$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2dcfd525-f3e6-335f-8507-9dbff9bd843e.roa File: 2dcfd525-f3e6-335f-8507-9dbff9bd843e.roa (raw, json) Hash identifier: oK1BdYXCTLpLQ3u99dA1YwdRGAc51CZH/r611FIoypQ= Subject key identifier: 54:51:2C:86:C6:29:FB:92:2D:79:6F:6E:54:FD:72:DC:78:B4:71:E6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DA8158A1FDD4124BDAE43C8C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2dcfd525-f3e6-335f-8507-9dbff9bd843e.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 8069 IP address blocks: 20.33.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:8a:1f:dd:41:24:bd:ae:43:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=2d8ba1af-25b8-4caf-a79c-d7ddee6ffb8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:15:13:bb:4e:43:79:6e:91:6d:b8:2f:fc:68: ef:ab:ef:30:11:e2:ca:2c:d8:a7:02:bd:9f:4f:bc: 32:1c:be:35:c2:9d:cc:be:b7:7a:6b:d8:ed:f0:6b: d2:2a:1b:33:3c:c0:17:13:23:52:8c:37:b0:ad:76: 9a:c0:a6:d1:e0:0b:f8:a3:15:09:ad:4f:e7:d5:10: c5:ff:70:bd:a9:4f:2a:73:2e:af:60:bc:4a:20:17: 57:13:ac:12:2e:7b:f8:32:35:33:d8:41:47:da:f5: 18:ee:04:bc:0c:40:5a:2d:8b:8b:40:70:8d:45:f0: d1:07:f1:f9:32:ca:99:c8:d8:8d:35:d0:0c:29:26: 4a:68:07:bc:57:a6:40:23:f9:8d:85:81:bf:2f:21: 3f:0f:b9:8f:a3:ab:04:c1:3a:cf:82:34:11:19:2f: d3:7b:13:6e:b9:25:ea:34:1d:f0:e8:7e:3c:bf:d7: 6b:3d:cd:cb:59:5f:f9:c6:db:77:c4:cf:4c:fe:d2: 5a:98:28:dd:81:f0:19:92:30:7b:d6:bf:25:5d:d7: 12:82:6f:0e:fe:64:77:7a:dc:8f:1c:af:63:7d:7e: 48:38:92:9a:f7:e0:f3:3b:a7:a2:6f:7d:56:b8:d2: 2e:84:6d:1b:fa:5f:8a:fe:06:44:54:1e:86:b8:06: f0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:51:2C:86:C6:29:FB:92:2D:79:6F:6E:54:FD:72:DC:78:B4:71:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2dcfd525-f3e6-335f-8507-9dbff9bd843e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:8c:5a:95:61:e1:70:5e:ec:9f:14:ab:23:5f:34:03:1a:46: 41:8e:49:72:d1:36:84:42:73:80:5f:0a:5d:06:9b:72:59:ce: 98:d0:82:89:de:95:31:9a:07:d7:e2:e8:f9:3c:e4:07:8d:a1: df:28:10:eb:50:c1:b3:51:7f:f8:f8:61:45:71:ab:b6:85:7e: be:ba:4b:2b:b7:6e:64:cf:e5:66:6d:da:ac:7c:05:25:64:00: 65:dc:ab:ea:30:95:e3:83:34:d5:71:5e:7a:14:bd:1f:15:a3: 52:2f:23:a3:3b:5b:57:cc:bc:d5:96:47:0b:82:65:25:ea:7e: f0:b6:e2:99:a2:f6:09:6e:3a:8e:a9:9b:00:30:a4:8e:78:d1: f5:40:11:52:67:49:dc:3e:81:4c:e3:f6:43:ec:7c:f1:51:c6: 6c:5e:de:90:5b:84:ed:04:4d:42:8b:2b:03:53:13:a7:e6:a9: 67:ee:10:9f:50:04:89:4c:ac:7b:ab:df:90:0e:64:cc:4a:6a: 46:d3:a2:f7:38:9e:2b:1e:8f:7f:24:d0:a4:bf:85:73:ec:cf: cb:4f:65:8f:10:13:a0:db:c1:64:a3:6e:35:93:9e:31:87:d5: 2d:b3:fe:aa:4b:50:d4:2a:0b:5c:26:4f:cb:da:84:3e:fa:f3: fb:fe:7d:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFYof3UEkva5DyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk MmQ4YmExYWYtMjViOC00Y2FmLWE3OWMtZDdkZGVlNmZmYjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRUTu05DeW6Rbbgv/Gjvq+8wEeLKLNinAr2f T7wyHL41wp3Mvrd6a9jt8GvSKhszPMAXEyNSjDewrXaawKbR4Av4oxUJrU/n1RDF /3C9qU8qcy6vYLxKIBdXE6wSLnv4MjUz2EFH2vUY7gS8DEBaLYuLQHCNRfDRB/H5 MsqZyNiNNdAMKSZKaAe8V6ZAI/mNhYG/LyE/D7mPo6sEwTrPgjQRGS/TexNuuSXq NB3w6H48v9drPc3LWV/5xtt3xM9M/tJamCjdgfAZkjB71r8lXdcSgm8O/mR3etyP HK9jfX5IOJKa9+DzO6eib31WuNIuhG0b+l+K/gZEVB6GuAbwSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRRLIbGKfuSLXlvblT9ctx4tHHmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMmRjZmQ1MjUtZjNlNi0z MzVmLTg1MDctOWRiZmY5YmQ4NDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuMWpVh4XBe7J8UqyNfNAMaRkGOSXLRNoRCc4BfCl0Gm3JZzpjQgone lTGaB9fi6Pk85AeNod8oEOtQwbNRf/j4YUVxq7aFfr66Syu3bmTP5WZt2qx8BSVk AGXcq+owleODNNVxXnoUvR8Vo1IvI6M7W1fMvNWWRwuCZSXqfvC24pmi9gluOo6p mwAwpI540fVAEVJnSdw+gUzj9kPsfPFRxmxe3pBbhO0ETUKLKwNTE6fmqWfuEJ9Q BIlMrHur35AOZMxKakbTovc4nisej38k0KS/hXPsz8tPZY8QE6DbwWSjbjWTnjGH 1S2z/qpLUNQqC1wmT8vahD768/v+feI= -----END CERTIFICATE-----Generated at Wed May 13 11:26:06 2026 by rpki-client