$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e1715101-8757-35c5-9b97-2c8a2220e65e.roa File: e1715101-8757-35c5-9b97-2c8a2220e65e.roa (raw, json) Hash identifier: qmgpsYORHEqUgTETOfJLFuItQmM4AmzTxKkEMT4F9z0= Subject key identifier: AC:94:04:C8:EB:1C:0A:77:37:F2:C8:F6:7E:45:86:8C:70:D0:DC:C4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D52438DD94258A6B0EA4E7500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e1715101-8757-35c5-9b97-2c8a2220e65e.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 8069 IP address blocks: 20.33.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:8d:d9:42:58:a6:b0:ea:4e:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=4bf2f88e-f0e6-4901-ac85-8165ad5433f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d5:b5:bd:f5:0d:61:b3:d3:53:13:53:ea:15: 2d:6a:4b:01:8c:0c:6f:2b:9f:91:89:34:74:98:7e: 7f:99:e4:9d:0b:be:cd:4e:01:3b:5f:f1:19:03:b0: 5f:b6:28:b9:18:f0:a8:d3:d9:3c:75:62:4e:4f:c1: c2:fc:d7:cf:ec:3f:fb:04:65:06:7c:78:48:4d:13: 5d:15:50:40:9e:e8:06:fb:21:20:d7:0e:3f:80:bd: 36:23:0d:14:09:a1:8b:4f:09:02:78:ee:45:ed:61: 8e:04:e2:ac:70:51:31:e8:4a:10:4b:2f:57:66:63: db:8c:77:2a:e8:5e:99:da:58:d2:03:0f:13:d9:c3: 48:0f:09:bc:b0:09:63:7e:8d:6a:83:af:64:66:00: 16:e7:04:7c:d3:8f:ff:a9:0b:04:43:66:3d:62:6c: d7:53:7a:99:a4:79:f6:24:df:dc:c4:e0:67:32:44: 89:7e:a1:b2:73:95:8f:4b:65:4d:ac:66:2e:87:67: 2d:3c:09:e7:d9:1f:d0:ae:ff:ff:25:1d:4d:af:50: 14:aa:87:24:cb:37:58:03:87:af:c4:bf:ba:de:f5: 4f:a0:4b:31:34:2c:bf:0c:fc:8d:28:1d:73:63:be: 51:97:66:5e:10:a4:41:89:6f:c3:7d:06:c3:d6:cc: 38:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:94:04:C8:EB:1C:0A:77:37:F2:C8:F6:7E:45:86:8C:70:D0:DC:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e1715101-8757-35c5-9b97-2c8a2220e65e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:5a:cb:3c:c7:cc:90:ec:41:dd:7e:83:73:7e:41:89:8c:4c: 66:c6:a1:75:e8:a3:e7:ec:7d:59:8c:9e:24:0a:69:a9:54:1f: c6:49:c1:b2:03:c7:fd:97:db:d4:0d:26:39:08:c4:da:d9:39: 40:e2:3d:2a:c1:59:f7:05:90:56:25:b7:60:8e:4c:0f:23:0b: 89:e9:cb:10:bb:f6:93:ad:c6:91:79:ac:b0:68:bd:30:72:f6: 1a:ab:05:12:63:51:4c:cf:22:50:73:53:42:05:78:20:7f:30: ad:8e:95:13:b2:77:13:a0:c7:73:03:63:15:63:07:a5:3a:86: 38:f6:7d:1b:09:4f:c0:82:34:7b:62:30:be:77:0b:e7:7e:2d: c7:03:0a:1c:60:1b:5d:bb:9d:04:10:39:35:35:62:ef:5b:5b: 44:36:23:d7:e3:08:6e:03:09:10:0d:88:39:bd:35:62:a4:82: f2:b5:41:36:70:d3:ca:4f:bb:72:2b:eb:2e:68:ab:dd:ba:78: 60:ee:dc:3f:d5:af:39:90:1f:a3:66:cb:81:50:7a:0b:ca:ba: 35:f6:75:56:a7:7a:8a:45:d4:b7:3b:16:95:5a:f8:8f:c8:12: e6:c8:bd:dc:59:d9:e2:f3:cf:c9:46:7f:0e:67:f3:2d:04:49: e3:9f:d2:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ43ZQlimsOpOdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk NGJmMmY4OGUtZjBlNi00OTAxLWFjODUtODE2NWFkNTQzM2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9W1vfUNYbPTUxNT6hUtaksBjAxvK5+RiTR0 mH5/meSdC77NTgE7X/EZA7Bftii5GPCo09k8dWJOT8HC/NfP7D/7BGUGfHhITRNd FVBAnugG+yEg1w4/gL02Iw0UCaGLTwkCeO5F7WGOBOKscFEx6EoQSy9XZmPbjHcq 6F6Z2ljSAw8T2cNIDwm8sAljfo1qg69kZgAW5wR804//qQsEQ2Y9YmzXU3qZpHn2 JN/cxOBnMkSJfqGyc5WPS2VNrGYuh2ctPAnn2R/Qrv//JR1Nr1AUqockyzdYA4ev xL+63vVPoEsxNCy/DPyNKB1zY75Rl2ZeEKRBiW/DfQbD1sw49QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyUBMjrHAp3N/LI9n5Fhoxw0NzEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTE3MTUxMDEtODc1Ny0z NWM1LTliOTctMmM4YTIyMjBlNjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChayzzHzJDsQd1+g3N+QYmMTGbGoXXoo+fsfVmMniQKaalUH8ZJwbID x/2X29QNJjkIxNrZOUDiPSrBWfcFkFYlt2COTA8jC4npyxC79pOtxpF5rLBovTBy 9hqrBRJjUUzPIlBzU0IFeCB/MK2OlROydxOgx3MDYxVjB6U6hjj2fRsJT8CCNHti ML53C+d+LccDChxgG127nQQQOTU1Yu9bW0Q2I9fjCG4DCRANiDm9NWKkgvK1QTZw 08pPu3Ir6y5oq926eGDu3D/VrzmQH6Nmy4FQegvKujX2dVaneopF1Lc7FpVa+I/I EubIvdxZ2eLzz8lGfw5n8y0ESeOf0vk= -----END CERTIFICATE-----Generated at Fri Apr 17 21:15:34 2026 by rpki-client