$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/50659308-5102-3fed-ac9a-ec288f3afe84.roa File: 50659308-5102-3fed-ac9a-ec288f3afe84.roa (raw, json) Hash identifier: oskwk82HhM0B4cqhp2ybeBDUAhTCMSdn4ttafEXK+aY= Subject key identifier: 11:C5:1E:8F:38:4A:54:23:14:CC:B0:9A:F0:48:E6:BB:F8:21:4A:9F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D93255D031C7DEC7319E978C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/50659308-5102-3fed-ac9a-ec288f3afe84.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:5d:03:1c:7d:ec:73:19:e9:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=0a7bed09-272b-4e95-9380-bcde5209aea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:31:25:df:a8:b5:3b:4a:7f:9c:48:a8:75:ec: e2:a2:a8:cf:52:1f:31:c1:ba:df:70:a4:fa:10:14: 73:91:6a:78:c7:79:e5:1a:1f:a7:2f:b3:24:0c:d9: 5c:32:db:4c:75:64:20:a5:1b:61:04:8c:4f:68:ba: 7f:f5:21:5b:e7:45:34:6c:bf:96:e4:a0:37:fe:be: d8:74:48:90:24:89:70:b3:9c:10:2a:31:bd:23:71: 15:59:b1:4f:57:7b:52:98:ba:bf:e3:ab:9d:9d:23: 3c:40:d4:35:f0:df:8a:c4:2a:6f:ee:d3:f5:7c:a4: 6d:b6:7b:da:87:53:8d:47:35:34:16:0d:3e:db:b0: 8b:bf:3c:51:4b:55:e0:0d:ab:4a:c3:ba:95:ca:04: 43:41:86:55:f1:8a:ad:b7:81:11:37:ab:c5:d2:d3: 36:29:dc:0f:ad:9e:de:65:5f:7b:52:98:37:04:21: 7b:85:66:2e:19:8f:fd:55:68:1c:e1:09:f4:a0:bb: 0a:57:e3:3f:a6:0e:85:da:ee:38:68:e3:35:7e:ff: e4:74:70:26:41:d2:a3:a1:c9:7b:53:a2:0b:52:1f: a7:b6:0c:64:ba:3f:f1:86:d9:8b:3b:a9:b1:d8:4d: 56:d6:d2:bb:09:be:46:ab:ce:39:fd:a5:a8:ce:89: 54:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C5:1E:8F:38:4A:54:23:14:CC:B0:9A:F0:48:E6:BB:F8:21:4A:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/50659308-5102-3fed-ac9a-ec288f3afe84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:7c:c6:c3:a5:34:a5:2e:15:da:3a:2e:f0:4c:03:e4:65:c7: df:c1:41:fe:d4:ee:cc:3b:99:59:ff:ae:dc:58:a4:26:6a:2c: 2a:ef:67:67:28:d8:39:7a:0f:ec:16:eb:eb:0d:ca:03:6b:59: 3e:02:b6:76:23:8b:4f:2c:54:9b:8e:29:e0:9b:57:87:6b:6e: 46:9e:c0:c7:63:4d:ef:4d:c0:90:91:78:33:81:0f:80:19:39: 7e:50:b5:6c:b3:a1:8a:e8:fd:a7:53:4d:08:e2:f9:66:67:8e: 40:c3:66:2d:bd:d6:4a:92:b0:22:40:94:35:1b:2b:01:6c:48: bd:08:eb:82:be:ac:20:da:cf:0b:ce:65:8b:06:ca:85:2b:49: 86:0c:5e:7a:43:87:a0:a7:7c:81:b4:59:6f:64:19:50:2c:c5: 66:72:56:2a:47:99:c0:fc:91:af:d0:f5:0e:95:3e:21:4d:79: 41:39:dc:ec:a4:62:43:e7:61:be:b9:52:f8:04:56:79:c6:f5: a2:99:dd:4b:1c:d1:d5:e9:53:f4:91:08:84:37:94:24:fe:24: 17:38:0e:28:e4:6e:86:0d:87:dc:d5:eb:99:69:93:6c:92:9e: e1:80:c1:09:ca:45:be:a9:66:a8:0d:f3:1c:f6:1d:4c:8d:2c: 4d:3b:c1:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJV0DHH3scxnpeMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk MGE3YmVkMDktMjcyYi00ZTk1LTkzODAtYmNkZTUyMDlhZWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TEl36i1O0p/nEiodezioqjPUh8xwbrfcKT6 EBRzkWp4x3nlGh+nL7MkDNlcMttMdWQgpRthBIxPaLp/9SFb50U0bL+W5KA3/r7Y dEiQJIlws5wQKjG9I3EVWbFPV3tSmLq/46udnSM8QNQ18N+KxCpv7tP1fKRttnva h1ONRzU0Fg0+27CLvzxRS1XgDatKw7qVygRDQYZV8Yqtt4ERN6vF0tM2KdwPrZ7e ZV97Upg3BCF7hWYuGY/9VWgc4Qn0oLsKV+M/pg6F2u44aOM1fv/kdHAmQdKjocl7 U6ILUh+ntgxkuj/xhtmLO6mx2E1W1tK7Cb5Gq845/aWozolUlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHFHo84SlQjFMywmvBI5rv4IUqfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTA2NTkzMDgtNTEwMi0z ZmVkLWFjOWEtZWMyODhmM2FmZTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKF8xsOlNKUuFdo6LvBMA+Rlx9/BQf7U7sw7mVn/rtxYpCZqLCrvZ2co 2Dl6D+wW6+sNygNrWT4CtnYji08sVJuOKeCbV4drbkaewMdjTe9NwJCReDOBD4AZ OX5QtWyzoYro/adTTQji+WZnjkDDZi291kqSsCJAlDUbKwFsSL0I64K+rCDazwvO ZYsGyoUrSYYMXnpDh6CnfIG0WW9kGVAsxWZyVipHmcD8ka/Q9Q6VPiFNeUE53Oyk YkPnYb65UvgEVnnG9aKZ3Usc0dXpU/SRCIQ3lCT+JBc4DijkboYNh9zV65lpk2yS nuGAwQnKRb6pZqgN8xz2HUyNLE07wT0= -----END CERTIFICATE-----Generated at Wed Apr 22 01:52:22 2026 by rpki-client