$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c19a38f-182b-3873-a381-6fafa80313dc.roa File: 6c19a38f-182b-3873-a381-6fafa80313dc.roa (raw, json) Hash identifier: LTgmf2hU9Hqsgk1l9C0TPxEuNLUMMIIC9Ow/xItcteM= Subject key identifier: 59:A7:96:3F:CD:78:E7:B4:F0:CE:9D:AF:A1:D4:CE:E8:C0:CE:E4:6A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DA8158A9C8E856454CCE13140 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c19a38f-182b-3873-a381-6fafa80313dc.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 8069 IP address blocks: 20.33.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:8a:9c:8e:85:64:54:cc:e1:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=29907aa8-471c-4d44-8f9c-5482b0b74904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:dd:bd:b1:1b:c1:9d:6c:20:7a:e8:8e:ce:b3: 72:f9:80:58:42:2a:d4:11:1b:a2:ff:e7:79:42:c9: 00:1f:52:8d:c6:7f:75:ea:9b:83:ed:ad:4a:49:b2: 9f:40:7f:e8:85:33:49:c8:c4:93:db:5a:e4:ec:93: ec:9d:2f:07:97:6d:97:78:e0:d7:1a:a0:1b:de:98: 7b:0b:ab:3a:f5:62:96:4c:2e:96:6d:a4:14:1d:4f: 87:3f:7b:a1:bb:2b:49:16:b4:fe:e9:cf:3b:20:e4: 8f:68:31:b6:73:72:9e:ca:37:63:9f:f9:23:6a:4c: 2d:55:44:a2:aa:b8:08:2c:1e:8b:fb:d6:d7:75:da: f8:88:7b:ab:a4:38:41:d3:e4:b4:3d:3b:0c:d9:c8: 07:2f:5c:6b:91:81:40:e8:3f:05:1c:1a:f3:35:ca: 67:3c:27:ba:7e:fd:76:d3:d7:41:c8:55:dc:a7:6e: f8:07:9b:3d:a3:c3:1f:7a:c5:cb:bc:3f:a4:3f:cb: 9e:64:1a:e0:67:67:6d:76:5b:5b:4f:c1:c9:8a:66: 6f:8f:59:e3:56:d3:b9:34:6f:4c:53:6a:d8:3f:4a: 6e:c4:7b:31:d3:36:e5:d9:ff:6a:c7:6e:24:0d:f5: cd:c3:50:f1:89:02:aa:8b:47:0a:ce:6f:c0:3a:75: 59:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A7:96:3F:CD:78:E7:B4:F0:CE:9D:AF:A1:D4:CE:E8:C0:CE:E4:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c19a38f-182b-3873-a381-6fafa80313dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:89:42:8e:ef:08:5a:9d:6e:c2:6d:86:0d:97:84:ea:f1:b5: 54:9e:2e:2e:05:d2:b2:ed:b9:47:79:67:a5:da:85:60:47:8f: 12:6c:a3:67:62:0a:b0:c2:2a:d6:84:23:7d:4f:9d:83:38:8b: 0e:2b:76:db:ea:ee:7b:16:24:2a:f3:37:9a:6f:17:94:47:63: 3f:ba:68:cf:41:6f:6b:1d:67:6e:0d:49:df:df:5b:cc:59:cb: 62:ce:12:97:91:59:dc:c0:ca:50:41:9e:b4:c6:2e:43:29:2e: e5:4f:9e:12:db:ef:74:54:d5:32:d5:3c:ac:45:b1:6a:4a:f4: c3:80:f1:87:c7:4e:34:62:41:ea:36:b0:fe:fd:70:4d:20:e5: 72:91:4c:58:9b:4c:5b:b9:5f:16:f7:cc:05:9d:4e:ef:4a:fc: 7d:9c:cf:2f:3a:b3:af:fc:36:e5:5c:e6:ca:d7:a2:d7:1f:16: c7:f1:52:84:a4:94:51:66:ea:c4:4e:82:c4:9a:d5:bb:ed:11: 42:2b:73:21:3c:cf:14:df:a0:fa:0b:f9:ff:54:b1:13:90:fa: 89:fe:85:bd:0d:f9:59:cb:c7:13:2d:82:51:c2:90:33:5f:c6: ad:0e:ca:e9:45:ba:db:b1:ed:79:0c:7e:a6:50:c3:76:ef:d0: e6:69:a9:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFYqcjoVkVMzhMUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk Mjk5MDdhYTgtNDcxYy00ZDQ0LThmOWMtNTQ4MmIwYjc0OTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN29sRvBnWwgeuiOzrNy+YBYQirUERui/+d5 QskAH1KNxn916puD7a1KSbKfQH/ohTNJyMST21rk7JPsnS8Hl22XeODXGqAb3ph7 C6s69WKWTC6WbaQUHU+HP3uhuytJFrT+6c87IOSPaDG2c3Keyjdjn/kjakwtVUSi qrgILB6L+9bXddr4iHurpDhB0+S0PTsM2cgHL1xrkYFA6D8FHBrzNcpnPCe6fv12 09dByFXcp274B5s9o8MfesXLvD+kP8ueZBrgZ2dtdltbT8HJimZvj1njVtO5NG9M U2rYP0puxHsx0zbl2f9qx24kDfXNw1DxiQKqi0cKzm/AOnVZYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmnlj/NeOe08M6dr6HUzujAzuRqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmMxOWEzOGYtMTgyYi0z ODczLWEzODEtNmZhZmE4MDMxM2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuJQo7vCFqdbsJthg2XhOrxtVSeLi4F0rLtuUd5Z6XahWBHjxJso2di CrDCKtaEI31PnYM4iw4rdtvq7nsWJCrzN5pvF5RHYz+6aM9Bb2sdZ24NSd/fW8xZ y2LOEpeRWdzAylBBnrTGLkMpLuVPnhLb73RU1TLVPKxFsWpK9MOA8YfHTjRiQeo2 sP79cE0g5XKRTFibTFu5Xxb3zAWdTu9K/H2czy86s6/8NuVc5srXotcfFsfxUoSk lFFm6sROgsSa1bvtEUIrcyE8zxTfoPoL+f9UsROQ+on+hb0N+VnLxxMtglHCkDNf xq0OyulFutux7XkMfqZQw3bv0OZpqbU= -----END CERTIFICATE-----Generated at Wed May 13 09:07:16 2026 by rpki-client