$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28bd1686-b68e-31a7-9161-87cf47c9fc8f.roa File: 28bd1686-b68e-31a7-9161-87cf47c9fc8f.roa (raw, json) Hash identifier: nBUUoanSFymIe5P9OOMMy39OTgd7hiD9muWy98cV5Ck= Subject key identifier: 02:12:F1:B7:8D:11:6B:19:74:56:1C:21:27:7E:7F:6A:7B:E8:6B:F3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DADAAE72D9C3AA2721D8F9800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28bd1686-b68e-31a7-9161-87cf47c9fc8f.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 8069 IP address blocks: 20.33.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:e7:2d:9c:3a:a2:72:1d:8f:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=9a58761a-630e-4169-b65b-71bb0d88c4d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:10:5c:c8:fe:c5:08:0b:32:7a:37:60:74:bc: 0c:f0:08:bf:9d:a3:75:78:b5:2c:13:0b:a1:b7:23: e1:d5:e3:3b:a4:45:10:37:b0:43:bf:b8:46:4d:d9: 16:82:57:4b:71:c5:fb:22:6b:85:db:85:c6:4c:4e: 00:e6:d7:fc:4a:aa:62:ee:a7:27:55:0d:93:d8:31: 6f:b9:4d:65:02:f9:cf:6d:83:ec:f7:78:05:9f:f1: 7f:c5:61:a4:bb:25:c1:e1:6b:cd:f7:9f:ef:e0:cc: ab:bf:8f:22:f4:cd:2e:36:6f:f2:0e:a6:82:5f:2a: 88:ee:ea:89:31:62:1e:6c:3c:01:3e:80:96:e2:68: ba:6a:74:79:5e:01:db:6d:2c:53:80:72:e1:d7:d4: a5:8d:e7:ec:f5:91:f0:1d:7f:7c:dc:0b:74:f4:20: 75:3f:c0:33:ed:d7:e7:6a:0e:07:aa:84:40:e0:0d: 35:3d:f0:b9:71:65:30:81:5b:60:88:0e:f5:e9:22: d0:49:c0:a3:10:a7:ee:cd:69:88:50:d6:9e:23:76: 14:f1:8d:48:cd:28:9a:58:ad:05:7c:09:00:07:62: 4e:97:ea:e6:b3:e8:0e:7a:86:b5:f8:81:e6:1d:07: 21:e6:66:45:cf:cf:35:d3:94:17:18:8e:bd:23:b5: 03:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:12:F1:B7:8D:11:6B:19:74:56:1C:21:27:7E:7F:6A:7B:E8:6B:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28bd1686-b68e-31a7-9161-87cf47c9fc8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:89:3c:51:2e:51:82:71:44:dc:1b:19:64:71:57:f5:43:46: 99:03:57:8b:bf:62:b4:3e:ea:3d:52:89:1e:73:21:7e:b8:2e: 0f:0b:39:ba:94:68:0b:9c:b7:74:ea:45:d1:ae:1f:a3:4d:f6: ab:55:35:d6:d2:b5:7b:67:6a:ca:5a:d5:aa:2a:d7:b1:40:eb: 02:af:05:19:97:38:33:17:47:94:ca:f6:d3:d7:3f:cd:55:4d: 16:6d:81:e2:1f:11:97:89:ae:9e:18:6a:46:96:d9:bd:5c:77: 4b:d8:28:5f:ff:42:3c:e1:23:04:d7:56:70:37:78:6c:1d:3a: 60:2a:5e:89:3b:a4:05:8b:29:f7:ce:8c:9e:46:09:74:38:07: 9d:fa:a5:14:ef:85:50:41:ed:20:a4:5a:7f:31:40:e8:75:e9: 0c:ef:37:18:18:7e:f3:54:fd:2a:de:3c:6b:3b:16:d3:47:2a: b4:71:c7:77:30:b6:99:3f:9b:f3:a8:a1:13:22:86:9c:ec:69: 47:e3:46:21:e1:bd:c0:ea:1a:34:8c:eb:01:11:b9:5e:8e:cb: fa:2d:f4:fe:77:09:c2:e3:03:4a:a7:c0:49:21:65:c9:5e:0a: 7d:1b:65:eb:6b:fb:57:b9:4b:ca:a9:d3:23:1b:83:7d:b0:c8: e9:3b:4b:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tquctnDqich2PmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk OWE1ODc2MWEtNjMwZS00MTY5LWI2NWItNzFiYjBkODhjNGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRBcyP7FCAsyejdgdLwM8Ai/naN1eLUsEwuh tyPh1eM7pEUQN7BDv7hGTdkWgldLccX7ImuF24XGTE4A5tf8Sqpi7qcnVQ2T2DFv uU1lAvnPbYPs93gFn/F/xWGkuyXB4WvN95/v4Myrv48i9M0uNm/yDqaCXyqI7uqJ MWIebDwBPoCW4mi6anR5XgHbbSxTgHLh19Sljefs9ZHwHX983At09CB1P8Az7dfn ag4HqoRA4A01PfC5cWUwgVtgiA716SLQScCjEKfuzWmIUNaeI3YU8Y1IzSiaWK0F fAkAB2JOl+rms+gOeoa1+IHmHQch5mZFz88105QXGI69I7UDOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIS8beNEWsZdFYcISd+f2p76GvzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjhiZDE2ODYtYjY4ZS0z MWE3LTkxNjEtODdjZjQ3YzlmYzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmJPFEuUYJxRNwbGWRxV/VDRpkDV4u/YrQ+6j1SiR5zIX64Lg8LObqU aAuct3TqRdGuH6NN9qtVNdbStXtnaspa1aoq17FA6wKvBRmXODMXR5TK9tPXP81V TRZtgeIfEZeJrp4YakaW2b1cd0vYKF//QjzhIwTXVnA3eGwdOmAqXok7pAWLKffO jJ5GCXQ4B536pRTvhVBB7SCkWn8xQOh16QzvNxgYfvNU/SrePGs7FtNHKrRxx3cw tpk/m/OooRMihpzsaUfjRiHhvcDqGjSM6wERuV6Oy/ot9P53CcLjA0qnwEkhZcle Cn0bZetr+1e5S8qp0yMbg32wyOk7S1U= -----END CERTIFICATE-----Generated at Wed May 13 11:26:09 2026 by rpki-client