$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8980512-7775-361d-924e-d23443bde100.roa File: c8980512-7775-361d-924e-d23443bde100.roa (raw, json) Hash identifier: xmjMLz/D5AFwEpAuM2Mo09ydSO4eELwc5wXDB+oVCaA= Subject key identifier: DF:4F:DD:F1:3B:B2:8E:A1:A5:B4:59:21:17:40:22:09:06:D6:83:4E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D93255D0F0C7ECF6BA6CDEE00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8980512-7775-361d-924e-d23443bde100.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:5d:0f:0c:7e:cf:6b:a6:cd:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=bdead170-6b40-455c-af8d-f8292da34f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4f:80:9f:4e:bb:6f:0c:1a:ef:58:75:0f:00: f2:73:91:71:d6:3c:bb:88:cd:a8:12:d3:82:b6:f5: e0:61:9d:9b:40:3e:08:ee:79:c0:12:ed:ca:38:fe: db:f3:3b:4f:19:85:bd:a0:d8:77:da:84:ae:02:3c: ee:93:56:e0:29:c9:92:78:63:21:28:91:31:4f:05: b2:ad:84:2a:c3:f2:b1:49:0f:00:b3:3e:29:3c:3a: fc:62:46:cf:31:b9:49:a5:6b:fb:30:99:38:3d:01: 14:bd:0e:a5:f9:50:04:02:13:5d:45:17:4b:3f:f8: df:53:be:db:cc:3a:6c:1e:a3:09:a8:68:d1:20:a7: aa:5f:32:99:2e:19:78:2c:22:80:f7:a9:3b:f9:e3: 21:92:6e:d7:81:4f:e1:e7:46:1d:d2:b9:4d:e1:75: 3b:10:55:97:3a:74:17:97:93:4c:c3:1d:ed:52:96: cf:cf:20:24:9f:2e:7a:d0:f1:3b:18:23:62:76:c9: e7:98:68:c2:8b:60:d9:4f:39:b5:ba:0d:76:1c:91: b3:87:19:04:88:f2:92:fe:5f:ba:a9:cb:7e:a6:d9: 11:ed:20:84:08:75:6e:a3:0b:21:a1:43:d2:00:11: 75:3e:45:d8:09:f3:7d:50:fb:1a:99:dc:36:2a:46: 32:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4F:DD:F1:3B:B2:8E:A1:A5:B4:59:21:17:40:22:09:06:D6:83:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8980512-7775-361d-924e-d23443bde100.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:27:53:66:04:15:72:0d:1d:04:23:94:af:65:fe:72:12:ac: a9:91:0a:b9:a0:ff:57:f7:10:79:2e:e9:ba:5a:4c:ea:d5:52: 15:d8:38:f3:13:43:d9:81:a2:26:1a:3d:32:af:40:18:82:2a: f5:c8:3b:82:8c:9a:a0:d6:14:37:7d:07:f0:3e:eb:25:80:98: bc:2d:95:ed:aa:cf:e8:74:8e:09:29:75:4d:c7:4c:55:d7:7b: 95:db:cb:c0:5b:bb:9e:bf:4f:d3:2e:af:87:8c:af:72:75:33: dd:46:4d:39:66:de:c7:77:02:1c:78:00:c4:a7:ae:50:3a:f5: 08:18:5b:52:e2:64:59:11:eb:19:52:4e:40:64:e5:18:8e:21: 11:45:76:f8:f9:50:24:c2:4a:a5:33:f8:d4:65:4d:27:8d:6e: 20:16:61:08:89:aa:70:de:89:2a:cf:70:6e:3d:c9:59:9b:96: d3:e7:24:be:72:ce:81:ac:85:ae:e5:8e:fa:cd:5c:1a:7e:53: b2:3b:ab:94:6c:41:8a:39:0a:2d:7f:bc:31:1c:ba:2e:c3:50: 20:5a:e1:ed:c6:20:d4:8d:93:e6:1d:e6:61:be:fb:d4:83:65: f3:4e:1e:19:58:6c:d7:18:b0:a2:c7:ec:67:c8:aa:94:59:1b: 87:ba:f9:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJV0PDH7Pa6bN7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk YmRlYWQxNzAtNmI0MC00NTVjLWFmOGQtZjgyOTJkYTM0Zjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0+An067bwwa71h1DwDyc5Fx1jy7iM2oEtOC tvXgYZ2bQD4I7nnAEu3KOP7b8ztPGYW9oNh32oSuAjzuk1bgKcmSeGMhKJExTwWy rYQqw/KxSQ8Asz4pPDr8YkbPMblJpWv7MJk4PQEUvQ6l+VAEAhNdRRdLP/jfU77b zDpsHqMJqGjRIKeqXzKZLhl4LCKA96k7+eMhkm7XgU/h50Yd0rlN4XU7EFWXOnQX l5NMwx3tUpbPzyAkny560PE7GCNidsnnmGjCi2DZTzm1ug12HJGzhxkEiPKS/l+6 qct+ptkR7SCECHVuowshoUPSABF1PkXYCfN9UPsamdw2KkYyTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9P3fE7so6hpbRZIRdAIgkG1oNOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzg5ODA1MTItNzc3NS0z NjFkLTkyNGUtZDIzNDQzYmRlMTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGonU2YEFXINHQQjlK9l/nISrKmRCrmg/1f3EHku6bpaTOrVUhXYOPMT Q9mBoiYaPTKvQBiCKvXIO4KMmqDWFDd9B/A+6yWAmLwtle2qz+h0jgkpdU3HTFXX e5Xby8Bbu56/T9Mur4eMr3J1M91GTTlm3sd3Ahx4AMSnrlA69QgYW1LiZFkR6xlS TkBk5RiOIRFFdvj5UCTCSqUz+NRlTSeNbiAWYQiJqnDeiSrPcG49yVmbltPnJL5y zoGsha7ljvrNXBp+U7I7q5RsQYo5Ci1/vDEcui7DUCBa4e3GINSNk+Yd5mG++9SD ZfNOHhlYbNcYsKLH7GfIqpRZG4e6+SA= -----END CERTIFICATE-----Generated at Wed Apr 22 01:52:29 2026 by rpki-client