$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/362372eb-f260-32bd-af20-87d3e9d13f83.roa File: 362372eb-f260-32bd-af20-87d3e9d13f83.roa (raw, json) Hash identifier: 3m1DPgh4mSt7yuIzXRmXcp3cgS1+XrBbFDCX3ct6S18= Subject key identifier: 45:C3:0C:99:D7:41:F3:71:3C:ED:43:B5:8D:30:07:58:BB:F7:05:E5 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D44FA4E6BDB5ECAE899AF0980 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/362372eb-f260-32bd-af20-87d3e9d13f83.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.33.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:4e:6b:db:5e:ca:e8:99:af:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=683687f7-7ec8-4343-9736-82df936be336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4b:33:3c:2e:21:27:97:2e:23:95:80:92:57: c5:0e:3e:3d:f0:3f:50:9d:09:cf:f8:e7:02:84:8a: 8a:fc:e3:f8:57:7a:d6:29:54:54:7b:94:46:db:ad: 07:4b:65:72:ed:87:0f:0d:16:8f:cf:5f:96:c5:69: 06:10:c7:6a:82:ea:6e:81:9d:73:36:08:16:29:86: d5:f4:8b:68:c0:a9:7d:4f:61:fb:8e:08:a7:1a:14: 77:17:c2:7b:80:59:56:1c:2e:eb:3f:ac:c4:c1:36: a5:47:6d:1b:9b:40:d3:27:d6:f1:8f:36:7c:1a:ce: 8a:48:d2:d7:23:d5:f4:2b:3d:9e:17:06:1c:6c:64: c1:12:23:6b:d4:43:5b:b1:99:b4:c0:75:36:d0:4a: bd:8c:20:64:b1:fc:fe:62:5c:6d:f5:4a:2c:92:0c: 07:b7:de:0a:e2:0a:14:37:68:14:ed:c0:83:7a:7d: 25:58:d2:8a:07:1d:83:2d:f7:c6:91:93:d7:91:3e: 52:5f:ad:76:6c:04:f0:c5:a9:f0:4d:79:86:6b:c2: cd:a3:cf:5f:5c:5f:38:2c:99:76:63:e5:39:c2:d7: 68:9e:80:1e:74:8b:7f:4a:cb:a9:c3:67:01:b0:98: 4a:f1:08:10:a8:0f:c0:74:c9:c7:35:51:17:92:63: bf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C3:0C:99:D7:41:F3:71:3C:ED:43:B5:8D:30:07:58:BB:F7:05:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/362372eb-f260-32bd-af20-87d3e9d13f83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:bd:8a:b7:ae:00:1b:d6:eb:50:0e:b8:b3:1b:db:16:02:bf: c1:c2:ac:49:d3:2c:4e:f9:c1:11:5b:de:4b:36:32:eb:97:f0: cc:16:85:f2:a2:20:c8:a0:79:19:53:c6:99:e0:3b:de:cd:dc: 14:29:cd:63:53:3e:06:3e:4d:21:6b:ba:e2:6b:98:61:4e:41: d2:66:03:5f:75:ae:1f:2a:06:f7:98:ba:2c:b7:0f:e2:6f:c0: 50:61:79:88:b3:86:9e:31:c4:1a:1c:29:18:58:af:ad:86:df: 06:c7:71:cb:b0:79:de:3a:01:2e:ae:22:78:56:84:77:3f:68: eb:77:44:16:ee:01:38:db:ab:8d:5f:ea:d9:da:da:e0:d1:9d: 3b:12:f2:d9:b6:3d:05:84:a6:4f:b5:75:d5:94:0d:6b:47:03: c1:1a:c5:9b:6c:d3:69:b6:4f:9e:d8:f5:73:65:35:6e:75:cd: 5e:0b:a9:28:da:c0:5e:63:0a:3a:4c:55:14:9d:a5:ee:1c:80: a7:d2:a8:00:4a:d0:8c:cd:1e:6c:c4:c8:7d:24:17:bb:99:f6: 72:5d:8e:72:98:71:2c:7f:b7:ea:05:64:28:1e:99:d9:26:69: cf:b7:ab:1d:d3:b1:be:86:89:72:8a:97:08:67:6e:81:4e:77: 73:86:00:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+k5r217K6JmvCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NjgzNjg3ZjctN2VjOC00MzQzLTk3MzYtODJkZjkzNmJlMzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEszPC4hJ5cuI5WAklfFDj498D9QnQnP+OcC hIqK/OP4V3rWKVRUe5RG260HS2Vy7YcPDRaPz1+WxWkGEMdqgupugZ1zNggWKYbV 9ItowKl9T2H7jginGhR3F8J7gFlWHC7rP6zEwTalR20bm0DTJ9bxjzZ8Gs6KSNLX I9X0Kz2eFwYcbGTBEiNr1ENbsZm0wHU20Eq9jCBksfz+Ylxt9UoskgwHt94K4goU N2gU7cCDen0lWNKKBx2DLffGkZPXkT5SX612bATwxanwTXmGa8LNo89fXF84LJl2 Y+U5wtdonoAedIt/Ssupw2cBsJhK8QgQqA/AdMnHNVEXkmO/bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXDDJnXQfNxPO1DtY0wB1i79wXlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzYyMzcyZWItZjI2MC0z MmJkLWFmMjAtODdkM2U5ZDEzZjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAu9ireuABvW61AOuLMb2xYCv8HCrEnTLE75wRFb3ks2MuuX8MwWhfKi IMigeRlTxpngO97N3BQpzWNTPgY+TSFruuJrmGFOQdJmA191rh8qBveYuiy3D+Jv wFBheYizhp4xxBocKRhYr62G3wbHccuwed46AS6uInhWhHc/aOt3RBbuATjbq41f 6tna2uDRnTsS8tm2PQWEpk+1ddWUDWtHA8EaxZts02m2T57Y9XNlNW51zV4LqSja wF5jCjpMVRSdpe4cgKfSqABK0IzNHmzEyH0kF7uZ9nJdjnKYcSx/t+oFZCgemdkm ac+3qx3Tsb6GiXKKlwhnboFOd3OGADw= -----END CERTIFICATE-----Generated at Thu Mar 26 19:46:10 2026 by rpki-client