$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5d47e3e0-2d00-3923-b4da-a192da7e5a3d.roa File: 5d47e3e0-2d00-3923-b4da-a192da7e5a3d.roa (raw, json) Hash identifier: XFpNeVEEUCxXWlmzPUOGCrl27B2BTShzlNaPap17akI= Subject key identifier: 6B:01:C6:D0:15:BC:EA:B8:94:97:08:37:86:31:2B:31:AE:68:9E:65 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D60E50EAC41D150E89258C9FC Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5d47e3e0-2d00-3923-b4da-a192da7e5a3d.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:0e:ac:41:d1:50:e8:92:58:c9:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=a9748fcc-a6d2-4f87-93e0-f60f55c75d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d9:3c:d3:5d:68:80:e4:71:c8:4b:ee:04:46: 39:d5:d1:7a:dc:29:4a:b1:a5:2c:fa:0d:cd:f3:75: 9e:8e:d5:36:99:8e:59:ff:16:b5:80:85:15:b0:14: 63:d1:6f:89:44:c3:aa:9d:61:be:cf:cf:31:6f:4d: e5:52:e3:34:63:9f:d4:a2:f1:22:55:dd:b5:95:57: 98:3e:0c:89:ce:45:14:97:bf:b8:d5:93:d1:5b:3d: bd:59:b8:9b:9b:cf:0f:57:20:b6:3f:84:ec:a0:4f: da:f9:0d:e0:cc:4e:d6:bc:6c:12:ee:a6:5e:3b:56: 36:b1:13:1d:f0:75:b7:76:4b:16:62:05:bd:e1:3f: c1:8f:a4:a9:7e:6c:90:43:df:9e:f9:60:42:17:9d: 11:f7:f3:ea:54:5a:d3:a6:39:fb:9a:81:a9:2c:1e: 91:6b:e3:09:57:12:99:18:a7:30:45:39:73:5f:3f: f8:c9:31:09:92:88:89:ba:1a:7b:9b:96:41:b2:00: 4f:3a:89:1f:56:f4:40:d9:04:e5:85:62:82:f5:97: cc:1d:b6:0d:a9:21:bb:76:47:35:e6:24:8a:e0:e3: 03:8a:49:8b:4d:8d:bf:88:94:97:93:94:a4:35:9d: 0e:2f:92:28:37:68:21:d0:1e:60:7e:95:ea:1e:e1: 2d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:01:C6:D0:15:BC:EA:B8:94:97:08:37:86:31:2B:31:AE:68:9E:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5d47e3e0-2d00-3923-b4da-a192da7e5a3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:68:dc:e5:8b:c3:98:4a:1d:6b:3b:19:f2:7b:ca:a3:4c:77: 64:09:6e:a8:10:85:1a:f5:32:1a:25:6c:2b:af:0e:7a:0d:d2: 09:6e:6c:80:37:27:a1:ef:12:31:3b:51:2e:90:cb:85:5f:39: 72:cd:26:d8:8f:74:89:ff:0d:42:35:19:d0:c1:3a:cb:15:fa: c3:89:73:f8:8e:34:4b:32:3d:be:ac:7d:aa:09:0e:4d:c9:95: 5c:77:9a:16:4d:b2:57:87:0a:71:0c:9b:f1:16:e5:f0:b2:ae: 20:33:b5:20:b4:6c:bd:b5:ff:a3:1a:d0:ab:51:3c:94:ae:32: 9d:20:47:10:93:5c:e3:1c:50:21:24:f1:d4:c1:f7:58:68:1a: a8:e1:5f:5d:c5:8b:90:cf:aa:e0:e7:db:b6:ae:41:21:fe:a9: 49:da:b9:57:63:04:e5:8a:c2:02:95:c4:b0:9a:3d:15:a9:ca: cd:dc:35:52:13:af:b7:f1:2a:b2:a1:49:b8:a3:7f:2e:ec:a2: 88:3b:bb:9b:e0:bf:da:c0:14:3e:bd:77:77:8f:a5:71:2b:d2: 99:32:45:41:10:72:0d:a1:d9:b2:47:92:2e:51:98:eb:76:7a: 66:90:c7:8f:f5:ce:a1:a6:3c:76:67:7c:2e:6b:7d:eb:48:bd: 14:bd:6a:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5Q6sQdFQ6JJYyfwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk YTk3NDhmY2MtYTZkMi00Zjg3LTkzZTAtZjYwZjU1Yzc1ZDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9k8011ogORxyEvuBEY51dF63ClKsaUs+g3N 83WejtU2mY5Z/xa1gIUVsBRj0W+JRMOqnWG+z88xb03lUuM0Y5/UovEiVd21lVeY PgyJzkUUl7+41ZPRWz29Wbibm88PVyC2P4TsoE/a+Q3gzE7WvGwS7qZeO1Y2sRMd 8HW3dksWYgW94T/Bj6SpfmyQQ9+e+WBCF50R9/PqVFrTpjn7moGpLB6Ra+MJVxKZ GKcwRTlzXz/4yTEJkoiJuhp7m5ZBsgBPOokfVvRA2QTlhWKC9ZfMHbYNqSG7dkc1 5iSK4OMDikmLTY2/iJSXk5SkNZ0OL5IoN2gh0B5gfpXqHuEtHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsBxtAVvOq4lJcIN4YxKzGuaJ5lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWQ0N2UzZTAtMmQwMC0z OTIzLWI0ZGEtYTE5MmRhN2U1YTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1o3OWLw5hKHWs7GfJ7yqNMd2QJbqgQhRr1MholbCuvDnoN0glubIA3 J6HvEjE7US6Qy4VfOXLNJtiPdIn/DUI1GdDBOssV+sOJc/iONEsyPb6sfaoJDk3J lVx3mhZNsleHCnEMm/EW5fCyriAztSC0bL21/6Ma0KtRPJSuMp0gRxCTXOMcUCEk 8dTB91hoGqjhX13Fi5DPquDn27auQSH+qUnauVdjBOWKwgKVxLCaPRWpys3cNVIT r7fxKrKhSbijfy7soog7u5vgv9rAFD69d3ePpXEr0pkyRUEQcg2h2bJHki5RmOt2 emaQx4/1zqGmPHZnfC5rfetIvRS9ahc= -----END CERTIFICATE-----Generated at Fri Apr 17 22:17:16 2026 by rpki-client