$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/139a9492-65e1-3f75-ab00-d84e01d973d7.roa File: 139a9492-65e1-3f75-ab00-d84e01d973d7.roa (raw, json) Hash identifier: Q5H54ZB8H+ta9BQt4Us2Fr6YBgAsa64ezaC1Numm58w= Subject key identifier: D7:C7:42:E8:53:A7:DD:24:D5:4C:C8:24:83:B9:0F:DC:0C:7E:16:59 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D44FA4EF9E706A76FD164A580 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/139a9492-65e1-3f75-ab00-d84e01d973d7.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.33.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:4e:f9:e7:06:a7:6f:d1:64:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=e2278a2b-883a-4501-8e3f-2bdfb4840047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fe:99:e3:e7:40:1f:0d:87:9c:77:3b:ff:c2: bf:cb:aa:30:7b:5d:91:a1:1b:f2:d0:3c:e9:e2:c8: 0d:cc:46:96:50:9a:a7:97:df:18:81:af:ac:9f:1e: 3f:50:bc:6e:bc:b1:d8:8e:31:59:91:00:0a:63:ee: 72:14:5f:ea:62:2e:51:83:c7:b0:ba:10:e6:c9:bb: 9e:81:36:b7:5c:12:86:0a:17:2c:b4:cc:e6:69:ab: f0:89:3a:55:39:ae:a2:71:df:f2:49:2b:ca:dd:51: 21:26:98:39:86:bb:b4:0f:c2:08:f5:b2:09:aa:77: 4f:19:49:36:f8:82:38:9d:4c:70:66:35:37:5e:79: 82:f2:0a:fb:1a:a8:5a:c8:ea:f8:cc:fe:8c:ed:35: 92:43:58:ec:53:87:b8:b6:43:bb:f8:76:e2:c1:9c: a0:a4:1e:4c:da:4a:7c:64:6e:bc:7b:a8:f5:21:d6: 5f:12:cc:ef:cc:93:8a:55:f0:f5:f2:0b:d3:b3:28: fb:bf:9d:a4:1a:ec:b1:29:e1:e9:02:3a:67:3f:23: 65:b0:24:52:9d:e6:67:aa:8e:ca:e2:2f:55:1b:81: e9:a9:c2:e5:f1:55:0a:66:3a:64:71:47:2c:24:31: 90:e4:ae:18:de:5c:e2:70:9e:ba:6d:a9:99:fb:d4: b9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C7:42:E8:53:A7:DD:24:D5:4C:C8:24:83:B9:0F:DC:0C:7E:16:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/139a9492-65e1-3f75-ab00-d84e01d973d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:71:7a:8e:1f:98:ff:08:a1:aa:51:e9:16:21:d6:ff:4b:d6: fb:5a:8c:8b:3d:eb:34:04:e2:b0:f3:9e:ea:6e:ef:fe:f5:35: b7:bb:11:1c:25:c9:1b:3c:32:96:9f:84:bb:8c:37:c9:88:74: 87:28:a7:75:80:10:85:4e:86:3b:69:55:00:5f:5e:b7:44:a1: 81:ae:2c:cf:8c:32:09:da:69:b1:51:b8:4e:71:f1:3e:52:23: a5:ab:ea:65:0d:bf:3b:62:d2:ee:22:70:de:b6:5e:b5:76:d7: 29:ff:33:9a:fd:50:57:2b:dd:15:4e:33:e3:42:86:1a:6a:b2: 3e:f3:0e:3e:ba:29:ee:97:83:46:bf:29:de:23:de:c8:ab:b2: ab:27:21:a4:08:79:12:47:97:cd:1a:dc:c6:9e:be:4e:18:ee: 1b:6a:0e:0d:b9:71:f7:cb:d9:43:7e:94:34:d0:58:42:73:e7: fc:73:92:03:5a:39:90:55:ca:5c:ca:29:56:6b:98:5d:3d:94: 5f:ed:47:a8:23:8f:48:d2:6a:a6:a6:c2:12:e9:9d:1a:c9:cd: ec:f3:39:dc:0d:db:b5:2f:02:ad:a6:0d:3d:32:d8:d9:32:21: e6:e9:bd:26:1d:2c:b4:c6:24:15:57:88:fa:36:79:8d:48:b1: 7e:a4:21:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+k755wanb9FkpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZTIyNzhhMmItODgzYS00NTAxLThlM2YtMmJkZmI0ODQwMDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/6Z4+dAHw2HnHc7/8K/y6owe12RoRvy0Dzp 4sgNzEaWUJqnl98Yga+snx4/ULxuvLHYjjFZkQAKY+5yFF/qYi5Rg8ewuhDmybue gTa3XBKGChcstMzmaavwiTpVOa6icd/ySSvK3VEhJpg5hru0D8II9bIJqndPGUk2 +II4nUxwZjU3XnmC8gr7GqhayOr4zP6M7TWSQ1jsU4e4tkO7+HbiwZygpB5M2kp8 ZG68e6j1IdZfEszvzJOKVfD18gvTsyj7v52kGuyxKeHpAjpnPyNlsCRSneZnqo7K 4i9VG4HpqcLl8VUKZjpkcUcsJDGQ5K4Y3lzicJ66bamZ+9S5yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfHQuhTp90k1UzIJIO5D9wMfhZZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTM5YTk0OTItNjVlMS0z Zjc1LWFiMDAtZDg0ZTAxZDk3M2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdxeo4fmP8IoapR6RYh1v9L1vtajIs96zQE4rDznupu7/71Nbe7ERwl yRs8MpafhLuMN8mIdIcop3WAEIVOhjtpVQBfXrdEoYGuLM+MMgnaabFRuE5x8T5S I6Wr6mUNvzti0u4icN62XrV21yn/M5r9UFcr3RVOM+NChhpqsj7zDj66Ke6Xg0a/ Kd4j3sirsqsnIaQIeRJHl80a3Maevk4Y7htqDg25cffL2UN+lDTQWEJz5/xzkgNa OZBVylzKKVZrmF09lF/tR6gjj0jSaqamwhLpnRrJzezzOdwN27UvAq2mDT0y2Nky IebpvSYdLLTGJBVXiPo2eY1IsX6kIWs= -----END CERTIFICATE-----Generated at Thu Mar 26 20:05:33 2026 by rpki-client