$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c1f6ce7e-11f3-3197-bf63-44537afda3f2.roa File: c1f6ce7e-11f3-3197-bf63-44537afda3f2.roa (raw, json) Hash identifier: F8hIkOEMF3KAoxe1oPq9q87rhI+xO0uwd2Q46hLvO/s= Subject key identifier: 6D:92:3E:48:4F:A5:2D:1D:C2:80:AC:CB:62:37:66:C5:3D:79:C6:2E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D60E50E4F11BE408691967800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c1f6ce7e-11f3-3197-bf63-44537afda3f2.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:0e:4f:11:be:40:86:91:96:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=50a83216-cf84-4932-a867-3a5209ed48aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c9:60:fe:a0:58:3d:68:86:5b:c4:a0:83:76: 06:b5:71:d5:e7:b2:44:38:53:4d:12:aa:3d:ce:1a: 09:b8:36:e0:b4:88:8e:43:da:52:2b:86:7f:89:66: 38:7d:dd:22:b5:43:9d:77:e2:5a:f8:27:3b:87:e7: 65:8e:f3:56:a8:15:4a:f3:e6:42:c7:48:39:f4:8f: a5:83:eb:23:d6:e5:ef:07:f0:8d:49:63:f3:3a:29: 92:22:a1:cd:a7:05:b0:f9:e2:ab:de:6b:80:2a:7f: 38:ad:19:79:5b:ad:6d:d5:9a:b3:74:ae:e8:9d:8e: 8d:5e:ff:c3:92:c0:31:74:f7:be:86:b1:59:0f:f2: 48:cd:54:76:32:dc:ea:9b:7e:e8:b9:b6:7c:2b:6b: 9c:b0:45:2a:00:44:b3:3c:dc:8c:b4:65:26:3e:d9: a7:d9:44:fa:bd:ab:18:b5:fe:e5:fe:34:83:37:81: 62:5a:c8:cd:ae:b8:0c:c1:7a:ec:9a:4a:85:45:87: ff:a2:b8:14:3c:fe:56:18:9d:36:a5:16:99:3f:14: c2:53:67:81:b9:17:fd:7c:95:42:88:a4:b2:41:b1: 20:69:0f:86:16:e4:4e:b7:82:d3:fe:74:c4:85:cb: ce:1f:29:f3:31:b0:fb:21:58:6a:e3:a0:87:83:89: 15:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:92:3E:48:4F:A5:2D:1D:C2:80:AC:CB:62:37:66:C5:3D:79:C6:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c1f6ce7e-11f3-3197-bf63-44537afda3f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:7b:f1:c8:13:c4:71:4f:c3:99:62:8c:64:72:7f:40:e6:bc: 36:71:13:eb:89:91:61:1b:2e:40:49:c9:34:d6:87:2d:b0:7e: 33:5d:c4:03:16:16:9c:26:d4:b3:bc:e6:7a:fc:bc:37:ad:a9: 74:d1:96:8c:00:89:ab:ee:d1:31:cf:55:67:b2:5e:6a:5c:d0: 85:d1:a8:d0:36:3f:14:65:57:24:c1:41:08:15:8f:8d:78:07: 94:09:1b:71:9d:d4:49:21:18:84:1e:a8:76:08:eb:ce:01:ff: 8c:19:b0:28:08:bf:2b:2d:db:44:5d:52:29:13:2c:bb:c8:9c: 0b:0a:c9:5c:0b:90:26:fa:bf:9a:2b:c3:52:6a:eb:13:3c:e2: 71:e6:89:5e:e7:9c:65:4b:a0:ba:e5:bd:50:64:07:d4:c3:c2: 71:62:06:1c:b3:0d:7b:46:48:11:70:96:be:a9:65:59:87:fa: 4a:d7:7f:77:70:93:3b:bc:c6:a8:7e:22:32:80:a6:9c:ab:0b: 0b:66:b4:2b:1a:df:18:78:24:b1:12:08:0d:75:b3:f6:d9:a7: 76:4e:65:94:ad:fe:14:9d:49:9f:9a:1a:42:3c:b4:99:03:c4: e8:32:e8:a3:32:04:b7:6f:aa:55:56:06:e6:5e:5d:f0:1c:bf: ee:eb:f5:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5Q5PEb5AhpGWeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk NTBhODMyMTYtY2Y4NC00OTMyLWE4NjctM2E1MjA5ZWQ0OGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlslg/qBYPWiGW8Sgg3YGtXHV57JEOFNNEqo9 zhoJuDbgtIiOQ9pSK4Z/iWY4fd0itUOdd+Ja+Cc7h+dljvNWqBVK8+ZCx0g59I+l g+sj1uXvB/CNSWPzOimSIqHNpwWw+eKr3muAKn84rRl5W61t1ZqzdK7onY6NXv/D ksAxdPe+hrFZD/JIzVR2Mtzqm37oubZ8K2ucsEUqAESzPNyMtGUmPtmn2UT6vasY tf7l/jSDN4FiWsjNrrgMwXrsmkqFRYf/orgUPP5WGJ02pRaZPxTCU2eBuRf9fJVC iKSyQbEgaQ+GFuROt4LT/nTEhcvOHynzMbD7IVhq46CHg4kV0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2SPkhPpS0dwoCsy2I3ZsU9ecYuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzFmNmNlN2UtMTFmMy0z MTk3LWJmNjMtNDQ1MzdhZmRhM2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIh78cgTxHFPw5lijGRyf0DmvDZxE+uJkWEbLkBJyTTWhy2wfjNdxAMW Fpwm1LO85nr8vDetqXTRlowAiavu0THPVWeyXmpc0IXRqNA2PxRlVyTBQQgVj414 B5QJG3Gd1EkhGIQeqHYI684B/4wZsCgIvyst20RdUikTLLvInAsKyVwLkCb6v5or w1Jq6xM84nHmiV7nnGVLoLrlvVBkB9TDwnFiBhyzDXtGSBFwlr6pZVmH+krXf3dw kzu8xqh+IjKAppyrCwtmtCsa3xh4JLESCA11s/bZp3ZOZZSt/hSdSZ+aGkI8tJkD xOgy6KMyBLdvqlVWBuZeXfAcv+7r9To= -----END CERTIFICATE-----Generated at Sat Apr 18 04:00:28 2026 by rpki-client