$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28ce3fe1-8f0d-36ad-91a1-188a0656d0a0.roa File: 28ce3fe1-8f0d-36ad-91a1-188a0656d0a0.roa (raw, json) Hash identifier: 0Fy0E3ieZ/swiyYCV5hEK57xVhYDVTBLVXOh92vcyd4= Subject key identifier: B8:96:75:FE:11:56:A0:5B:6A:8E:68:DF:19:36:1E:94:3F:F1:23:92 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DA8158A5EC0A2CEF664089640 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28ce3fe1-8f0d-36ad-91a1-188a0656d0a0.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 8069 IP address blocks: 20.33.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:8a:5e:c0:a2:ce:f6:64:08:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=237c6c84-5d2e-4028-8efc-761ef0b7b25a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ad:dc:b7:56:d4:64:0c:f9:f8:79:95:eb:91: 26:67:fd:fc:8e:e3:ce:65:82:86:f1:24:d4:9c:52: 71:85:ee:33:1c:19:f5:f2:0f:6c:38:a3:ba:78:d2: 92:0b:b7:da:c0:86:4d:be:ca:cb:83:56:4d:d4:15: f4:dd:32:75:45:0e:90:be:f3:35:74:0d:ae:ac:95: ec:db:dc:80:13:3c:41:67:02:8e:da:95:98:e8:d3: a5:50:3a:fd:9c:30:3d:1d:e3:bc:5d:47:de:12:93: 87:87:b2:17:69:f3:1d:4c:68:4a:31:75:2a:55:01: 57:b8:d1:a1:aa:11:08:fd:ea:7a:37:6b:c3:bb:96: a7:d2:fd:d5:a9:1b:40:a1:c9:7e:9e:df:cd:00:93: e1:22:7e:77:7b:4e:20:31:89:62:84:50:28:59:cc: 2a:23:d0:03:af:c3:5c:42:eb:c7:67:56:20:58:e9: c2:df:2e:92:37:89:3b:34:3b:70:6c:92:9f:96:da: 3c:5d:40:fe:4c:c7:ad:13:f2:28:c3:dd:85:22:aa: 59:ec:13:16:b0:9b:b3:26:34:45:7d:86:bb:a1:5b: f9:fc:a1:44:88:0d:ad:15:6d:3d:a7:90:d2:ef:93: 8a:0d:f9:d8:8e:c0:17:02:2c:d7:bd:81:77:aa:bf: de:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:96:75:FE:11:56:A0:5B:6A:8E:68:DF:19:36:1E:94:3F:F1:23:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28ce3fe1-8f0d-36ad-91a1-188a0656d0a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:ad:33:65:39:30:c5:a7:58:96:ae:48:c8:3b:26:e9:8d:40: 71:47:a5:70:ff:b8:c6:6a:5a:80:1c:46:e6:9f:4c:20:1d:f0: 5a:07:2a:1b:c4:f4:04:41:48:2a:fa:4e:5f:07:84:99:2d:fe: 23:c1:d8:fc:43:37:d0:8e:19:32:33:09:b3:84:44:ae:05:7c: 77:5f:25:52:8d:28:19:d5:56:09:14:15:c8:44:d2:98:7d:58: d0:92:d1:30:69:c8:9e:f4:b8:fd:6a:a4:d9:a3:af:43:50:f1: c9:73:c5:71:56:1d:66:09:6b:5d:9a:eb:fa:b2:50:ee:86:ef: 8a:62:7b:e2:17:d3:74:25:14:60:4f:4a:47:64:bf:74:56:fe: 2b:0c:8c:7c:c9:6c:13:4d:e9:9c:13:34:4a:a5:4d:16:a0:5c: b1:3e:42:53:70:25:60:80:38:ee:11:5f:9d:33:ca:71:5c:8d: e8:b9:7f:93:59:c5:d7:4c:33:e0:2c:30:81:24:e5:ab:49:cf: a1:17:98:44:d3:21:af:17:66:cf:14:11:26:8f:5d:36:53:4d: 39:dc:5c:23:b7:0c:0a:d1:2a:9c:e3:ae:0c:31:26:72:75:1e: 48:4a:86:66:82:4b:3e:8a:ad:75:1b:ef:43:07:8e:83:09:58: 6c:53:87:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFYpewKLO9mQIlkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk MjM3YzZjODQtNWQyZS00MDI4LThlZmMtNzYxZWYwYjdiMjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq3ct1bUZAz5+HmV65EmZ/38juPOZYKG8STU nFJxhe4zHBn18g9sOKO6eNKSC7fawIZNvsrLg1ZN1BX03TJ1RQ6QvvM1dA2urJXs 29yAEzxBZwKO2pWY6NOlUDr9nDA9HeO8XUfeEpOHh7IXafMdTGhKMXUqVQFXuNGh qhEI/ep6N2vDu5an0v3VqRtAocl+nt/NAJPhIn53e04gMYlihFAoWcwqI9ADr8Nc QuvHZ1YgWOnC3y6SN4k7NDtwbJKflto8XUD+TMetE/Iow92FIqpZ7BMWsJuzJjRF fYa7oVv5/KFEiA2tFW09p5DS75OKDfnYjsAXAizXvYF3qr/eYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiWdf4RVqBbao5o3xk2HpQ/8SOSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjhjZTNmZTEtOGYwZC0z NmFkLTkxYTEtMTg4YTA2NTZkMGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOtM2U5MMWnWJauSMg7JumNQHFHpXD/uMZqWoAcRuafTCAd8FoHKhvE 9ARBSCr6Tl8HhJkt/iPB2PxDN9COGTIzCbOERK4FfHdfJVKNKBnVVgkUFchE0ph9 WNCS0TBpyJ70uP1qpNmjr0NQ8clzxXFWHWYJa12a6/qyUO6G74pie+IX03QlFGBP Skdkv3RW/isMjHzJbBNN6ZwTNEqlTRagXLE+QlNwJWCAOO4RX50zynFcjei5f5NZ xddMM+AsMIEk5atJz6EXmETTIa8XZs8UESaPXTZTTTncXCO3DArRKpzjrgwxJnJ1 HkhKhmaCSz6KrXUb70MHjoMJWGxThwk= -----END CERTIFICATE-----Generated at Wed May 13 11:05:32 2026 by rpki-client