$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/294e9347-de22-31e7-bfc5-75bd383b4a41.roa File: 294e9347-de22-31e7-bfc5-75bd383b4a41.roa (raw, json) Hash identifier: DebpO9n4HRSMx1Hyvq9SPDLJdgr/15Ne46vKbg8virg= Subject key identifier: 5F:62:D3:CE:05:A5:99:C4:05:52:4C:0A:80:B7:8C:8F:96:71:37:30 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D9B855A44B35410FA6907F300 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/294e9347-de22-31e7-bfc5-75bd383b4a41.roa Signing time: Fri 24 Apr 2026 01:00:23 +0000 ROA not before: Fri 24 Apr 2026 01:00:23 +0000 ROA not after: Thu 23 Jul 2026 01:00:23 +0000 asID: 8069 IP address blocks: 20.33.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9b:85:5a:44:b3:54:10:fa:69:07:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 24 01:00:23 2026 GMT Not After : Jul 23 01:00:23 2026 GMT Subject: CN=1f6ebd69-8773-414c-bad2-515cf45b5e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bf:39:06:4e:16:61:44:d4:33:d5:71:0f:9d: d3:8b:24:a4:5e:28:b0:2a:f4:3d:a0:e1:0c:21:6c: 9b:6a:e1:02:6d:27:0d:3f:60:54:a9:4c:6d:36:f2: 59:9f:f0:72:b7:2f:d9:73:e1:2a:cb:12:6c:a4:aa: 94:c4:20:54:6e:13:23:bd:99:67:4c:fd:8c:2c:59: 9b:4b:af:63:54:b8:6f:43:12:f7:08:32:5b:5c:c8: ce:63:df:3c:21:21:f2:c6:1e:10:b1:75:e4:f9:d0: d4:27:09:94:19:a8:c7:b3:28:b8:16:bf:3a:e8:d9: 37:ee:6e:89:e0:88:29:7f:41:2e:b7:8f:2f:8c:a6: f2:a2:76:12:d4:86:94:1d:32:5a:c1:4b:bf:cc:e0: 22:4b:db:af:d2:5e:d9:11:36:bb:14:f0:b8:2f:80: c9:33:8a:e6:28:9b:26:0f:08:05:2f:14:c9:0b:82: 66:2e:af:45:c3:2f:07:b1:bc:fb:b8:12:28:68:b8: 50:71:a3:99:06:e5:60:b9:dc:e0:47:be:95:69:9b: 8e:b8:6e:60:08:cd:44:10:6c:cd:f8:ea:de:90:b7: 22:c6:6d:16:67:79:bd:af:ec:a5:48:24:ac:de:d7: 10:5f:fb:e6:f5:45:4e:1f:d7:2f:6d:fb:94:9c:2c: 07:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:62:D3:CE:05:A5:99:C4:05:52:4C:0A:80:B7:8C:8F:96:71:37:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/294e9347-de22-31e7-bfc5-75bd383b4a41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:72:83:d8:b4:26:49:f6:38:12:40:18:74:d2:6d:f9:fe:fb: e6:2f:f4:32:0c:e6:c1:26:74:cc:94:92:af:11:2f:da:d0:cc: 83:3d:67:b5:63:e1:4f:24:bd:87:37:6a:a1:62:c8:1e:25:66: 5e:6e:ab:03:70:ed:01:58:62:9a:c0:86:1d:64:6d:1a:1a:00: 0c:a4:08:4f:01:5f:5f:62:b6:3a:c8:94:f9:28:25:1b:87:9b: 93:8f:fa:f2:b8:6d:91:0f:55:2e:fe:6e:48:75:8b:70:2d:92: 48:1c:94:3c:db:f3:c0:05:ae:16:0a:4e:ab:ef:9e:ca:2f:38: b9:e4:91:40:ec:4f:d9:32:39:5a:ad:31:be:24:29:17:4e:21: d6:cb:cf:cd:48:c0:e2:32:97:4c:f8:6c:3e:32:bb:d2:f6:79: 4e:14:fb:03:dd:aa:48:b9:6e:18:82:5b:97:70:c5:06:06:19: f0:3e:59:ae:b9:25:3c:18:dc:ff:c3:ca:51:d3:a3:fa:d4:7b: 98:39:71:6a:1f:b0:ce:1b:fa:ab:64:69:22:f6:16:81:05:18: 0f:08:77:bd:72:63:0a:49:6c:85:0b:da:68:02:e4:31:16:a4: c1:53:34:76:12:6f:35:12:3d:48:91:ca:91:43:17:4d:ab:eb: b5:6d:65:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2bhVpEs1QQ+mkH8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk MWY2ZWJkNjktODc3My00MTRjLWJhZDItNTE1Y2Y0NWI1ZTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr85Bk4WYUTUM9VxD53TiySkXiiwKvQ9oOEM IWybauECbScNP2BUqUxtNvJZn/Byty/Zc+EqyxJspKqUxCBUbhMjvZlnTP2MLFmb S69jVLhvQxL3CDJbXMjOY988ISHyxh4QsXXk+dDUJwmUGajHsyi4Fr866Nk37m6J 4Igpf0Eut48vjKbyonYS1IaUHTJawUu/zOAiS9uv0l7ZETa7FPC4L4DJM4rmKJsm DwgFLxTJC4JmLq9Fwy8Hsbz7uBIoaLhQcaOZBuVgudzgR76VaZuOuG5gCM1EEGzN +OrekLcixm0WZ3m9r+ylSCSs3tcQX/vm9UVOH9cvbfuUnCwHPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9i084FpZnEBVJMCoC3jI+WcTcwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjk0ZTkzNDctZGUyMi0z MWU3LWJmYzUtNzViZDM4M2I0YTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZyg9i0Jkn2OBJAGHTSbfn+++Yv9DIM5sEmdMyUkq8RL9rQzIM9Z7Vj 4U8kvYc3aqFiyB4lZl5uqwNw7QFYYprAhh1kbRoaAAykCE8BX19itjrIlPkoJRuH m5OP+vK4bZEPVS7+bkh1i3AtkkgclDzb88AFrhYKTqvvnsovOLnkkUDsT9kyOVqt Mb4kKRdOIdbLz81IwOIyl0z4bD4yu9L2eU4U+wPdqki5bhiCW5dwxQYGGfA+Wa65 JTwY3P/DylHTo/rUe5g5cWofsM4b+qtkaSL2FoEFGA8Id71yYwpJbIUL2mgC5DEW pMFTNHYSbzUSPUiRypFDF02r67VtZXM= -----END CERTIFICATE-----Generated at Wed May 13 07:52:11 2026 by rpki-client