$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8a8728a-6384-37c5-8183-84d8806052ce.roa File: c8a8728a-6384-37c5-8183-84d8806052ce.roa (raw, json) Hash identifier: AC+c/rsSjQxDUxr2ZpG6NKn5z0ld9h0+pD+tBre7s/A= Subject key identifier: 59:A7:E1:5B:38:92:54:BB:1C:C5:0C:C3:82:47:29:4C:44:E9:15:5D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D93255D1AFEE2185769C22900 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8a8728a-6384-37c5-8183-84d8806052ce.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:5d:1a:fe:e2:18:57:69:c2:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=e050e40e-fff8-42c5-9403-0ff94221a670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:72:f8:b3:a1:d1:50:0d:4c:35:e3:3f:2c:79: 47:ee:7b:01:78:42:c0:22:ad:65:7a:c7:12:6f:aa: b2:29:9e:29:40:67:88:71:b4:bc:a6:25:a8:d8:76: 03:9e:6c:ff:15:ef:7e:97:96:9a:ae:70:d9:a5:cd: c5:ef:ef:2a:3b:e0:a0:2c:01:f8:2a:6e:6e:80:fe: 02:1f:24:75:3f:df:a3:8d:da:4d:b3:f1:9f:d9:0d: 47:33:c5:fe:1a:fc:52:d8:12:c7:f8:d8:54:87:85: 97:9a:6a:cd:fd:e6:6e:d5:f7:81:b9:b3:7a:38:18: f6:ab:ed:00:75:e7:12:3c:8c:be:b9:9f:ab:79:55: a2:1f:e4:89:fd:7b:91:2b:58:ca:a4:72:85:28:e7: 17:f6:f0:94:07:ae:b3:cc:df:88:21:d4:68:d1:49: 91:4f:a7:2c:f6:30:a9:c6:01:23:14:fd:87:52:91: 42:05:6b:4d:4b:f0:24:85:4e:3c:e5:57:09:ce:23: 47:dd:e2:a7:08:d8:35:3d:4f:c9:1c:99:0f:aa:b3: 79:6e:1d:33:2f:07:24:f9:aa:72:61:ef:bc:e4:14: 66:a4:04:33:be:80:5b:db:0e:37:53:c0:6d:a1:8f: f6:ad:e4:6d:5a:2f:ce:76:d2:79:a1:00:fc:16:20: 89:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A7:E1:5B:38:92:54:BB:1C:C5:0C:C3:82:47:29:4C:44:E9:15:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8a8728a-6384-37c5-8183-84d8806052ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:0c:23:16:83:b5:5d:3c:46:85:df:c2:a6:cd:25:16:b3:61: 0a:0f:3a:c7:18:13:b3:30:e2:7e:1c:3d:87:02:2d:0e:f5:fa: b0:94:4b:e6:d4:39:90:2f:1a:d9:6e:7e:9e:87:62:3f:b4:81: e5:04:76:8f:f2:9b:e0:3b:d2:b5:1b:24:8b:a4:07:69:c2:9a: 3c:eb:a0:2a:65:5d:d1:9b:fe:f2:09:d2:c1:f5:0f:fc:e8:34: d5:7d:1f:41:0a:97:4d:b9:db:dd:51:a6:bb:71:b6:97:c6:f0: 1e:fe:01:1e:00:9b:64:0d:d0:d2:3e:a6:e4:ab:8c:88:b2:11: 69:ee:46:9c:a4:aa:be:b5:eb:4e:e9:13:ef:9b:a1:e2:1b:e7: 64:af:80:ad:da:63:fa:0d:e4:fa:9b:33:b9:dd:9a:32:4c:92: 10:aa:fc:14:cb:36:8a:de:ce:6d:ad:76:d0:23:c4:14:98:24: 6a:23:ee:9c:2e:37:e2:49:fe:a7:26:bc:fa:07:53:5f:69:72: bd:12:2f:f4:4d:f8:f4:0d:40:9e:3b:94:bc:4e:e5:0c:a8:4b: 94:07:2f:9d:a3:4f:cb:c0:c8:b7:9c:2e:e4:7a:68:28:db:dc: 1d:3d:24:ce:6f:3c:cb:71:a4:90:21:f0:c5:d6:8a:4d:6e:60: 6c:93:b3:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJV0a/uIYV2nCKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk ZTA1MGU0MGUtZmZmOC00MmM1LTk0MDMtMGZmOTQyMjFhNjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHL4s6HRUA1MNeM/LHlH7nsBeELAIq1lescS b6qyKZ4pQGeIcbS8piWo2HYDnmz/Fe9+l5aarnDZpc3F7+8qO+CgLAH4Km5ugP4C HyR1P9+jjdpNs/Gf2Q1HM8X+GvxS2BLH+NhUh4WXmmrN/eZu1feBubN6OBj2q+0A decSPIy+uZ+reVWiH+SJ/XuRK1jKpHKFKOcX9vCUB66zzN+IIdRo0UmRT6cs9jCp xgEjFP2HUpFCBWtNS/AkhU485VcJziNH3eKnCNg1PU/JHJkPqrN5bh0zLwck+apy Ye+85BRmpAQzvoBb2w43U8BtoY/2reRtWi/OdtJ5oQD8FiCJcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmn4Vs4klS7HMUMw4JHKUxE6RVdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzhhODcyOGEtNjM4NC0z N2M1LTgxODMtODRkODgwNjA1MmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8MIxaDtV08RoXfwqbNJRazYQoPOscYE7Mw4n4cPYcCLQ71+rCUS+bU OZAvGtlufp6HYj+0geUEdo/ym+A70rUbJIukB2nCmjzroCplXdGb/vIJ0sH1D/zo NNV9H0EKl025291RprtxtpfG8B7+AR4Am2QN0NI+puSrjIiyEWnuRpykqr61607p E++boeIb52SvgK3aY/oN5PqbM7ndmjJMkhCq/BTLNorezm2tdtAjxBSYJGoj7pwu N+JJ/qcmvPoHU19pcr0SL/RN+PQNQJ47lLxO5QyoS5QHL52jT8vAyLecLuR6aCjb 3B09JM5vPMtxpJAh8MXWik1uYGyTs8A= -----END CERTIFICATE-----Generated at Wed Apr 22 01:50:25 2026 by rpki-client