$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/826b271f-edee-3676-98e4-6d4c334e95f2.roa File: 826b271f-edee-3676-98e4-6d4c334e95f2.roa (raw, json) Hash identifier: aWYZr++Bbn0P8un24RzEn1mUvo84eVxBK83v5atJLFI= Subject key identifier: F3:78:20:77:03:F0:31:5E:D2:72:24:C2:C3:85:E9:DA:C0:CC:08:0C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D9755682B8BABFBEBC71BD500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/826b271f-edee-3676-98e4-6d4c334e95f2.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 8069 IP address blocks: 20.33.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:68:2b:8b:ab:fb:eb:c7:1b:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=783e8e0a-749e-45d6-a2e9-c798afd852f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:41:4d:c7:96:8a:a3:d4:6f:ff:c7:0b:c7:73: e2:de:df:24:52:e2:e6:b7:dd:82:58:b8:c5:e2:6e: ae:db:a8:c9:f1:5a:bc:6a:24:c3:de:0a:82:7c:76: 44:5f:f9:77:67:0f:38:86:19:3b:4f:ef:fc:84:10: f9:ad:8b:54:82:f6:4b:68:25:84:32:db:2a:44:d1: e2:90:8a:98:c7:a0:a3:fd:95:ee:c8:42:b6:4e:c0: 24:8c:9c:ed:dc:71:52:95:bf:0d:e7:21:74:0f:14: 3c:b3:b8:23:0c:8c:4a:ca:15:12:02:02:06:29:2f: 44:e3:96:64:51:fa:c4:17:bb:3d:0d:67:65:28:75: 52:b1:16:c1:80:82:c7:05:81:a8:cf:48:0d:55:31: 63:da:47:06:0b:d4:21:ce:56:72:f0:e4:c1:c2:03: 16:e6:18:18:fc:8a:d9:e1:68:b6:8b:51:db:c2:31: 99:fd:1c:8f:0f:d9:c1:3d:91:5e:41:b5:72:20:0c: 90:f3:a9:5a:8f:a2:44:cc:95:c6:eb:5a:29:9f:cf: fb:f6:4e:8b:ea:a6:f0:9c:17:21:11:82:1e:be:43: 56:51:fa:89:50:c1:98:7e:b6:b8:af:bc:3a:e1:b9: 7a:5f:e5:de:81:a1:1e:6c:03:25:7b:54:21:8e:14: 7d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:78:20:77:03:F0:31:5E:D2:72:24:C2:C3:85:E9:DA:C0:CC:08:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/826b271f-edee-3676-98e4-6d4c334e95f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:eb:42:a3:52:cf:3d:57:30:c3:ca:18:fa:fd:22:cc:4b:68: 8e:e2:50:d8:fa:58:49:18:56:06:79:d8:a7:3d:55:e9:e8:37: 78:aa:57:1d:11:82:5c:54:d0:bc:1c:85:e7:f2:66:86:cd:fe: 9b:fc:48:c1:ce:60:36:11:9f:39:46:4e:e9:8d:37:96:41:2b: 76:e4:46:93:94:20:82:36:81:bb:c1:46:3a:ba:43:ee:9a:82: 14:81:a2:5a:94:b4:42:0e:9d:8f:b0:29:f8:e3:c7:a7:b2:07: a2:2e:f5:21:71:66:40:5f:40:4d:6c:95:fa:23:59:8e:ea:c8: e6:c9:31:f8:8d:48:af:69:98:cd:c5:9a:de:a2:07:35:f5:19: 6f:ef:61:3c:20:47:bb:ee:00:3f:14:d6:e2:eb:d4:ea:81:d7: e7:ff:16:59:a9:cd:9c:4a:29:17:8a:c3:7a:b8:c8:26:84:51: dc:93:b6:89:5a:cf:8f:d0:d5:19:68:eb:62:a5:dc:ca:3e:57: 20:cc:a4:48:4c:ff:1d:77:ca:be:20:bc:2b:02:db:25:d8:2c: 08:50:60:b7:05:a5:92:33:8a:47:e6:86:60:fe:56:42:ce:f8: 5d:d8:36:5c:fd:62:59:aa:64:1d:2a:46:af:b8:31:71:e6:ae: d8:51:86:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XVWgri6v768cb1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk NzgzZThlMGEtNzQ5ZS00NWQ2LWEyZTktYzc5OGFmZDg1MmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkFNx5aKo9Rv/8cLx3Pi3t8kUuLmt92CWLjF 4m6u26jJ8Vq8aiTD3gqCfHZEX/l3Zw84hhk7T+/8hBD5rYtUgvZLaCWEMtsqRNHi kIqYx6Cj/ZXuyEK2TsAkjJzt3HFSlb8N5yF0DxQ8s7gjDIxKyhUSAgIGKS9E45Zk UfrEF7s9DWdlKHVSsRbBgILHBYGoz0gNVTFj2kcGC9QhzlZy8OTBwgMW5hgY/IrZ 4Wi2i1HbwjGZ/RyPD9nBPZFeQbVyIAyQ86laj6JEzJXG61opn8/79k6L6qbwnBch EYIevkNWUfqJUMGYfra4r7w64bl6X+XegaEebAMle1QhjhR9/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPN4IHcD8DFe0nIkwsOF6drAzAgMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODI2YjI3MWYtZWRlZS0z Njc2LTk4ZTQtNmQ0YzMzNGU5NWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDrQqNSzz1XMMPKGPr9IsxLaI7iUNj6WEkYVgZ52Kc9VenoN3iqVx0R glxU0LwchefyZobN/pv8SMHOYDYRnzlGTumNN5ZBK3bkRpOUIII2gbvBRjq6Q+6a ghSBolqUtEIOnY+wKfjjx6eyB6Iu9SFxZkBfQE1slfojWY7qyObJMfiNSK9pmM3F mt6iBzX1GW/vYTwgR7vuAD8U1uLr1OqB1+f/FlmpzZxKKReKw3q4yCaEUdyTtola z4/Q1Rlo62Kl3Mo+VyDMpEhM/x13yr4gvCsC2yXYLAhQYLcFpZIzikfmhmD+VkLO +F3YNlz9YlmqZB0qRq+4MXHmrthRhts= -----END CERTIFICATE-----Generated at Wed May 13 09:29:58 2026 by rpki-client