:36:94: 85:9f:40:40:a1:5a:63:25:ed:0a:66:db:fd:70:6f:8f:93:a1: ee:f7:8f:ef:5d:78:2c:72:b1:b6:50:91:c3:db:6a:9b:77:58: b3:b6:84:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5Q59q/7H4hlUxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk NTIwOTc3YTEtMGQ0MS00NTQ4LTgzMTYtMWRiMWM5NDdhMTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhY0c5MgbA0re1WCBNiiIJyH8pz07olCwMew/ 9iP9ZdAvZnk6QShIKRAefXOPltGbwyycMvziVc6ql9oOvR7miTKMERIH0L20tFsV Th5B/soKuXElOS7fb/qPrJWbOf4WZJQF3WPJjHKBUg4UlLU/Dem+cN7s318sqBsy 2/WReD109LyE6HIaCWhfWikN2x0XwtZ8EXA4//OzgnYs+iu/IJ+2Ewh9KOA0bDir qeoBkdd4/jiv/EhFJOGrqMzURe4p4c3sFDiXyjdqcwIKgxXQCH+jbasCsuneg3lD wPIvknsFO792enmYob135Ec1BFZlu4nGluWBKbc7d3fmvO/g3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGi6GF9fqkXfdHpctkmUOgCAzBLFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTQyMjkwMzQtOTA0MS0z ZWUzLWJmY2QtNmQ4ZDAyZGEzNzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbq48CWECHtdh6b1vSK4rSTaKn+RKmByhf5zLHN5PiPrVHi/Q7d7pkN 8Cy2FzXCssiJ1b/VSqDzWjlKLyq0d/iA98Tqc4U3sgWu0bADojEyyM50+us/JP0c kFChBUTGMiSb2Pi910gjmdy2x8e/zfRcS6d/WnoVOlBUqiTszb92iMcZDBSSgOrH qcWwodf8acqACMt5mdHIkOsE3EMy6JTDOGhVb/QRPGDIrjCsM4Rxfl1qFd0f4Ter JhbWsz2QV/bzq/EZ2joazyvbnJJxCWZg3KttPXU2lIWfQEChWmMl7Qpm2/1wb4+T oe73j+9deCxysbZQkcPbapt3WLO2hHM= -----END CERTIFICATE-----Generated at Fri Apr 17 21:16:40 2026 by rpki-client