$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5db8591b-fd36-362f-9169-5dd9756c4d72.roa File: 5db8591b-fd36-362f-9169-5dd9756c4d72.roa (raw, json) Hash identifier: Wl+q8GScf1IjoM3QVN+O4Wo0sQkdIHYmtrdKjMZAVWk= Subject key identifier: 51:27:07:F0:1C:7B:28:15:B5:18:88:22:43:EA:5F:EE:D3:43:D6:3A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DA8158A2C52E3448D9F59EC80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5db8591b-fd36-362f-9169-5dd9756c4d72.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 8069 IP address blocks: 20.33.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:8a:2c:52:e3:44:8d:9f:59:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=4d83c7cd-1378-4d76-9fad-221f76270f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:dc:70:e9:7e:38:2b:ff:a6:26:1b:36:79:1f: eb:e2:27:c2:a2:0a:3b:9f:7e:b7:d1:69:02:b5:bb: cf:9e:3f:14:1c:a9:ee:96:f9:96:64:24:1d:97:ba: d2:04:ef:2b:33:0c:6b:98:48:be:fe:b6:26:21:99: db:68:38:50:c9:d8:01:3f:31:44:15:ec:25:68:6a: 47:61:92:b9:87:0c:5c:75:16:1c:ce:b0:2a:70:13: 78:dd:ec:7e:4c:56:35:cd:60:08:be:09:11:e7:8d: b9:48:53:90:a5:46:a9:82:5e:56:83:f5:4b:4f:d2: 40:22:35:72:ed:7b:57:6b:32:bd:54:bc:e2:87:31: d2:f4:10:80:77:e2:fd:1b:f6:b3:08:08:9b:ac:a2: da:29:40:67:75:60:25:99:50:f1:41:4e:a5:9f:54: a1:58:41:7e:fa:42:86:f0:0f:6b:08:f4:f0:59:97: e4:df:fb:1a:a8:88:7e:69:c0:02:8c:41:11:ca:d3: 97:bd:e7:ca:77:85:0b:77:6f:b4:b9:e9:25:c4:d0: 89:af:1b:f6:3f:8c:a5:ab:e8:55:a1:71:ee:f1:35: 55:ec:a7:44:f2:ed:28:8d:a0:49:81:27:6e:d4:a6: fd:06:a2:00:31:cd:04:83:8e:9b:78:49:00:0d:24: 61:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:27:07:F0:1C:7B:28:15:B5:18:88:22:43:EA:5F:EE:D3:43:D6:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5db8591b-fd36-362f-9169-5dd9756c4d72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:bf:b3:57:f7:a7:61:28:0b:a7:a6:6a:5f:96:e4:b9:64:02: e8:ec:22:c4:f5:eb:d6:51:74:a2:c0:8f:6f:93:fe:94:8e:30: dd:69:20:e5:d9:73:3f:95:95:9f:cf:e5:6a:ac:9c:a8:38:c3: 9d:99:95:f3:31:56:11:e8:d1:1c:66:c6:ad:80:8a:37:87:c7: 54:cb:45:55:0f:82:1e:b9:d6:ef:1a:63:e4:16:0d:cf:00:8d: aa:91:ef:59:8a:36:d2:d9:db:69:25:d2:e1:9a:49:0d:d7:37: d9:db:61:82:46:64:f0:a8:64:4b:26:12:af:a7:d7:17:25:ac: de:9f:6d:88:e2:c6:38:86:12:3d:f8:ba:c2:0d:ed:0f:75:e7: ce:fb:10:35:b2:dd:8f:3b:d1:13:3c:c2:1b:c5:70:41:93:b5: f0:04:18:85:94:b0:21:db:73:34:f4:54:55:2d:bb:15:1a:a6: 52:fc:6d:d1:4f:da:c7:5b:3a:05:b0:2d:28:3e:a6:ca:bd:2b: 42:90:16:8a:7b:fd:d4:67:40:be:9c:ad:47:b1:f2:c1:2c:a3: a5:84:35:ee:66:ac:9b:1c:60:bc:c9:3f:a0:6e:50:21:82:2d: 5e:96:05:7a:70:a1:2f:2e:e4:a6:db:d4:32:b8:4c:28:de:1c: 49:1f:91:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFYosUuNEjZ9Z7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk NGQ4M2M3Y2QtMTM3OC00ZDc2LTlmYWQtMjIxZjc2MjcwZjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNxw6X44K/+mJhs2eR/r4ifCogo7n3630WkC tbvPnj8UHKnulvmWZCQdl7rSBO8rMwxrmEi+/rYmIZnbaDhQydgBPzFEFewlaGpH YZK5hwxcdRYczrAqcBN43ex+TFY1zWAIvgkR5425SFOQpUapgl5Wg/VLT9JAIjVy 7XtXazK9VLzihzHS9BCAd+L9G/azCAibrKLaKUBndWAlmVDxQU6ln1ShWEF++kKG 8A9rCPTwWZfk3/saqIh+acACjEERytOXvefKd4ULd2+0ueklxNCJrxv2P4ylq+hV oXHu8TVV7KdE8u0ojaBJgSdu1Kb9BqIAMc0Eg46beEkADSRhRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEnB/AceygVtRiIIkPqX+7TQ9Y6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWRiODU5MWItZmQzNi0z NjJmLTkxNjktNWRkOTc1NmM0ZDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGC/s1f3p2EoC6emal+W5LlkAujsIsT169ZRdKLAj2+T/pSOMN1pIOXZ cz+VlZ/P5WqsnKg4w52ZlfMxVhHo0Rxmxq2AijeHx1TLRVUPgh651u8aY+QWDc8A jaqR71mKNtLZ22kl0uGaSQ3XN9nbYYJGZPCoZEsmEq+n1xclrN6fbYjixjiGEj34 usIN7Q915877EDWy3Y870RM8whvFcEGTtfAEGIWUsCHbczT0VFUtuxUaplL8bdFP 2sdbOgWwLSg+psq9K0KQFop7/dRnQL6crUex8sEso6WENe5mrJscYLzJP6BuUCGC LV6WBXpwoS8u5Kbb1DK4TCjeHEkfkUI= -----END CERTIFICATE-----Generated at Wed May 13 15:18:20 2026 by rpki-client