$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b8dfed92-9681-3c25-8cdc-e320f158c88a.roa File: b8dfed92-9681-3c25-8cdc-e320f158c88a.roa (raw, json) Hash identifier: EEHqiAE26S1IeB8mDfgDNpfFOtGVHtPeRP9JZFStMC4= Subject key identifier: F3:E1:F9:7D:37:94:17:4D:99:1B:6F:71:D6:1C:37:10:8D:72:07:42 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DCAFB0D16D1111E3583D6CA28 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b8dfed92-9681-3c25-8cdc-e320f158c88a.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:0d:16:d1:11:1e:35:83:d6:ca:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=3d75c658-0db5-4547-bc8e-a47bcf496ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2b:65:9f:3d:9b:f3:80:6b:67:21:9a:1a:c0: 37:b0:a8:06:33:0d:90:79:33:95:21:59:6b:3c:2f: 83:1b:e7:1b:e1:47:26:fc:4c:20:61:1f:2d:a9:48: 9d:6d:03:30:cb:91:4a:1a:b0:83:3b:35:27:aa:89: 0e:aa:da:c9:44:3b:3d:6e:68:20:93:be:a8:4a:f1: bd:20:3b:fd:8a:5a:ec:72:cf:0f:ac:da:78:f7:2a: 77:01:02:58:1d:41:cc:d3:23:fc:e0:d1:79:24:84: 35:b4:d8:78:c6:b5:9c:3e:33:47:d1:83:02:74:2f: 7f:a1:59:01:99:98:de:06:d1:aa:e8:93:5b:f5:22: f6:7c:12:8b:6f:c2:cd:c3:00:33:6a:3b:b2:e6:2d: cc:b8:42:97:c0:a1:bb:2a:5d:bf:90:a5:3b:c1:97: 65:e6:05:02:f9:2b:ab:57:d1:31:42:ef:df:dd:0c: c6:44:89:7f:c9:a5:8f:f6:d3:2c:42:86:47:a6:1d: 58:75:6e:51:38:f5:86:65:f0:18:c7:84:68:33:64: 4a:e2:8c:e5:01:0e:75:57:c3:77:7c:9c:f5:a4:66: af:14:8a:3d:ab:ee:c1:28:3e:8f:13:5e:77:d4:6d: 4c:43:ed:6d:93:8a:62:b8:f8:d8:7d:59:d1:c6:42: fe:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E1:F9:7D:37:94:17:4D:99:1B:6F:71:D6:1C:37:10:8D:72:07:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b8dfed92-9681-3c25-8cdc-e320f158c88a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:63:10:90:49:44:22:98:07:d4:7b:8c:9e:e0:d7:4c:c1:d6: 49:f8:dd:69:e1:4e:55:bf:58:50:93:63:15:2f:b5:7c:56:8a: f4:87:62:b2:d3:42:bf:39:88:2f:ad:d7:4a:24:e9:03:20:45: 28:33:9c:c1:56:7b:56:49:e7:b2:8d:ab:ec:82:8a:d9:f0:a5: c5:e7:a4:32:13:2a:02:33:24:bf:93:ac:56:53:e9:2c:e6:d1: 80:8a:6f:3c:4e:15:f0:37:71:6c:2c:21:77:a8:de:84:9f:fd: c0:ea:71:9d:7b:84:e4:99:5a:78:1f:e6:b7:8d:66:2a:37:cb: 3a:53:8c:f7:0d:fb:8c:5e:86:14:85:d1:f2:7c:a3:23:e1:57: 6f:b4:39:30:d7:8e:a4:ed:34:7f:ad:d2:3a:9c:94:ee:5e:93: ec:7d:1e:b7:ac:c2:b1:17:4b:9c:b6:f4:bb:bc:03:f8:eb:31: 82:04:6d:b1:3b:06:6d:72:c4:ba:6f:a3:49:6c:3e:75:95:75: d8:69:57:d7:f6:70:51:1b:5f:b6:5d:0c:20:b6:2d:de:d9:15: e5:05:36:10:32:e1:a2:ad:58:c7:ee:e9:60:9d:dc:14:b0:9f: f4:3f:32:6b:a6:2f:b4:0d:31:29:26:97:26:57:05:bd:37:1e: f6:fd:54:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+w0W0REeNYPWyigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk M2Q3NWM2NTgtMGRiNS00NTQ3LWJjOGUtYTQ3YmNmNDk2YmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxStlnz2b84BrZyGaGsA3sKgGMw2QeTOVIVlr PC+DG+cb4Ucm/EwgYR8tqUidbQMwy5FKGrCDOzUnqokOqtrJRDs9bmggk76oSvG9 IDv9ilrscs8PrNp49yp3AQJYHUHM0yP84NF5JIQ1tNh4xrWcPjNH0YMCdC9/oVkB mZjeBtGq6JNb9SL2fBKLb8LNwwAzajuy5i3MuEKXwKG7Kl2/kKU7wZdl5gUC+Sur V9ExQu/f3QzGRIl/yaWP9tMsQoZHph1YdW5ROPWGZfAYx4RoM2RK4ozlAQ51V8N3 fJz1pGavFIo9q+7BKD6PE1531G1MQ+1tk4piuPjYfVnRxkL+xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPh+X03lBdNmRtvcdYcNxCNcgdCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjhkZmVkOTItOTY4MS0z YzI1LThjZGMtZTMyMGYxNThjODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtjEJBJRCKYB9R7jJ7g10zB1kn43WnhTlW/WFCTYxUvtXxWivSHYrLT Qr85iC+t10ok6QMgRSgznMFWe1ZJ57KNq+yCitnwpcXnpDITKgIzJL+TrFZT6Szm 0YCKbzxOFfA3cWwsIXeo3oSf/cDqcZ17hOSZWngf5reNZio3yzpTjPcN+4xehhSF 0fJ8oyPhV2+0OTDXjqTtNH+t0jqclO5ek+x9HreswrEXS5y29Lu8A/jrMYIEbbE7 Bm1yxLpvo0lsPnWVddhpV9f2cFEbX7ZdDCC2Ld7ZFeUFNhAy4aKtWMfu6WCd3BSw n/Q/MmumL7QNMSkmlyZXBb03Hvb9VAc= -----END CERTIFICATE-----Generated at Wed May 13 09:25:13 2026 by rpki-client