$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e8355b70-b3ac-3440-a538-b39c041c2270.roa File: e8355b70-b3ac-3440-a538-b39c041c2270.roa (raw, json) Hash identifier: 5s8JnS4jwmloeXhO/c3IdiwGHHZI54iH9aqOwgozMBc= Subject key identifier: 58:F3:9E:69:E3:5E:24:50:6A:6F:76:B6:CC:BD:EF:93:D9:B8:EA:FC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DA8158A39598D368C13B7E900 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e8355b70-b3ac-3440-a538-b39c041c2270.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 8069 IP address blocks: 20.33.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:8a:39:59:8d:36:8c:13:b7:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=38ab9273-ba15-4900-82ef-9e56e0e521d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f1:7d:bd:e9:5d:34:75:ce:9b:70:a0:2c:92: 84:c3:fa:e4:66:3b:3c:6c:7b:ee:22:c0:11:15:27: 1d:8e:d0:ca:84:58:83:c9:92:64:ed:e3:13:9d:9e: fc:cb:86:a9:92:c8:e0:c9:18:04:d4:86:1a:61:a9: 3c:79:0b:7e:d4:de:5b:93:f9:99:90:2f:55:57:b9: b9:3e:83:87:bf:b4:59:4d:bb:0a:d7:8f:53:df:44: 95:08:4c:fa:d4:7d:7a:17:3d:64:9c:cc:11:aa:94: 2d:7f:7f:3b:8a:ac:b7:67:e2:9b:d2:33:69:9a:ea: d5:ea:64:c7:2f:da:e2:c2:bf:b1:c1:da:d0:fe:d9: af:00:0d:38:67:3f:62:ca:54:a2:f5:09:c2:90:37: bf:f1:f8:f1:79:16:d7:4f:e4:ee:56:b6:0e:cd:03: 1a:66:57:3e:b2:59:06:91:fc:35:c1:57:46:b3:ae: d7:b1:72:0d:5f:22:c8:46:87:94:0e:05:99:c7:c1: 94:c1:d2:69:a6:8a:d6:2c:da:26:ad:1b:aa:54:81: 7c:b5:b0:5c:5c:44:19:bf:b1:4b:75:be:b7:1b:de: 34:43:7f:cf:05:3a:48:29:19:b1:61:1b:b8:ab:e3: c4:7c:2a:e7:29:3f:f2:3d:eb:a5:b6:de:38:95:4c: 22:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F3:9E:69:E3:5E:24:50:6A:6F:76:B6:CC:BD:EF:93:D9:B8:EA:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e8355b70-b3ac-3440-a538-b39c041c2270.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:fc:28:39:13:14:fb:a8:4f:90:6f:bc:88:cf:32:75:81:7f: 6f:c6:18:87:ee:7b:67:42:2d:21:11:a7:3a:09:1d:67:9e:9e: 2d:7e:8d:86:8f:57:28:2c:f9:67:db:6b:1d:62:d7:1a:88:78: d7:1e:92:3d:91:2d:ae:79:62:3d:93:da:65:9b:e9:69:5c:65: 0b:01:3f:a2:52:72:0c:1d:46:3b:30:3c:1a:b0:22:74:ad:2d: c4:4d:46:3f:9c:9f:d1:88:d7:47:1b:a7:9b:55:f8:4e:d5:70: 3a:02:9f:57:22:4b:78:d0:65:b3:3b:69:eb:e9:04:e9:2c:b9: c7:21:7a:ff:02:3b:e0:a2:d5:60:c9:10:32:b9:95:b2:fd:dd: 95:23:56:50:c5:80:e9:1f:4e:63:3e:f8:78:a7:76:28:25:56: a6:ca:6f:8b:6e:dd:82:fe:a1:5a:74:9d:79:88:5a:30:0d:3d: 8c:ba:16:80:a5:a3:44:6d:a9:62:5d:7d:63:70:d4:fa:1e:5c: 1c:92:53:7f:3e:be:5e:28:ed:95:c1:8c:0d:7f:23:a9:ad:97: ca:22:1c:85:bf:28:aa:c9:fe:c8:a5:0b:87:f4:78:0c:70:9b: c4:a4:b0:ab:5a:e0:ac:59:f0:49:d9:c2:84:76:f7:39:c2:49: 2c:4a:23:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFYo5WY02jBO36QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk MzhhYjkyNzMtYmExNS00OTAwLTgyZWYtOWU1NmUwZTUyMWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfF9veldNHXOm3CgLJKEw/rkZjs8bHvuIsAR FScdjtDKhFiDyZJk7eMTnZ78y4apksjgyRgE1IYaYak8eQt+1N5bk/mZkC9VV7m5 PoOHv7RZTbsK149T30SVCEz61H16Fz1knMwRqpQtf387iqy3Z+Kb0jNpmurV6mTH L9riwr+xwdrQ/tmvAA04Zz9iylSi9QnCkDe/8fjxeRbXT+TuVrYOzQMaZlc+slkG kfw1wVdGs67XsXINXyLIRoeUDgWZx8GUwdJpporWLNomrRuqVIF8tbBcXEQZv7FL db63G940Q3/PBTpIKRmxYRu4q+PEfCrnKT/yPeultt44lUwi7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjznmnjXiRQam92tsy975PZuOr8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTgzNTViNzAtYjNhYy0z NDQwLWE1MzgtYjM5YzA0MWMyMjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCHeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGH8KDkTFPuoT5BvvIjPMnWBf2/GGIfue2dCLSERpzoJHWeeni1+jYaP Vygs+Wfbax1i1xqIeNcekj2RLa55Yj2T2mWb6WlcZQsBP6JScgwdRjswPBqwInSt LcRNRj+cn9GI10cbp5tV+E7VcDoCn1ciS3jQZbM7aevpBOksucchev8CO+Ci1WDJ EDK5lbL93ZUjVlDFgOkfTmM++HindiglVqbKb4tu3YL+oVp0nXmIWjANPYy6FoCl o0RtqWJdfWNw1PoeXBySU38+vl4o7ZXBjA1/I6mtl8oiHIW/KKrJ/silC4f0eAxw m8SksKta4KxZ8EnZwoR29znCSSxKI/Y= -----END CERTIFICATE-----Generated at Wed May 13 14:23:23 2026 by rpki-client