$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/77dcec28-3dd5-33e9-b1bb-17b034a18bc1.roa File: 77dcec28-3dd5-33e9-b1bb-17b034a18bc1.roa (raw, json) Hash identifier: ES3y73zgkOWfe5zAdJfOXxNSCTljXNjDhGVgCiBVbu0= Subject key identifier: 66:91:93:F3:4C:95:ED:2D:B2:A8:0F:60:55:B4:A7:DB:68:FD:28:0A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D9B855AB82C8BD7C9700950C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/77dcec28-3dd5-33e9-b1bb-17b034a18bc1.roa Signing time: Fri 24 Apr 2026 01:00:23 +0000 ROA not before: Fri 24 Apr 2026 01:00:23 +0000 ROA not after: Thu 23 Jul 2026 01:00:23 +0000 asID: 8069 IP address blocks: 20.33.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9b:85:5a:b8:2c:8b:d7:c9:70:09:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 24 01:00:23 2026 GMT Not After : Jul 23 01:00:23 2026 GMT Subject: CN=43283e7e-2313-4982-b64c-7714f917e8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7b:0f:5a:98:60:a4:17:43:e6:e5:6b:f7:62: a2:eb:70:35:2f:45:bf:ff:4d:00:13:a1:61:cf:68: 70:ff:23:bc:ed:db:ae:1e:5d:e5:3d:b1:88:25:54: 8c:ce:b4:e6:35:9d:e4:1c:a0:12:cf:b3:d6:68:95: c6:96:a8:10:7f:ec:ae:c0:d8:d2:bd:92:03:8d:bf: d7:9e:96:f0:5e:22:bf:3b:5a:9d:6c:4c:7b:bc:75: c4:22:19:9b:81:96:01:fe:37:76:7b:5f:86:96:4d: 96:22:46:f0:6f:3c:70:d9:f4:da:5f:83:b8:20:54: 63:e5:37:d0:be:bb:f3:51:1d:3d:7d:fd:2a:7f:89: 21:3b:97:a8:fa:83:c4:8f:2e:62:c9:32:20:7d:cc: fd:f4:a7:b9:96:44:0a:e0:51:38:98:c9:36:c4:61: 29:18:d8:f6:d9:26:3b:09:f8:3a:e7:e1:a0:62:5b: 71:05:20:b4:9c:e1:11:c3:50:9b:1c:c5:a7:6b:98: ae:68:28:c8:76:8c:03:1d:00:1b:bc:c7:63:c9:e2: 66:05:be:39:00:f4:2a:e0:95:8e:66:14:c6:fd:08: 3c:e2:7d:de:5f:f3:ff:ca:47:06:0b:4a:7a:67:10: 7f:e1:a5:c0:ea:b3:e4:6c:50:45:64:39:1b:d3:81: 39:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:91:93:F3:4C:95:ED:2D:B2:A8:0F:60:55:B4:A7:DB:68:FD:28:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/77dcec28-3dd5-33e9-b1bb-17b034a18bc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:9b:d8:71:20:e6:2b:5d:8f:f8:6a:9f:1e:09:db:1f:a8:1a: 09:f5:c3:ec:60:6f:2f:70:0d:6d:80:d7:19:1f:84:69:2d:df: 59:bf:90:04:3e:a9:7a:cd:36:95:e1:18:f3:8c:07:a4:65:4f: d2:06:55:83:36:7d:b8:f7:0a:1c:f5:5c:99:fa:aa:69:22:59: fc:6d:7a:06:7d:ac:46:50:e1:91:aa:50:2d:5b:26:bb:66:76: 6d:da:b2:26:ba:cd:f2:02:e6:d7:46:cb:32:21:a2:a6:99:bc: 0e:83:cc:6b:19:d0:24:b0:49:fa:50:be:7a:4f:c0:2c:35:58: 2c:ca:26:74:39:b5:c9:28:3c:9a:46:7e:9f:62:8f:3f:ec:37: a4:ee:82:87:7d:bc:99:21:ba:65:91:fb:fb:3b:21:5f:2a:cd: b7:b1:c7:50:8e:d7:5d:85:f4:00:d3:b2:7d:bb:72:41:a7:da: 76:9c:28:6d:3d:1c:2d:0e:18:53:af:40:0f:94:53:16:38:6e: 22:52:4f:5b:75:a6:75:2b:12:2e:5c:6d:a3:4b:9f:d7:21:b5: aa:b9:68:f5:c3:55:2e:91:c5:79:ee:4d:d7:8c:cc:38:2c:99: 90:56:a2:5b:5e:38:a6:57:1b:16:7c:e5:60:ba:a1:69:fb:77: 41:41:b9:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2bhVq4LIvXyXAJUMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk NDMyODNlN2UtMjMxMy00OTgyLWI2NGMtNzcxNGY5MTdlOGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXsPWphgpBdD5uVr92Ki63A1L0W//00AE6Fh z2hw/yO87duuHl3lPbGIJVSMzrTmNZ3kHKASz7PWaJXGlqgQf+yuwNjSvZIDjb/X npbwXiK/O1qdbEx7vHXEIhmbgZYB/jd2e1+Glk2WIkbwbzxw2fTaX4O4IFRj5TfQ vrvzUR09ff0qf4khO5eo+oPEjy5iyTIgfcz99Ke5lkQK4FE4mMk2xGEpGNj22SY7 Cfg65+GgYltxBSC0nOERw1CbHMWna5iuaCjIdowDHQAbvMdjyeJmBb45APQq4JWO ZhTG/Qg84n3eX/P/ykcGC0p6ZxB/4aXA6rPkbFBFZDkb04E5UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaRk/NMle0tsqgPYFW0p9to/SgKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzdkY2VjMjgtM2RkNS0z M2U5LWIxYmItMTdiMDM0YTE4YmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESb2HEg5itdj/hqnx4J2x+oGgn1w+xgby9wDW2A1xkfhGkt31m/kAQ+ qXrNNpXhGPOMB6RlT9IGVYM2fbj3Chz1XJn6qmkiWfxtegZ9rEZQ4ZGqUC1bJrtm dm3asia6zfIC5tdGyzIhoqaZvA6DzGsZ0CSwSfpQvnpPwCw1WCzKJnQ5tckoPJpG fp9ijz/sN6Tugod9vJkhumWR+/s7IV8qzbexx1CO112F9ADTsn27ckGn2nacKG09 HC0OGFOvQA+UUxY4biJST1t1pnUrEi5cbaNLn9chtaq5aPXDVS6RxXnuTdeMzDgs mZBWolteOKZXGxZ85WC6oWn7d0FBuRs= -----END CERTIFICATE-----Generated at Wed May 13 09:58:39 2026 by rpki-client