$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfce08b9-fa20-3011-97ac-85c4ba3785d5.roa File: cfce08b9-fa20-3011-97ac-85c4ba3785d5.roa (raw, json) Hash identifier: lfxOG5/fqaGjXSdt72oa7r6fMXtio2YL7urUqkVUWL8= Subject key identifier: B2:2D:FA:5F:94:C7:0C:2E:5E:B3:01:C6:6B:5D:EB:68:65:36:15:C9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D52438E123032CE716DD02BC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfce08b9-fa20-3011-97ac-85c4ba3785d5.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 8069 IP address blocks: 20.33.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:8e:12:30:32:ce:71:6d:d0:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=38726108-44d6-418c-ac25-ae762076b7a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:af:31:3c:bc:99:9d:25:2b:80:75:62:91:15: 2d:11:c0:19:7d:a3:47:f5:52:7a:ea:1a:5c:0f:00: ff:fe:84:88:81:b2:29:e6:ad:ac:7e:cf:63:8e:02: cf:36:dc:da:69:e3:85:be:c2:cf:f7:6c:f5:01:03: 33:2d:80:45:91:b8:a1:c3:de:55:cf:6a:a0:1e:ae: 3a:73:6b:1a:d6:30:0c:52:e8:08:40:cf:ef:e0:be: a6:b9:c3:94:66:54:c1:5a:2a:fa:25:7c:f4:8d:ba: 05:48:86:a9:ba:5b:e1:c8:55:09:6c:c2:24:84:f5: 32:98:61:47:11:55:db:c2:e9:fe:e7:a9:a8:70:d5: 7d:5f:ab:f7:b4:08:e6:57:8c:e1:d1:0d:5b:4e:06: 6c:77:e2:43:68:04:95:86:13:60:60:6b:9f:0f:81: 41:ec:02:2b:e0:f7:39:65:c5:ab:af:99:ce:54:25: b5:db:48:be:03:b8:07:60:83:23:d9:93:52:0a:18: 54:b4:ad:16:52:3e:68:f6:af:4c:0a:29:2f:79:e9: 62:06:e6:75:de:09:0c:9c:b0:68:2f:96:ae:e1:b4: bb:21:8b:d5:2b:dd:29:fc:11:f0:01:62:25:45:85: c0:d7:c6:15:a8:e8:16:49:a1:b3:07:50:32:e2:aa: e9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2D:FA:5F:94:C7:0C:2E:5E:B3:01:C6:6B:5D:EB:68:65:36:15:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfce08b9-fa20-3011-97ac-85c4ba3785d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:94:24:ed:5a:a5:60:c8:8e:a4:32:78:ed:19:97:4e:92:2d: df:f9:3d:26:9b:4c:d3:89:d2:d4:a5:64:0d:14:71:21:c4:95: 15:51:7c:f0:97:9b:37:e3:2b:89:c6:87:77:8a:34:64:3f:06: 49:b2:5b:5c:49:e2:c5:be:40:8a:39:e0:aa:98:78:04:57:3f: d4:2d:7d:68:e3:a4:b6:5f:b7:c8:88:7a:9e:f6:92:ce:0e:85: 70:a1:a7:41:69:ce:39:98:4b:d7:fb:0d:d5:ee:a2:81:dc:b5: 47:f4:9f:af:1d:23:b7:2d:b1:9e:58:ad:d2:50:c8:bf:10:57: 70:67:95:1c:2f:15:28:c1:d6:4f:b9:3a:00:55:b0:04:e1:1c: 2b:00:bf:9d:7c:75:1d:44:f0:43:e7:cd:39:25:8d:58:79:91: d7:d0:68:fb:3d:24:2c:6f:91:91:2b:4a:f4:89:52:dc:67:1c: 4d:fa:a5:3d:79:7f:5b:e6:3c:8f:9b:3a:a4:77:3f:67:cb:f4: 5b:bd:e0:8d:f7:72:46:b7:a2:65:3f:ae:e7:52:f6:68:dc:de: 14:12:19:5f:1c:33:45:d5:72:68:8b:66:d1:e8:e9:6e:12:ae: 9e:5d:59:26:69:7b:f2:0f:52:ff:9a:5e:3e:0d:c0:8d:7e:ad: 21:a3:04:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ44SMDLOcW3QK8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk Mzg3MjYxMDgtNDRkNi00MThjLWFjMjUtYWU3NjIwNzZiN2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAga8xPLyZnSUrgHVikRUtEcAZfaNH9VJ66hpc DwD//oSIgbIp5q2sfs9jjgLPNtzaaeOFvsLP92z1AQMzLYBFkbihw95Vz2qgHq46 c2sa1jAMUugIQM/v4L6mucOUZlTBWir6JXz0jboFSIapulvhyFUJbMIkhPUymGFH EVXbwun+56mocNV9X6v3tAjmV4zh0Q1bTgZsd+JDaASVhhNgYGufD4FB7AIr4Pc5 ZcWrr5nOVCW120i+A7gHYIMj2ZNSChhUtK0WUj5o9q9MCikveeliBuZ13gkMnLBo L5au4bS7IYvVK90p/BHwAWIlRYXA18YVqOgWSaGzB1Ay4qrpAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIt+l+UxwwuXrMBxmtd62hlNhXJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2ZjZTA4YjktZmEyMC0z MDExLTk3YWMtODVjNGJhMzc4NWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiUJO1apWDIjqQyeO0Zl06SLd/5PSabTNOJ0tSlZA0UcSHElRVRfPCX mzfjK4nGh3eKNGQ/BkmyW1xJ4sW+QIo54KqYeARXP9QtfWjjpLZft8iIep72ks4O hXChp0FpzjmYS9f7DdXuooHctUf0n68dI7ctsZ5YrdJQyL8QV3BnlRwvFSjB1k+5 OgBVsAThHCsAv518dR1E8EPnzTkljVh5kdfQaPs9JCxvkZErSvSJUtxnHE36pT15 f1vmPI+bOqR3P2fL9Fu94I33cka3omU/rudS9mjc3hQSGV8cM0XVcmiLZtHo6W4S rp5dWSZpe/IPUv+aXj4NwI1+rSGjBIk= -----END CERTIFICATE-----Generated at Fri Apr 17 21:16:47 2026 by rpki-client