$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fee36d8c-ea50-3844-9ead-d050392cf847.roa File: fee36d8c-ea50-3844-9ead-d050392cf847.roa (raw, json) Hash identifier: am+wBoDwj/scqUICqkygLLjEUgcVdanpnWvw8oPNI2k= Subject key identifier: 89:97:87:1C:A9:2B:54:15:C3:52:6D:63:FA:3D:48:90:E7:93:80:9A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D60E50E7240ADAF54B847B42E Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fee36d8c-ea50-3844-9ead-d050392cf847.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:0e:72:40:ad:af:54:b8:47:b4:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=96450968-3ed6-4ccc-b2f6-00d8f8b7d414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8d:71:96:ab:4d:e5:7b:b1:7f:30:ef:f1:65: 2e:ed:f7:36:bd:7f:cc:c8:44:90:1b:62:95:99:04: d7:7b:8d:ee:8f:95:99:ab:88:51:c1:c1:6e:28:4d: 63:6d:04:06:fb:af:a9:2c:1e:6d:63:3f:4d:11:17: 26:87:4c:95:0a:30:3c:85:78:2b:22:bb:e3:e9:c3: 0e:48:9b:b5:3c:cc:ec:8d:ae:a0:16:0f:71:de:cf: 95:c4:78:db:77:bf:8d:83:d3:92:bf:e8:1d:13:83: 28:a5:9a:da:1d:3f:f7:e1:22:ad:6e:44:07:6b:06: d3:93:26:8b:d7:44:b4:ef:f6:54:ae:74:48:ac:60: a6:dc:25:6f:e4:fd:62:95:b8:a4:3b:47:89:c2:04: fa:dd:b6:83:ac:6a:e8:ca:91:9d:de:f4:df:fa:bb: 98:b6:63:6b:5e:9a:e6:d9:3f:04:29:bb:60:61:83: d1:d6:6d:91:39:23:fb:75:6f:88:2c:5c:f6:67:b4: 25:54:92:4a:fd:90:15:6a:a2:5a:f3:22:13:3c:76: 12:fe:21:77:0d:eb:9a:76:91:6c:de:3e:d6:63:39: e5:69:aa:33:aa:06:3d:56:65:89:af:3b:9f:14:83: 1d:19:ea:8d:7a:f5:0c:1a:17:f4:6b:4e:a7:7f:73: 7b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:97:87:1C:A9:2B:54:15:C3:52:6D:63:FA:3D:48:90:E7:93:80:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fee36d8c-ea50-3844-9ead-d050392cf847.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:0c:2c:3c:71:e1:cb:75:18:8b:a8:e0:7e:37:e2:54:67:dd: ad:82:96:e0:00:87:40:09:fe:d9:e5:71:8b:d6:ef:24:e6:93: 3e:91:ae:73:ad:73:a2:bb:37:0f:c5:a3:06:aa:19:44:0b:c7: 4a:50:d9:d5:80:73:4f:d4:c2:48:15:a8:4d:46:33:ec:4f:93: ad:89:e4:f4:a3:ed:bb:dd:53:04:f1:70:72:c3:31:11:6a:cd: d0:c9:fd:2b:d2:e9:12:5d:a7:6c:15:06:1b:8a:25:62:b0:1e: b9:96:f3:d9:73:ec:0e:5d:d6:cb:3d:32:6e:5a:d5:25:35:f5: d2:09:87:28:c9:23:15:9b:05:27:bf:1f:7e:b3:31:92:16:96: 30:9a:f0:aa:3c:d7:ef:6e:69:a2:c9:bc:92:86:11:5f:08:3f: 3f:e8:e4:37:77:dc:d2:1e:44:56:b3:68:3d:4d:67:cd:63:6a: 2f:81:7f:ff:4f:d2:47:81:93:5f:c2:01:fc:8f:3a:a8:d1:a0: e5:af:de:0e:f4:e9:21:c3:2e:22:22:49:05:c5:f6:1f:29:22: 80:24:de:6f:88:dd:59:d4:94:3f:70:f9:66:d5:b4:63:8c:f9: f9:25:00:cb:6f:17:a6:bf:9e:cc:1f:5e:1b:cb:f1:c4:90:76: 8d:92:88:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5Q5yQK2vVLhHtC4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk OTY0NTA5NjgtM2VkNi00Y2NjLWIyZjYtMDBkOGY4YjdkNDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko1xlqtN5XuxfzDv8WUu7fc2vX/MyESQG2KV mQTXe43uj5WZq4hRwcFuKE1jbQQG+6+pLB5tYz9NERcmh0yVCjA8hXgrIrvj6cMO SJu1PMzsja6gFg9x3s+VxHjbd7+Ng9OSv+gdE4MopZraHT/34SKtbkQHawbTkyaL 10S07/ZUrnRIrGCm3CVv5P1ilbikO0eJwgT63baDrGroypGd3vTf+ruYtmNrXprm 2T8EKbtgYYPR1m2ROSP7dW+ILFz2Z7QlVJJK/ZAVaqJa8yITPHYS/iF3DeuadpFs 3j7WYznlaaozqgY9VmWJrzufFIMdGeqNevUMGhf0a06nf3N7OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImXhxypK1QVw1JtY/o9SJDnk4CaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZmVlMzZkOGMtZWE1MC0z ODQ0LTllYWQtZDA1MDM5MmNmODQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYMLDxx4ct1GIuo4H434lRn3a2CluAAh0AJ/tnlcYvW7yTmkz6RrnOt c6K7Nw/FowaqGUQLx0pQ2dWAc0/UwkgVqE1GM+xPk62J5PSj7bvdUwTxcHLDMRFq zdDJ/SvS6RJdp2wVBhuKJWKwHrmW89lz7A5d1ss9Mm5a1SU19dIJhyjJIxWbBSe/ H36zMZIWljCa8Ko81+9uaaLJvJKGEV8IPz/o5Dd33NIeRFazaD1NZ81jai+Bf/9P 0keBk1/CAfyPOqjRoOWv3g706SHDLiIiSQXF9h8pIoAk3m+I3VnUlD9w+WbVtGOM +fklAMtvF6a/nswfXhvL8cSQdo2SiD4= -----END CERTIFICATE-----Generated at Fri Apr 17 22:18:08 2026 by rpki-client