$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9256e928-9e7a-395f-a0ec-b2e0c6ac0b84.roa File: 9256e928-9e7a-395f-a0ec-b2e0c6ac0b84.roa (raw, json) Hash identifier: P/K1FVpTA9NtRj4k5t64yYsM60QV+ZhqXNyakMrPdEk= Subject key identifier: 32:9B:D3:98:2F:37:76:AA:34:FD:86:22:B3:AA:6B:51:1F:6F:AF:45 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D93255CEB420BC905C9D3B380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9256e928-9e7a-395f-a0ec-b2e0c6ac0b84.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:5c:eb:42:0b:c9:05:c9:d3:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=f40d3ab3-d0bc-4ed5-970a-7463d88567b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:91:78:31:7d:32:82:c8:e5:d5:e7:3d:53:b8: 37:11:4a:57:81:71:0c:29:69:27:c0:a1:0d:f1:1b: 1c:e6:67:a8:db:3d:6f:3f:b6:5a:af:9f:28:8f:c0: 79:1c:ff:86:5b:81:3b:99:5e:1c:ba:84:19:4c:99: f6:74:3a:a2:41:44:71:3a:14:76:5b:43:15:05:c5: 94:6b:5d:c5:f8:17:e4:af:95:db:10:92:2c:5a:71: 46:10:93:60:b9:31:aa:8f:ae:85:68:16:26:83:2e: 00:67:f2:3f:02:4c:ea:8c:3e:74:39:0a:9d:5b:04: 95:09:1c:bb:29:1a:c7:1b:e1:c2:32:35:37:ed:30: b1:c1:54:a5:74:94:d4:24:ad:5d:3b:c4:b5:a4:98: 22:ea:eb:e4:c8:11:f6:0e:9d:68:56:56:0f:87:e8: 50:0a:e5:da:14:c9:f6:f2:c2:0e:6f:6c:1e:2f:7c: 36:fb:86:cc:f0:e7:ff:f0:5a:be:e0:00:68:0b:9c: c1:d2:0b:a9:34:f7:b5:c8:85:ba:35:a1:5c:5b:19: 0e:42:5f:7d:74:8e:8d:0a:96:54:66:7a:71:3a:81: 75:9c:cc:b7:2d:fe:92:8e:be:12:ab:42:c7:71:f7: eb:7e:01:be:8c:26:70:60:5f:0f:8b:e3:63:9f:ae: 9f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9B:D3:98:2F:37:76:AA:34:FD:86:22:B3:AA:6B:51:1F:6F:AF:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9256e928-9e7a-395f-a0ec-b2e0c6ac0b84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:f9:44:b2:c9:4a:df:1f:0c:b9:42:47:c6:cd:a3:f3:b2:e6: 29:5e:c4:d0:91:88:7e:07:55:2c:6e:93:36:a4:58:99:86:45: 9a:9a:75:bb:d8:d8:17:80:fe:6d:6e:17:d4:85:56:c2:09:a3: 73:17:9a:c5:00:26:d6:85:39:dd:86:e3:6a:83:d8:47:09:76: 35:ac:c2:e7:ac:41:bf:19:78:f2:49:2f:f0:ec:6b:f9:33:c8: 89:00:83:a5:c0:8c:72:5b:23:c2:6e:d5:6f:e7:fb:6a:04:b3: 9f:b1:ef:43:7d:82:b4:20:3b:8b:dd:fe:ad:7a:81:0f:25:8c: f5:cc:fa:04:6a:59:ad:a0:9b:f9:46:9a:94:5d:d9:98:c2:74: 8c:36:92:a4:8b:37:1f:f3:00:5b:19:c3:5d:5e:86:8c:6e:82: b4:a0:df:d2:c7:a8:ea:8b:c1:18:ca:50:6f:93:4c:4f:72:80: 37:6d:42:44:4d:8c:bc:96:85:2c:c8:8b:54:f8:01:45:18:fd: 2f:2d:79:57:0e:00:87:1c:e2:4a:36:84:59:08:52:af:13:99: fb:b1:54:ed:eb:0a:00:d7:7c:c7:93:ed:0d:d5:58:69:3e:d1: a3:4c:06:c8:1f:d0:d9:e8:20:68:23:3c:98:87:b3:8a:d0:22: 4c:0b:85:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJVzrQgvJBcnTs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk ZjQwZDNhYjMtZDBiYy00ZWQ1LTk3MGEtNzQ2M2Q4ODU2N2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJF4MX0ygsjl1ec9U7g3EUpXgXEMKWknwKEN 8Rsc5meo2z1vP7Zar58oj8B5HP+GW4E7mV4cuoQZTJn2dDqiQURxOhR2W0MVBcWU a13F+Bfkr5XbEJIsWnFGEJNguTGqj66FaBYmgy4AZ/I/AkzqjD50OQqdWwSVCRy7 KRrHG+HCMjU37TCxwVSldJTUJK1dO8S1pJgi6uvkyBH2Dp1oVlYPh+hQCuXaFMn2 8sIOb2weL3w2+4bM8Of/8Fq+4ABoC5zB0gupNPe1yIW6NaFcWxkOQl99dI6NCpZU ZnpxOoF1nMy3Lf6Sjr4Sq0LHcffrfgG+jCZwYF8Pi+Njn66fowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKb05gvN3aqNP2GIrOqa1Efb69FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTI1NmU5MjgtOWU3YS0z OTVmLWEwZWMtYjJlMGM2YWMwYjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCElMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABn5RLLJSt8fDLlCR8bNo/Oy5ilexNCRiH4HVSxukzakWJmGRZqadbvY 2BeA/m1uF9SFVsIJo3MXmsUAJtaFOd2G42qD2EcJdjWswuesQb8ZePJJL/Dsa/kz yIkAg6XAjHJbI8Ju1W/n+2oEs5+x70N9grQgO4vd/q16gQ8ljPXM+gRqWa2gm/lG mpRd2ZjCdIw2kqSLNx/zAFsZw11ehoxugrSg39LHqOqLwRjKUG+TTE9ygDdtQkRN jLyWhSzIi1T4AUUY/S8teVcOAIcc4ko2hFkIUq8TmfuxVO3rCgDXfMeT7Q3VWGk+ 0aNMBsgf0NnoIGgjPJiHs4rQIkwLhfE= -----END CERTIFICATE-----Generated at Wed Apr 22 01:49:54 2026 by rpki-client