$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/20052b8d-9195-30ba-9869-f02f78771f7c.roa File: 20052b8d-9195-30ba-9869-f02f78771f7c.roa (raw, json) Hash identifier: 7MwNz260QMMK/3voSZFLDM+nxALWpNbMdWGK0UKIX/o= Subject key identifier: B6:6B:0E:BA:7F:3B:B4:41:0D:AA:13:02:5D:36:D8:51:A4:20:11:E7 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DB7703941C0173C83EC14F880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/20052b8d-9195-30ba-9869-f02f78771f7c.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 8069 IP address blocks: 20.33.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:39:41:c0:17:3c:83:ec:14:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=c7a160d9-78b0-4a97-bca6-2d7e06a5d686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:79:7e:14:ce:35:0c:c8:cb:cb:0b:9b:58:6e: cc:64:fe:1b:c8:a9:a1:26:be:ef:f5:fc:a6:81:c2: 0b:25:cb:73:08:eb:7e:87:9e:e3:70:11:4c:62:62: ee:fe:11:c2:b4:63:e4:ac:fd:47:1a:2d:03:15:ab: 4c:6c:b1:e6:18:59:f7:0b:42:21:2e:96:13:15:25: 62:12:75:6d:61:c5:b6:b1:f4:49:d2:7c:4e:26:3d: f6:be:a9:cc:d7:ef:95:4b:b0:33:2c:26:b1:1d:9a: 67:b4:e8:f8:99:35:f3:d3:33:d6:c6:f0:6a:c3:20: 7f:7e:29:b1:9b:95:a9:7a:f0:8d:38:9e:27:fb:dd: 70:85:31:44:eb:ed:98:f6:7c:78:46:d1:0e:55:c8: ab:c9:ac:87:c7:4e:c6:aa:07:57:84:6d:1f:71:0a: e0:95:0b:78:f3:63:0d:86:ed:40:98:3f:01:66:b0: 2b:40:0f:67:d4:cd:f1:b7:0b:8f:b9:ad:7a:7d:56: 12:98:83:1c:c7:78:af:76:92:56:8a:a2:b4:13:10: 82:02:69:24:02:0b:a7:09:1b:ab:96:55:11:c3:b8: ee:3a:51:99:20:6b:25:0f:45:24:a3:db:ab:fe:06: 25:22:4c:1e:1b:61:9a:41:58:26:6b:30:8e:14:09: f4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6B:0E:BA:7F:3B:B4:41:0D:AA:13:02:5D:36:D8:51:A4:20:11:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/20052b8d-9195-30ba-9869-f02f78771f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:0a:50:fa:79:03:fc:15:ab:76:ea:a6:79:00:81:2b:6b:c3: 60:e9:0b:dd:83:2a:0a:1a:6d:57:a9:00:fc:85:0e:e3:53:61: 37:fa:fc:32:d9:74:d7:a0:b6:c5:49:8e:56:da:f7:7a:81:c2: f5:0e:ca:9d:a6:fa:e1:2d:9a:ce:a0:96:71:d6:b2:75:51:68: f1:47:28:45:6d:21:a3:ec:9f:8d:59:0a:80:84:c2:a0:06:79: 1f:a9:c0:5b:f5:15:e5:f0:ff:f1:c3:2f:e1:9d:67:ea:cf:16: f0:83:bb:19:73:45:00:5c:f3:97:d6:bb:64:97:cc:10:eb:47: dd:99:0a:d8:68:e5:28:56:68:5e:06:51:db:f8:73:f8:92:5b: a5:68:1f:01:4e:b8:41:27:84:6e:e3:fe:6c:b9:82:39:43:00: 7a:42:ba:1f:6d:a3:e7:1b:52:e2:32:2d:0f:cd:d6:42:ed:93: 22:21:c9:94:6a:3b:03:20:4c:ad:73:07:23:f3:2d:60:a3:36: 46:b2:ad:d5:f5:0d:3f:12:7f:f9:d4:55:6f:0c:c2:6f:0b:cc: 9d:c5:4a:a3:ab:11:97:be:3b:82:e9:3f:bf:67:10:b2:30:d5: 57:30:73:72:26:fb:61:6c:a1:ca:b1:d7:3d:cf:be:2f:6d:2b: 66:89:ab:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cDlBwBc8g+wU+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk YzdhMTYwZDktNzhiMC00YTk3LWJjYTYtMmQ3ZTA2YTVkNjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3l+FM41DMjLywubWG7MZP4byKmhJr7v9fym gcILJctzCOt+h57jcBFMYmLu/hHCtGPkrP1HGi0DFatMbLHmGFn3C0IhLpYTFSVi EnVtYcW2sfRJ0nxOJj32vqnM1++VS7AzLCaxHZpntOj4mTXz0zPWxvBqwyB/fimx m5WpevCNOJ4n+91whTFE6+2Y9nx4RtEOVciryayHx07GqgdXhG0fcQrglQt482MN hu1AmD8BZrArQA9n1M3xtwuPua16fVYSmIMcx3ivdpJWiqK0ExCCAmkkAgunCRur llURw7juOlGZIGslD0Uko9ur/gYlIkweG2GaQVgmazCOFAn0JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZrDrp/O7RBDaoTAl022FGkIBHnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjAwNTJiOGQtOTE5NS0z MGJhLTk4NjktZjAyZjc4NzcxZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcKUPp5A/wVq3bqpnkAgStrw2DpC92DKgoabVepAPyFDuNTYTf6/DLZ dNegtsVJjlba93qBwvUOyp2m+uEtms6glnHWsnVRaPFHKEVtIaPsn41ZCoCEwqAG eR+pwFv1FeXw//HDL+GdZ+rPFvCDuxlzRQBc85fWu2SXzBDrR92ZCtho5ShWaF4G Udv4c/iSW6VoHwFOuEEnhG7j/my5gjlDAHpCuh9to+cbUuIyLQ/N1kLtkyIhyZRq OwMgTK1zByPzLWCjNkayrdX1DT8Sf/nUVW8Mwm8LzJ3FSqOrEZe+O4LpP79nELIw 1Vcwc3Im+2Fsocqx1z3Pvi9tK2aJqyg= -----END CERTIFICATE-----Generated at Wed May 13 15:54:53 2026 by rpki-client