$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ffb1385a-fcf0-3f8e-9012-938f49909686.roa File: ffb1385a-fcf0-3f8e-9012-938f49909686.roa (raw, json) Hash identifier: JK0aia49x8HXH1mYAczLHTsBUOcgNsTl2yVyo0qfRqg= Subject key identifier: A8:AD:09:87:D5:1F:B1:7F:AF:CA:CA:54:F4:19:A9:7C:9A:6F:DD:A7 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D52438E57016F8C3B8FA09958 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ffb1385a-fcf0-3f8e-9012-938f49909686.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 8069 IP address blocks: 20.33.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:8e:57:01:6f:8c:3b:8f:a0:99:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=6c29c18d-4da3-4f34-9f29-d827efc0efe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:82:12:8f:73:79:ae:54:f8:65:c4:b5:7b:9c: f7:ba:c0:df:3f:2e:aa:95:52:5a:22:18:be:3e:2b: c2:a1:b0:ea:26:3b:f4:d0:b5:6e:4b:52:82:31:35: 78:86:ae:4f:9d:e9:d4:61:42:02:15:4b:de:ed:a5: 3a:a1:d5:47:f9:4a:3c:5f:c2:5b:b0:99:cc:75:37: 17:ad:d4:7a:b7:5f:9b:ea:c6:c7:7c:dc:9a:37:a8: 26:cc:00:66:77:ef:b1:09:15:5e:66:04:0a:df:14: 0c:a8:6a:de:a5:ec:2e:7d:79:28:ce:e6:b9:87:b7: 7a:44:a2:5e:48:e7:b5:a1:ed:52:84:80:ba:3e:2f: e1:b9:29:ad:56:6d:6c:c0:fc:a9:ae:c5:51:3f:20: d1:23:57:c6:3a:8f:c9:64:bc:7c:d4:e1:5d:16:5d: 3f:62:c7:2d:1c:db:b6:bb:08:aa:4a:2c:e5:36:12: ad:46:1f:e5:74:db:7d:ac:d8:01:0e:73:7a:f4:5c: 96:48:b8:27:45:64:3f:b8:e2:22:c9:c5:5c:97:64: 88:b8:b0:54:18:0a:e1:3f:8a:ad:39:8a:0a:2f:1f: da:c2:98:52:9f:3e:e9:60:fd:60:05:80:e7:ca:59: 9f:c9:bc:f5:fd:2e:73:16:d4:5e:a8:aa:fc:f2:41: 81:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AD:09:87:D5:1F:B1:7F:AF:CA:CA:54:F4:19:A9:7C:9A:6F:DD:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ffb1385a-fcf0-3f8e-9012-938f49909686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:d3:1d:69:3f:a4:ea:60:d4:80:70:78:4d:11:5b:b6:fc:f4: 40:60:3e:e4:03:d6:7e:ee:cc:e5:91:d5:4f:7c:b7:36:c4:87: ee:19:e1:7b:5e:b1:2d:35:78:83:b4:93:48:12:7a:18:d3:fa: 82:60:a6:27:e2:76:ca:a8:76:d7:b0:6b:bf:96:96:8b:80:60: 56:3b:39:12:ee:fa:d8:73:69:b6:92:d9:36:f8:9f:b9:fa:4f: 2d:37:bc:94:4f:8b:3f:3c:d0:c0:c2:93:d7:6f:c0:53:75:a9: c5:e3:3f:57:9d:e2:d9:07:1e:dd:63:0e:02:a3:95:35:0b:83: 49:79:3e:88:5b:36:9f:0e:01:7d:79:3c:26:13:4b:52:7b:2b: 69:ad:77:55:fe:9f:f5:d3:cb:e8:c4:80:aa:75:5f:70:f9:f8: dd:15:80:6c:c5:69:ab:8f:18:71:5d:12:fa:a2:ea:07:84:5a: c4:f2:76:f3:05:7d:b4:9b:cc:98:52:45:c8:44:9b:9f:c0:de: 89:6b:79:ad:63:c4:c2:5c:da:1c:69:fe:3f:84:02:3e:17:db: f6:79:7f:a0:81:a0:20:e3:09:33:f7:ba:f6:ab:7a:a8:a2:62: 6d:18:b1:1f:dc:24:c9:7b:85:a0:37:d1:46:e8:31:da:de:07: 69:4d:98:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ45XAW+MO4+gmVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk NmMyOWMxOGQtNGRhMy00ZjM0LTlmMjktZDgyN2VmYzBlZmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4ISj3N5rlT4ZcS1e5z3usDfPy6qlVJaIhi+ PivCobDqJjv00LVuS1KCMTV4hq5PnenUYUICFUve7aU6odVH+Uo8X8JbsJnMdTcX rdR6t1+b6sbHfNyaN6gmzABmd++xCRVeZgQK3xQMqGrepewufXkozua5h7d6RKJe SOe1oe1ShIC6Pi/huSmtVm1swPyprsVRPyDRI1fGOo/JZLx81OFdFl0/YsctHNu2 uwiqSizlNhKtRh/ldNt9rNgBDnN69FyWSLgnRWQ/uOIiycVcl2SIuLBUGArhP4qt OYoKLx/awphSnz7pYP1gBYDnylmfybz1/S5zFtReqKr88kGBmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKitCYfVH7F/r8rKVPQZqXyab92nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZmZiMTM4NWEtZmNmMC0z ZjhlLTkwMTItOTM4ZjQ5OTA5Njg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHTHWk/pOpg1IBweE0RW7b89EBgPuQD1n7uzOWR1U98tzbEh+4Z4Xte sS01eIO0k0gSehjT+oJgpifidsqodtewa7+WlouAYFY7ORLu+thzabaS2Tb4n7n6 Ty03vJRPiz880MDCk9dvwFN1qcXjP1ed4tkHHt1jDgKjlTULg0l5PohbNp8OAX15 PCYTS1J7K2mtd1X+n/XTy+jEgKp1X3D5+N0VgGzFaauPGHFdEvqi6geEWsTydvMF fbSbzJhSRchEm5/A3olrea1jxMJc2hxp/j+EAj4X2/Z5f6CBoCDjCTP3uvareqii Ym0YsR/cJMl7haA30UboMdreB2lNmCc= -----END CERTIFICATE-----Generated at Fri Apr 17 23:41:32 2026 by rpki-client