$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/48e9b15d-62d9-3157-aad7-4d279019b511.roa File: 48e9b15d-62d9-3157-aad7-4d279019b511.roa (raw, json) Hash identifier: X7WTVALA5ceqNE0kW6c8r6AgKWUaf9IwCSrAIEWEDtI= Subject key identifier: 72:D0:86:DF:B3:7E:CF:AD:10:9C:94:63:29:2D:1C:22:46:46:2B:82 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DBD05A32B2332E2CB294B5280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/48e9b15d-62d9-3157-aad7-4d279019b511.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:a3:2b:23:32:e2:cb:29:4b:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=2e54d144-ada7-46c6-b3e5-96fc8f14968d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b5:b8:fa:8d:72:75:47:ed:c1:16:d9:0f:b8: a5:c2:29:7f:0f:b8:b8:18:df:ec:a4:59:bc:90:62: 3c:28:e4:09:38:3f:e7:e8:44:64:db:0e:5f:f9:5f: a5:04:25:88:81:5c:4c:4c:c0:40:40:ef:a6:2a:40: fb:bc:88:d5:c2:25:5a:bb:06:e0:39:32:db:e4:b2: 23:e9:69:48:b8:8a:6d:6b:7d:52:af:ac:a8:2a:d6: f9:f8:24:87:fe:8d:83:39:06:29:d6:78:e7:9e:29: 25:fa:38:cb:97:55:ff:92:e2:2b:f3:1a:b1:49:0b: 1f:f3:20:f4:ad:d7:dd:89:4c:51:2e:cd:93:c2:51: 69:2e:fa:cb:d2:22:68:12:85:88:d5:1b:26:76:d5: 4d:8b:e6:60:67:0c:f5:26:2e:5f:44:61:b1:8c:9d: 85:82:0f:26:ed:3b:66:8d:a6:f3:34:cc:17:3c:cf: c9:6e:97:78:4d:e6:09:44:61:90:7f:9b:04:4e:38: 7f:7c:10:b3:50:6b:7d:5c:79:6b:20:e4:83:24:74: aa:ad:f4:35:eb:59:b9:cb:69:bf:d8:c0:26:e1:ba: dd:12:68:0d:1c:a5:bc:15:c4:78:9d:ee:a2:7a:14: 04:14:36:cf:64:8e:dd:b5:25:c1:4c:3c:1a:73:11: 0c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D0:86:DF:B3:7E:CF:AD:10:9C:94:63:29:2D:1C:22:46:46:2B:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/48e9b15d-62d9-3157-aad7-4d279019b511.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:09:22:a3:4a:ac:42:62:aa:6e:3e:d4:d3:42:95:41:6c:01: 7e:3b:82:1f:58:da:93:5b:77:8a:ae:d4:ec:64:69:ca:7c:51: 65:08:bb:e3:b2:11:5e:a7:f9:cb:5f:52:f7:99:3a:9c:61:ef: ef:64:32:7c:bc:ba:e7:83:36:f7:f2:fb:26:89:4d:12:cb:a9: dd:92:08:6a:0a:a4:fa:e6:07:a1:89:b2:4d:92:da:1c:77:08: 3e:3b:2c:18:49:46:4a:5a:89:2f:f0:87:c0:ac:53:b1:5c:be: 6b:d3:a7:58:53:11:46:37:f2:ed:e0:11:3d:66:1b:b9:22:ae: a5:02:9c:6e:d4:03:12:f7:55:ea:b8:f3:d9:16:77:4a:8e:8f: 24:78:75:9c:a4:35:0f:8d:82:46:c0:51:65:f8:db:02:8f:75: 61:f5:2a:fe:81:ea:87:1b:f2:e0:a4:18:1c:c9:6c:4e:10:c3: 9f:52:97:6e:29:f5:b6:0f:89:b8:64:94:ba:67:d2:71:29:58: 5a:3c:35:d4:39:80:43:34:e6:93:16:1d:78:e1:1c:0d:ca:2a: d0:d3:7b:a6:a1:54:5d:9b:e6:b2:69:b0:89:5c:af:95:92:8f: ea:9c:c7:b1:24:4b:e4:71:06:cb:37:64:a5:e6:1f:b0:00:f3: 49:37:0c:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BaMrIzLiyylLUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk MmU1NGQxNDQtYWRhNy00NmM2LWIzZTUtOTZmYzhmMTQ5NjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrW4+o1ydUftwRbZD7ilwil/D7i4GN/spFm8 kGI8KOQJOD/n6ERk2w5f+V+lBCWIgVxMTMBAQO+mKkD7vIjVwiVauwbgOTLb5LIj 6WlIuIpta31Sr6yoKtb5+CSH/o2DOQYp1njnnikl+jjLl1X/kuIr8xqxSQsf8yD0 rdfdiUxRLs2TwlFpLvrL0iJoEoWI1RsmdtVNi+ZgZwz1Ji5fRGGxjJ2Fgg8m7Ttm jabzNMwXPM/Jbpd4TeYJRGGQf5sETjh/fBCzUGt9XHlrIOSDJHSqrfQ161m5y2m/ 2MAm4brdEmgNHKW8FcR4ne6iehQEFDbPZI7dtSXBTDwacxEMcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLQht+zfs+tEJyUYyktHCJGRiuCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDhlOWIxNWQtNjJkOS0z MTU3LWFhZDctNGQyNzkwMTliNTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIJIqNKrEJiqm4+1NNClUFsAX47gh9Y2pNbd4qu1Oxkacp8UWUIu+Oy EV6n+ctfUveZOpxh7+9kMny8uueDNvfy+yaJTRLLqd2SCGoKpPrmB6GJsk2S2hx3 CD47LBhJRkpaiS/wh8CsU7FcvmvTp1hTEUY38u3gET1mG7kirqUCnG7UAxL3Veq4 89kWd0qOjyR4dZykNQ+NgkbAUWX42wKPdWH1Kv6B6ocb8uCkGBzJbE4Qw59Sl24p 9bYPibhklLpn0nEpWFo8NdQ5gEM05pMWHXjhHA3KKtDTe6ahVF2b5rJpsIlcr5WS j+qcx7EkS+RxBss3ZKXmH7AA80k3DIk= -----END CERTIFICATE-----Generated at Wed May 13 14:18:31 2026 by rpki-client