$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c5213a05-0625-3375-8382-9c42d5a3e1cb.roa File: c5213a05-0625-3375-8382-9c42d5a3e1cb.roa (raw, json) Hash identifier: eskERp6gSKMkibUMkZGtOLS6aj8z5zKiCyKa7wjTrYI= Subject key identifier: EB:FE:59:08:22:6B:A3:FF:D4:C5:98:31:B3:54:62:F0:45:0C:F1:0E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D60E50E66E9BE3A2094AFAA00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c5213a05-0625-3375-8382-9c42d5a3e1cb.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:0e:66:e9:be:3a:20:94:af:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=659eec29-46f3-465c-b713-91e83ae51d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:70:3f:0a:85:e6:c3:dd:0a:a4:a1:fe:9c:36: 5e:93:bf:7d:b9:b5:e4:67:e2:11:64:07:ed:5f:d5: 7a:35:e7:88:bd:cf:76:8b:1f:f2:f4:c1:b2:90:89: d0:2d:5a:18:8f:11:3d:3b:22:91:70:c2:ba:10:ae: 1f:53:6b:6d:75:87:4f:22:62:46:ab:95:ae:f1:cb: ef:91:4e:6d:05:42:0b:aa:87:87:26:79:04:f1:1d: c7:9a:77:90:2f:68:b4:17:e0:25:e8:9b:31:9a:16: b8:f6:15:d0:8f:5d:98:68:ba:df:20:eb:2d:d0:ef: 9e:d7:67:47:81:57:36:bc:83:15:f5:43:0f:88:84: 0f:0f:9f:54:f6:80:c1:7d:62:15:1c:70:ea:0e:96: 43:51:6e:9e:5c:74:31:0d:53:f6:ca:77:45:82:2a: f8:6c:99:31:c3:05:a5:c8:b6:63:e2:8d:dd:b8:ee: ae:66:c9:0d:a6:ec:e5:3e:56:09:98:d6:90:a0:38: 48:22:0f:ad:7f:d0:31:87:2a:97:52:d7:60:0d:48: cb:9d:27:9c:48:e9:a1:32:c5:5a:6d:ab:4a:24:11: 2f:9b:48:8e:86:4a:11:f5:92:65:ac:0a:e8:27:27: 6c:5b:98:7a:19:88:9a:ad:76:23:d2:0d:f4:c7:a7: 9d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:FE:59:08:22:6B:A3:FF:D4:C5:98:31:B3:54:62:F0:45:0C:F1:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c5213a05-0625-3375-8382-9c42d5a3e1cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:dc:09:ba:83:44:7c:6a:7f:26:fb:c2:4c:14:3d:0b:05:0f: 2a:b7:c7:0c:07:c9:4a:09:23:c4:c9:29:62:13:4a:91:00:07: 0b:c9:78:f6:c8:8f:3b:77:3c:a9:bc:37:12:c2:b1:1c:99:f5: f4:79:7f:ef:ae:ce:c4:9b:45:1f:70:3a:a2:d2:fa:fd:58:97: d7:f5:37:6f:30:a5:db:e3:fd:ac:9e:06:c5:8d:4a:2d:f6:f0: 29:bc:e7:22:01:60:7d:7a:1e:97:d8:88:84:17:24:6b:62:a9: bd:c2:dc:5a:02:1d:d6:43:f6:04:01:06:f9:7a:fa:e5:c8:e4: 1d:4a:13:95:25:b0:88:25:72:3c:3a:88:09:41:1a:27:f9:ba: ed:99:85:10:30:b7:f2:77:ea:9e:ce:f4:86:27:87:4f:c0:87: e5:78:1b:ea:28:6b:1e:a5:95:70:22:47:c5:a1:b2:0a:4a:d2: bf:78:3d:9c:ba:e5:3a:60:e2:84:33:63:2d:75:69:df:34:2e: ad:3e:dc:e3:d3:f8:7d:74:ec:8c:4d:2d:f0:b3:93:92:89:5c: 8f:cf:d3:0e:cc:74:ad:88:c4:59:ad:8e:b8:36:5d:d4:49:31: d1:0d:fe:07:55:9e:33:b2:a7:2f:5d:1f:73:6c:e8:91:74:94: 2d:d6:21:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5Q5m6b46IJSvqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk NjU5ZWVjMjktNDZmMy00NjVjLWI3MTMtOTFlODNhZTUxZDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnA/CoXmw90KpKH+nDZek799ubXkZ+IRZAft X9V6NeeIvc92ix/y9MGykInQLVoYjxE9OyKRcMK6EK4fU2ttdYdPImJGq5Wu8cvv kU5tBUILqoeHJnkE8R3HmneQL2i0F+Al6Jsxmha49hXQj12YaLrfIOst0O+e12dH gVc2vIMV9UMPiIQPD59U9oDBfWIVHHDqDpZDUW6eXHQxDVP2yndFgir4bJkxwwWl yLZj4o3duO6uZskNpuzlPlYJmNaQoDhIIg+tf9AxhyqXUtdgDUjLnSecSOmhMsVa batKJBEvm0iOhkoR9ZJlrAroJydsW5h6GYiarXYj0g30x6edfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOv+WQgia6P/1MWYMbNUYvBFDPEOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzUyMTNhMDUtMDYyNS0z Mzc1LTgzODItOWM0MmQ1YTNlMWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvcCbqDRHxqfyb7wkwUPQsFDyq3xwwHyUoJI8TJKWITSpEABwvJePbI jzt3PKm8NxLCsRyZ9fR5f++uzsSbRR9wOqLS+v1Yl9f1N28wpdvj/ayeBsWNSi32 8Cm85yIBYH16HpfYiIQXJGtiqb3C3FoCHdZD9gQBBvl6+uXI5B1KE5UlsIglcjw6 iAlBGif5uu2ZhRAwt/J36p7O9IYnh0/Ah+V4G+ooax6llXAiR8WhsgpK0r94PZy6 5Tpg4oQzYy11ad80Lq0+3OPT+H107IxNLfCzk5KJXI/P0w7MdK2IxFmtjrg2XdRJ MdEN/gdVnjOypy9dH3Ns6JF0lC3WIeg= -----END CERTIFICATE-----Generated at Fri Apr 17 21:18:24 2026 by rpki-client