$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/23b75267-e060-3ff2-ab61-3a6b5a13ee1d.roa File: 23b75267-e060-3ff2-ab61-3a6b5a13ee1d.roa (raw, json) Hash identifier: F6RQkMf83i8Rn74+Oz/ijFxJX2MSS0g6caZhPQc/jsM= Subject key identifier: C2:09:19:C4:91:23:1D:BD:AF:27:31:B9:74:FC:01:A2:9C:52:C9:21 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D975566F2BF1E5FBAC1509580 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/23b75267-e060-3ff2-ab61-3a6b5a13ee1d.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 8069 IP address blocks: 20.33.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:66:f2:bf:1e:5f:ba:c1:50:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=5193c0e5-1e7a-42de-9067-fe6cdc8a03f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:00:6b:20:1c:5a:f7:37:b2:1f:9b:f1:58:81: 03:ee:18:ac:f3:12:7c:06:f2:1e:cb:ce:2f:22:22: 5a:62:9c:51:ef:33:08:10:8e:a6:9f:8e:fe:fc:24: 6b:bb:ae:2b:c5:8b:2e:e1:08:c0:53:95:8b:d9:41: b1:bf:e1:49:09:5f:5a:7d:81:03:e7:31:18:0b:a0: 57:de:d7:9c:04:d1:b5:c9:fd:77:12:d2:a7:e0:6f: 4a:66:97:63:d9:08:3e:01:d6:df:d9:36:fd:22:ba: b5:bb:ff:f1:05:8d:dd:5c:cf:ae:7a:56:c0:ee:f8: 32:a3:12:9c:92:a5:c0:bd:e0:55:b2:fb:76:d3:a9: 7a:b2:24:31:a9:45:3b:56:86:76:e2:22:29:30:aa: e8:7e:19:a1:c8:27:a4:76:d6:c7:e0:87:76:4f:17: 93:86:ff:a7:11:7a:57:30:ce:03:cd:bf:5b:e4:fa: 81:84:ac:ec:9d:f4:03:5d:e0:31:d8:ee:ff:e9:5a: b6:44:fe:0d:3f:26:68:86:94:7c:fe:54:53:b3:fe: 37:d8:ed:c9:52:7d:5d:e1:7b:0c:63:1e:02:47:8f: 9b:57:94:5c:d3:92:29:88:2c:bf:d0:ce:fe:f0:54: 3c:b2:7c:2b:40:54:2b:a0:23:66:59:e7:c8:14:c5: bc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:09:19:C4:91:23:1D:BD:AF:27:31:B9:74:FC:01:A2:9C:52:C9:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/23b75267-e060-3ff2-ab61-3a6b5a13ee1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:6a:31:55:5e:98:eb:c5:ca:52:76:39:53:de:9c:57:f5:42: d8:40:3b:35:fa:d0:91:1e:00:98:64:12:3d:ac:b8:47:6d:db: e5:70:67:fa:58:4c:a5:85:02:ee:03:f0:4e:53:08:91:c3:c0: 7f:81:b7:2e:c1:97:90:ce:e5:44:d7:04:db:4a:52:4b:36:9d: 90:3e:11:a1:69:50:49:8c:7b:c9:b1:58:17:ff:90:26:69:26: 10:b8:75:af:f5:93:48:8c:5e:71:bb:87:34:06:70:23:29:1f: 09:2b:c3:62:4c:9e:3a:ab:e9:64:9e:fa:8a:34:5d:93:c4:80: 72:b8:17:fb:a4:81:5c:f9:91:a0:f3:8c:33:13:38:d3:81:ce: 74:58:51:67:fd:1c:61:43:8e:fb:b2:81:d3:4a:84:60:2a:2b: 6b:b3:cb:c5:3a:de:37:10:40:ae:de:c1:ae:44:06:0f:79:31: 03:4b:5f:dc:eb:d6:2e:84:2d:a5:fd:4f:94:77:67:46:de:7c: a7:17:0e:ad:bf:c5:2b:e6:19:92:79:22:02:58:c3:e8:42:0c: ea:78:33:2b:35:f2:d6:86:55:80:05:22:8a:e8:c5:ea:61:1c: dc:3d:60:6b:a0:43:dd:11:ac:6e:a0:ff:05:0d:4e:4f:90:d3: 6c:57:f4:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XVWbyvx5fusFQlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk NTE5M2MwZTUtMWU3YS00MmRlLTkwNjctZmU2Y2RjOGEwM2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQBrIBxa9zeyH5vxWIED7his8xJ8BvIey84v IiJaYpxR7zMIEI6mn47+/CRru64rxYsu4QjAU5WL2UGxv+FJCV9afYED5zEYC6BX 3tecBNG1yf13EtKn4G9KZpdj2Qg+Adbf2Tb9Irq1u//xBY3dXM+uelbA7vgyoxKc kqXAveBVsvt206l6siQxqUU7VoZ24iIpMKrofhmhyCekdtbH4Id2TxeThv+nEXpX MM4Dzb9b5PqBhKzsnfQDXeAx2O7/6Vq2RP4NPyZohpR8/lRTs/432O3JUn1d4XsM Yx4CR4+bV5Rc05IpiCy/0M7+8FQ8snwrQFQroCNmWefIFMW8BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIJGcSRIx29rycxuXT8AaKcUskhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjNiNzUyNjctZTA2MC0z ZmYyLWFiNjEtM2E2YjVhMTNlZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1qMVVemOvFylJ2OVPenFf1QthAOzX60JEeAJhkEj2suEdt2+VwZ/pY TKWFAu4D8E5TCJHDwH+Bty7Bl5DO5UTXBNtKUks2nZA+EaFpUEmMe8mxWBf/kCZp JhC4da/1k0iMXnG7hzQGcCMpHwkrw2JMnjqr6WSe+oo0XZPEgHK4F/ukgVz5kaDz jDMTONOBznRYUWf9HGFDjvuygdNKhGAqK2uzy8U63jcQQK7ewa5EBg95MQNLX9zr 1i6ELaX9T5R3Z0befKcXDq2/xSvmGZJ5IgJYw+hCDOp4Mys18taGVYAFIoroxeph HNw9YGugQ90RrG6g/wUNTk+Q02xX9Bo= -----END CERTIFICATE-----Generated at Wed May 13 08:01:01 2026 by rpki-client