$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/acaf306a-f973-3686-b377-298a76888713.roa File: acaf306a-f973-3686-b377-298a76888713.roa (raw, json) Hash identifier: 0YCrf8VJwab1f198wIbPqJ90oSaGYf+fyMyKTV/0bnU= Subject key identifier: 4C:39:48:C7:18:BF:51:DA:A1:8C:62:8C:74:90:4F:57:1C:E9:7D:DF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D93255CF7300745F6A574B2C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/acaf306a-f973-3686-b377-298a76888713.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:5c:f7:30:07:45:f6:a5:74:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=c26813f4-fdb4-4a3b-b118-86649bfc4aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d1:00:4d:37:1c:39:15:b2:ca:78:6c:17:4e: c2:79:35:b6:36:02:93:cc:40:b7:d5:d9:38:59:9a: 80:6e:bf:de:25:46:ac:0b:86:53:57:62:89:2b:a1: 65:2b:64:05:cc:52:ba:7c:11:11:19:1a:e4:53:5d: 4e:c2:22:74:14:95:47:67:43:93:af:57:f0:98:e0: f5:29:49:6d:76:cb:1b:b5:10:14:8c:4f:83:1b:3c: 37:50:c7:8e:a1:a0:a0:86:f0:ce:4d:3a:5c:db:4b: 8a:7a:d8:4d:67:26:5a:45:1f:10:8d:6d:a4:f6:5f: c9:1d:05:33:46:8e:88:6b:be:a4:91:54:a3:0e:6a: 7f:c9:f8:a6:95:04:99:7b:89:ad:10:61:c3:d8:e5: dc:54:60:8c:27:93:cf:06:81:7d:e7:06:f1:aa:78: 3a:12:a7:7f:68:ab:b1:48:e4:68:03:57:f7:2f:63: 59:6b:ba:30:4a:45:56:2c:43:77:60:e5:77:54:8e: 3b:76:50:7e:e0:de:90:a3:a1:71:a4:6c:af:cf:7d: d3:1c:e4:1e:5c:2e:2e:dc:6c:a4:d2:52:1c:46:c7: 3a:44:59:2f:76:9e:ec:84:5e:e5:73:23:75:ad:fd: a6:79:5f:50:be:f3:cd:84:bc:0e:8e:e3:4a:48:f3: eb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:39:48:C7:18:BF:51:DA:A1:8C:62:8C:74:90:4F:57:1C:E9:7D:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/acaf306a-f973-3686-b377-298a76888713.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:7a:7c:4e:d5:99:e8:e7:8e:8f:6c:96:4e:61:90:7d:3c:e6: 42:54:07:8f:f7:2b:49:e7:49:25:d7:f4:6e:5a:1c:54:62:e8: 25:51:08:39:67:82:76:1c:f6:dc:de:57:9d:07:c5:52:1b:88: ef:f4:16:1a:45:27:4c:fa:7e:aa:b7:50:3f:a4:17:85:ce:83: 58:41:7b:90:ea:cd:52:7a:10:35:e2:e1:6c:f0:5e:94:39:31: 3a:d9:4f:2f:1b:e5:d0:82:5d:c7:0f:bb:c8:d1:79:d0:1f:39: 07:c1:b6:7f:76:6e:95:ec:f6:fa:6c:5c:64:88:3f:e5:5d:ad: c9:ec:28:4f:8d:d6:76:27:2f:3b:55:30:24:3c:99:2a:17:9a: 1c:e5:f6:8d:22:75:63:8e:73:5f:9f:ad:68:09:2f:81:a6:a2: 4c:0e:7f:ee:21:5a:ef:9c:9a:41:87:cb:f4:d6:03:45:74:91: 1c:8b:5b:19:ef:a2:1f:dc:76:2a:ff:b7:26:20:3d:86:a8:94: 06:bf:23:db:72:99:4d:33:ab:59:9b:74:e1:7d:82:7f:0b:46: 6a:ff:52:bb:9a:f4:a3:cd:d7:70:96:9a:51:9f:eb:ee:ad:07: b2:a4:c7:bf:9b:3a:47:3f:af:86:c6:06:ce:70:61:63:57:23: 6c:7d:6d:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJVz3MAdF9qV0ssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk YzI2ODEzZjQtZmRiNC00YTNiLWIxMTgtODY2NDliZmM0YWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntEATTccORWyynhsF07CeTW2NgKTzEC31dk4 WZqAbr/eJUasC4ZTV2KJK6FlK2QFzFK6fBERGRrkU11OwiJ0FJVHZ0OTr1fwmOD1 KUltdssbtRAUjE+DGzw3UMeOoaCghvDOTTpc20uKethNZyZaRR8QjW2k9l/JHQUz Ro6Ia76kkVSjDmp/yfimlQSZe4mtEGHD2OXcVGCMJ5PPBoF95wbxqng6Eqd/aKux SORoA1f3L2NZa7owSkVWLEN3YOV3VI47dlB+4N6Qo6FxpGyvz33THOQeXC4u3Gyk 0lIcRsc6RFkvdp7shF7lcyN1rf2meV9QvvPNhLwOjuNKSPPrNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEw5SMcYv1HaoYxijHSQT1cc6X3fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWNhZjMwNmEtZjk3My0z Njg2LWIzNzctMjk4YTc2ODg4NzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEl6fE7Vmejnjo9slk5hkH085kJUB4/3K0nnSSXX9G5aHFRi6CVRCDln gnYc9tzeV50HxVIbiO/0FhpFJ0z6fqq3UD+kF4XOg1hBe5DqzVJ6EDXi4WzwXpQ5 MTrZTy8b5dCCXccPu8jRedAfOQfBtn92bpXs9vpsXGSIP+VdrcnsKE+N1nYnLztV MCQ8mSoXmhzl9o0idWOOc1+frWgJL4GmokwOf+4hWu+cmkGHy/TWA0V0kRyLWxnv oh/cdir/tyYgPYaolAa/I9tymU0zq1mbdOF9gn8LRmr/Urua9KPN13CWmlGf6+6t B7Kkx7+bOkc/r4bGBs5wYWNXI2x9bdE= -----END CERTIFICATE-----Generated at Wed Apr 22 01:52:20 2026 by rpki-client