$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f9b17776-29ce-332b-bfef-70c3a6e26fae.roa File: f9b17776-29ce-332b-bfef-70c3a6e26fae.roa (raw, json) Hash identifier: ssLbuUcpXQjZah5VdfPxD/sPwGWmjZbsovGcyQU0LHw= Subject key identifier: 7C:5C:87:9B:6D:01:EC:B1:73:32:CB:C0:A6:B8:D1:3F:0D:95:01:10 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D60E50E1A731F97CD590D2240 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f9b17776-29ce-332b-bfef-70c3a6e26fae.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:0e:1a:73:1f:97:cd:59:0d:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=92d136aa-b308-4638-9388-3884124b9a30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3b:7a:b8:99:5f:e5:a5:0c:82:95:ea:28:08: 01:2c:fc:c4:4a:89:82:19:4e:a7:27:0c:1a:0d:7c: 89:27:8e:89:76:f7:a6:e8:ec:b5:12:97:53:e4:99: ad:93:64:3b:79:64:e7:38:b6:1f:26:4e:db:d5:e1: f0:fa:e9:28:fb:e7:ad:c0:ea:23:2f:22:8d:bb:d6: cc:f4:58:d5:a3:36:63:56:18:b3:16:99:7a:bf:18: 1f:47:7c:c1:c0:fa:62:22:34:46:5f:e9:a4:d3:03: f8:b0:80:29:a7:b8:26:45:5d:4c:20:fb:28:ce:c3: c8:19:83:73:e8:36:70:f8:ee:2d:cb:2b:3d:8c:22: c1:5d:9b:db:14:ce:7b:6e:a3:c8:02:ba:39:60:b0: c2:b2:44:06:34:97:10:64:99:b2:49:c2:9f:e2:54: 8e:f2:49:d4:c5:92:7a:d5:38:87:6c:44:47:ef:e3: e8:2e:7b:f3:9c:f3:2e:46:73:4a:0d:66:c3:ca:f8: 25:3e:84:a1:27:6f:26:b5:16:8b:9c:ff:2e:d3:46: d3:96:dc:68:9d:9e:69:73:77:d7:69:e8:3d:93:b6: 1c:a5:4a:16:c6:ed:97:21:13:7d:68:a4:82:fc:63: 48:20:b2:22:22:d1:2d:69:19:79:01:c1:08:cc:e1: c3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:5C:87:9B:6D:01:EC:B1:73:32:CB:C0:A6:B8:D1:3F:0D:95:01:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f9b17776-29ce-332b-bfef-70c3a6e26fae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:6e:08:ba:24:3d:12:84:3e:6c:86:c3:79:51:06:fb:c4:ae: 2a:e7:72:1c:15:ae:54:2d:d7:8d:10:2c:ac:5f:d1:e8:52:71: 19:1f:ee:81:6b:94:76:13:28:cc:f2:a8:cc:f5:f6:d4:dd:f8: 31:b3:aa:e1:8c:46:bc:df:6b:4b:ab:b5:93:41:78:c4:9f:e3: 07:25:fe:7a:20:f0:58:54:b3:16:19:f1:25:e8:53:43:b5:90: 18:12:ad:04:c8:f4:57:2f:b7:fc:cf:57:c3:06:bf:11:92:03: 31:11:c8:39:15:b6:87:a2:ee:e3:48:be:36:10:8c:da:c6:65: 51:58:30:a2:83:df:e4:29:02:d7:69:c0:60:b7:eb:d8:fd:05: 0e:07:77:37:81:e2:c7:c5:8d:53:bc:c6:4f:24:60:2a:ca:41: a4:18:02:b9:2f:c2:26:20:a1:44:8b:59:17:07:a7:ae:ed:6b: 12:71:30:0e:2f:6d:ab:37:01:28:68:82:1a:1b:51:9f:4d:d6: 8a:66:61:e9:fb:db:2b:51:cf:57:50:41:c0:47:6e:16:59:29: 32:ea:49:80:88:cb:c9:c9:ce:6a:ec:a4:22:9c:83:6c:13:1d: 99:6c:fa:0d:f9:b4:5b:ee:69:21:18:2a:a3:41:0d:2e:51:b9: 32:cd:c3:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5Q4acx+XzVkNIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk OTJkMTM2YWEtYjMwOC00NjM4LTkzODgtMzg4NDEyNGI5YTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Dt6uJlf5aUMgpXqKAgBLPzESomCGU6nJwwa DXyJJ46Jdvem6Oy1EpdT5Jmtk2Q7eWTnOLYfJk7b1eHw+uko++etwOojLyKNu9bM 9FjVozZjVhizFpl6vxgfR3zBwPpiIjRGX+mk0wP4sIApp7gmRV1MIPsozsPIGYNz 6DZw+O4tyys9jCLBXZvbFM57bqPIAro5YLDCskQGNJcQZJmyScKf4lSO8knUxZJ6 1TiHbERH7+PoLnvznPMuRnNKDWbDyvglPoShJ28mtRaLnP8u00bTltxonZ5pc3fX aeg9k7YcpUoWxu2XIRN9aKSC/GNIILIiItEtaRl5AcEIzOHDgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxch5ttAeyxczLLwKa40T8NlQEQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjliMTc3NzYtMjljZS0z MzJiLWJmZWYtNzBjM2E2ZTI2ZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpuCLokPRKEPmyGw3lRBvvErirnchwVrlQt140QLKxf0ehScRkf7oFr lHYTKMzyqMz19tTd+DGzquGMRrzfa0urtZNBeMSf4wcl/nog8FhUsxYZ8SXoU0O1 kBgSrQTI9Fcvt/zPV8MGvxGSAzERyDkVtoei7uNIvjYQjNrGZVFYMKKD3+QpAtdp wGC369j9BQ4HdzeB4sfFjVO8xk8kYCrKQaQYArkvwiYgoUSLWRcHp67taxJxMA4v bas3AShoghobUZ9N1opmYen72ytRz1dQQcBHbhZZKTLqSYCIy8nJzmrspCKcg2wT HZls+g35tFvuaSEYKqNBDS5RuTLNw+g= -----END CERTIFICATE-----Generated at Fri Apr 17 21:17:41 2026 by rpki-client