$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/67363bc5-afc2-3ebd-99c4-8fe80b1aaef3.roa File: 67363bc5-afc2-3ebd-99c4-8fe80b1aaef3.roa (raw, json) Hash identifier: ZYjTAHAPVHC4XI4T/xV2DCDw/dXCdnH/jioyUO3amVc= Subject key identifier: CB:F8:EA:F3:7F:44:8C:99:F8:EE:D7:F1:2A:9D:ED:7B:D9:DD:14:68 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D97556699CFB1DC73C9BDC260 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/67363bc5-afc2-3ebd-99c4-8fe80b1aaef3.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 8069 IP address blocks: 20.33.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:66:99:cf:b1:dc:73:c9:bd:c2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=30970d5f-786e-496a-ae0d-6ff149d97254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:82:64:12:73:a7:a6:ae:eb:c4:5c:21:58:c9: ad:d9:04:5c:5c:d9:27:20:b2:d6:bd:49:28:00:4d: 13:6a:9f:8f:cd:65:b5:b4:7a:d0:c9:6a:d8:bc:f4: 46:12:c6:6b:91:47:aa:6f:e0:49:74:8f:18:53:6d: a9:36:c0:f3:b4:d9:3e:d9:e6:cd:0e:db:64:f0:7b: 36:f6:d0:58:8d:95:24:99:ac:1c:a3:b2:86:12:c0: a2:23:2d:87:67:29:0c:3d:f5:2e:ae:c1:bf:f9:58: a8:25:34:1d:31:72:23:0b:7c:eb:16:0f:6f:3e:c9: 6d:2d:c3:69:59:50:12:7d:18:59:55:20:a1:98:f9: bf:bb:bd:e3:56:cd:ef:74:2b:b0:2d:92:ce:75:8d: d3:22:8f:bb:2e:81:ae:9b:78:0a:2a:1b:82:06:3e: df:a1:b6:32:e1:fe:09:ac:c1:c3:e9:6b:e9:52:09: 34:24:a1:21:0c:19:8a:65:f8:36:e6:dc:8d:78:35: dc:6d:44:4c:91:8e:b4:46:bf:ef:b5:e2:cc:d7:c3: f1:24:52:29:95:cc:07:02:a8:2a:10:bf:94:4a:f5: 31:b4:9d:bb:2d:b6:5b:af:ad:ae:7a:68:7f:9a:c6: d5:a9:4b:2c:99:68:78:5c:df:b4:44:6c:df:f1:5c: 2b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F8:EA:F3:7F:44:8C:99:F8:EE:D7:F1:2A:9D:ED:7B:D9:DD:14:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/67363bc5-afc2-3ebd-99c4-8fe80b1aaef3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:bc:04:4a:40:e5:a4:6d:33:42:a3:a2:d1:29:f9:4b:8b:e0: 3e:1d:bf:fd:1b:5d:3d:09:40:c1:7b:53:b4:aa:92:a6:b4:ea: 96:63:12:ab:4c:44:a0:7f:f3:01:05:4c:ae:dc:f7:ff:36:1d: 62:01:20:35:0c:bf:c7:85:57:fe:45:63:0e:6e:6f:6f:e2:32: b4:f1:ee:85:00:df:66:4a:78:cb:67:bf:45:52:93:d8:43:3f: d0:01:74:5b:3e:49:0b:e4:1b:ef:6a:68:51:66:28:f2:c0:b2: 4e:46:45:f8:28:b6:1a:21:0c:b7:ef:dd:f5:63:f4:d5:0d:a0: be:fb:f7:17:1c:e3:7f:9e:8e:41:b3:d0:a3:c6:ee:ec:61:21: d6:15:17:90:89:5f:b3:30:d6:65:98:27:6e:54:d2:ce:08:17: ad:00:14:6f:df:1e:1e:90:ed:4a:d6:9a:a3:76:05:28:ed:a4: 50:3b:6d:72:4c:90:61:e5:5e:b2:d1:69:a6:d3:6e:ca:6c:9c: bc:22:f9:57:01:b4:8a:ac:63:bf:e8:32:75:70:ed:47:f5:ce: c5:ef:a0:46:c6:1f:de:df:20:59:cc:ab:fe:e8:83:85:42:69: 30:ab:be:1c:e9:01:89:a6:ea:fe:44:37:24:2c:de:67:78:5b: 02:82:35:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XVWaZz7Hcc8m9wmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk MzA5NzBkNWYtNzg2ZS00OTZhLWFlMGQtNmZmMTQ5ZDk3MjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIJkEnOnpq7rxFwhWMmt2QRcXNknILLWvUko AE0Tap+PzWW1tHrQyWrYvPRGEsZrkUeqb+BJdI8YU22pNsDztNk+2ebNDttk8Hs2 9tBYjZUkmawco7KGEsCiIy2HZykMPfUursG/+VioJTQdMXIjC3zrFg9vPsltLcNp WVASfRhZVSChmPm/u73jVs3vdCuwLZLOdY3TIo+7LoGum3gKKhuCBj7fobYy4f4J rMHD6WvpUgk0JKEhDBmKZfg25tyNeDXcbURMkY60Rr/vteLM18PxJFIplcwHAqgq EL+USvUxtJ27LbZbr62uemh/msbVqUssmWh4XN+0RGzf8VwrvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMv46vN/RIyZ+O7X8Sqd7XvZ3RRoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjczNjNiYzUtYWZjMi0z ZWJkLTk5YzQtOGZlODBiMWFhZWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCF1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADy8BEpA5aRtM0KjotEp+UuL4D4dv/0bXT0JQMF7U7Sqkqa06pZjEqtM RKB/8wEFTK7c9/82HWIBIDUMv8eFV/5FYw5ub2/iMrTx7oUA32ZKeMtnv0VSk9hD P9ABdFs+SQvkG+9qaFFmKPLAsk5GRfgothohDLfv3fVj9NUNoL779xcc43+ejkGz 0KPG7uxhIdYVF5CJX7Mw1mWYJ25U0s4IF60AFG/fHh6Q7UrWmqN2BSjtpFA7bXJM kGHlXrLRaabTbspsnLwi+VcBtIqsY7/oMnVw7Uf1zsXvoEbGH97fIFnMq/7og4VC aTCrvhzpAYmm6v5ENyQs3md4WwKCNfE= -----END CERTIFICATE-----Generated at Wed May 13 09:09:54 2026 by rpki-client