$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4dd409f5-81c8-3feb-986f-28c676a7eb94.roa File: 4dd409f5-81c8-3feb-986f-28c676a7eb94.roa (raw, json) Hash identifier: sfaT0Dk4gMakheFahDQmO0JJ8xVrRmPlqvn7u/r3G1c= Subject key identifier: 1E:30:30:EE:4A:89:19:C2:8C:1E:A7:B0:71:78:42:44:C9:FD:03:41 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D93255D277414E2F11F438680 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4dd409f5-81c8-3feb-986f-28c676a7eb94.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:5d:27:74:14:e2:f1:1f:43:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=e80a43d2-1613-4f75-822b-168c4db8ed64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:26:b0:f8:c3:50:2d:db:0e:34:88:7c:ab:31: 56:a9:fe:3b:90:21:30:c3:0f:7e:c2:52:a2:1f:c6: bf:84:a5:fb:5e:64:60:7a:f2:40:cc:ab:6b:9a:8a: f6:f8:a3:5d:61:48:7d:f1:bb:6f:96:9a:bd:14:0e: c8:8e:ad:20:02:49:22:40:c6:d6:6a:a9:39:22:d7: dd:07:03:57:12:cc:e3:bb:ee:04:46:b3:23:05:dc: f6:c1:30:0c:08:11:4d:19:c9:e4:5e:4a:fe:10:ff: 9c:4b:bd:bd:54:dc:b4:42:2d:09:96:d2:84:21:14: ab:f8:8c:7e:c3:d3:ca:ee:fe:e6:5a:ca:e0:97:39: 8d:2b:36:95:d3:af:a7:dd:dc:91:af:5d:b2:f9:14: 2d:b4:8c:af:66:34:ec:2b:5c:a0:01:ff:98:35:9f: 86:8a:93:bb:44:9d:2d:12:6d:be:23:eb:fc:f5:97: 3e:82:a4:d9:dd:20:ba:51:32:83:7a:8a:90:12:cd: 5b:3a:55:8d:17:f4:59:62:0a:67:0e:b6:64:3d:32: 97:6b:2f:3d:9b:24:da:a3:c7:ab:38:6f:aa:65:a3: 7b:b5:5a:bf:31:80:08:26:e6:2f:b4:49:3d:f6:be: f8:bc:15:ce:e9:5b:8a:34:d6:1e:13:bd:e6:b5:55: 13:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:30:30:EE:4A:89:19:C2:8C:1E:A7:B0:71:78:42:44:C9:FD:03:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4dd409f5-81c8-3feb-986f-28c676a7eb94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ba:7a:51:ae:52:f3:13:86:c1:f2:3e:14:0a:6f:ea:db:96: 71:f7:07:48:39:40:30:e9:8c:83:5f:d1:f7:28:df:c5:9c:59: a0:39:47:69:7c:c6:1d:dc:25:9e:48:3c:b1:b9:41:8c:f9:d6: 79:cf:b1:a1:65:2f:21:c6:c2:10:d7:b8:38:04:82:b3:11:93: 7e:02:bf:f1:83:90:4a:6a:1c:80:55:6c:a9:ab:55:45:80:2f: a1:fd:3f:9e:f4:d9:9d:65:1c:29:b9:97:4a:10:c6:d9:17:01: 0e:e2:cd:63:da:6c:2a:c3:22:42:90:13:c1:96:f4:a8:da:95: e7:a8:05:7a:92:da:c6:d5:d5:f1:86:b8:e1:90:f3:ee:a2:bc: f8:02:e5:7a:16:89:bf:8b:77:5a:5c:a2:f0:71:d4:08:ab:40: d0:59:c7:5f:c4:20:c2:82:dc:f3:0b:d8:48:7e:26:a1:55:2d: 11:b1:80:ef:ba:3c:df:50:9f:b2:30:e0:c4:d4:e3:c2:24:2b: c3:88:96:62:47:0a:8e:38:c8:b3:4d:ee:d1:5e:8c:dd:81:65: b8:da:40:9a:e5:94:2d:6c:2a:39:12:1c:06:fd:8e:19:20:33: 0f:b1:0a:96:1e:d2:1a:7e:3f:68:45:7b:09:f0:65:ce:ac:38: 8c:37:c0:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJV0ndBTi8R9DhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk ZTgwYTQzZDItMTYxMy00Zjc1LTgyMmItMTY4YzRkYjhlZDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCaw+MNQLdsONIh8qzFWqf47kCEwww9+wlKi H8a/hKX7XmRgevJAzKtrmor2+KNdYUh98btvlpq9FA7Ijq0gAkkiQMbWaqk5Itfd BwNXEszju+4ERrMjBdz2wTAMCBFNGcnkXkr+EP+cS729VNy0Qi0JltKEIRSr+Ix+ w9PK7v7mWsrglzmNKzaV06+n3dyRr12y+RQttIyvZjTsK1ygAf+YNZ+GipO7RJ0t Em2+I+v89Zc+gqTZ3SC6UTKDeoqQEs1bOlWNF/RZYgpnDrZkPTKXay89myTao8er OG+qZaN7tVq/MYAIJuYvtEk99r74vBXO6VuKNNYeE73mtVUTAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4wMO5KiRnCjB6nsHF4QkTJ/QNBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGRkNDA5ZjUtODFjOC0z ZmViLTk4NmYtMjhjNjc2YTdlYjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADm6elGuUvMThsHyPhQKb+rblnH3B0g5QDDpjINf0fco38WcWaA5R2l8 xh3cJZ5IPLG5QYz51nnPsaFlLyHGwhDXuDgEgrMRk34Cv/GDkEpqHIBVbKmrVUWA L6H9P5702Z1lHCm5l0oQxtkXAQ7izWPabCrDIkKQE8GW9KjaleeoBXqS2sbV1fGG uOGQ8+6ivPgC5XoWib+Ld1pcovBx1AirQNBZx1/EIMKC3PML2Eh+JqFVLRGxgO+6 PN9Qn7Iw4MTU48IkK8OIlmJHCo44yLNN7tFejN2BZbjaQJrllC1sKjkSHAb9jhkg Mw+xCpYe0hp+P2hFewnwZc6sOIw3wF4= -----END CERTIFICATE-----Generated at Wed Apr 22 03:04:06 2026 by rpki-client