$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f45acc02-de81-35fc-8583-59e61118770c.roa File: f45acc02-de81-35fc-8583-59e61118770c.roa (raw, json) Hash identifier: TPhwMQog8gyQku4JPgrPBp3GU/KD/N80gkD1RQUuFuM= Subject key identifier: D4:9C:79:97:D9:AC:3B:F4:5F:B0:6E:F4:0D:C9:E9:AC:5C:E2:9E:A0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DADAAE7C931F2CF3E77DE5580 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f45acc02-de81-35fc-8583-59e61118770c.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 8069 IP address blocks: 20.33.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:e7:c9:31:f2:cf:3e:77:de:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=f09e468d-b16a-455e-94f1-11cd74930e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3b:5e:7e:80:62:71:be:e5:c2:85:c7:c1:b7: d3:87:05:26:b1:3a:7e:4b:f1:d7:25:e3:d9:ae:80: bf:6c:a4:ee:cf:4a:cf:78:bf:1c:63:b8:aa:a5:72: 18:89:a0:d2:6a:b5:b6:8f:69:ac:4f:0b:eb:d3:8b: 3d:b4:45:e5:fd:a7:70:38:17:d2:18:08:c5:5f:2e: a9:32:7f:df:cd:9c:91:75:c5:4d:59:b4:9d:17:6a: b6:2d:c8:24:fd:c0:79:dc:84:51:12:87:bb:46:15: aa:8d:8e:5c:c4:0c:a7:75:2d:99:6a:b0:51:49:0e: 2a:d7:c0:57:50:77:e4:fa:75:58:a5:d0:cd:b0:bf: 9e:ad:7f:99:ae:37:0b:32:30:67:33:9b:72:32:19: 58:b5:c2:12:ff:d8:44:e5:11:6a:b3:91:67:27:47: 83:44:5a:40:8f:1e:0f:73:57:50:93:1f:a2:1a:97: 18:d9:c4:00:3c:ad:a2:0a:5f:7c:a9:c7:8a:08:db: 12:a8:1d:91:f5:57:7d:ec:cd:a9:93:4f:06:c6:12: 25:6a:40:7c:15:74:5a:ac:a6:05:ac:82:db:a2:df: 69:d4:4b:4c:0c:e5:8b:70:b1:1b:aa:24:ca:9f:a4: 59:5b:c1:4c:c9:64:71:61:42:d8:cc:2b:ac:06:19: 1b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9C:79:97:D9:AC:3B:F4:5F:B0:6E:F4:0D:C9:E9:AC:5C:E2:9E:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f45acc02-de81-35fc-8583-59e61118770c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:17:be:1d:98:3f:b8:39:d7:ca:2c:90:c0:7a:71:45:a1:95: 4b:31:99:ef:44:69:38:42:f7:36:55:7b:45:6e:43:4e:59:38: 48:b3:68:6b:47:4e:ab:88:bf:dc:d8:2e:fd:57:96:7b:e8:28: b3:6d:39:77:b9:54:ed:47:7a:d9:31:a2:99:81:ca:aa:b2:ee: 60:78:a9:d1:b2:fd:b0:4d:97:87:b5:42:53:6d:58:1d:d6:72: b4:77:b2:4a:d7:9e:55:57:2d:5d:63:2c:5b:fc:6d:f3:b5:35: 0a:2c:8b:d8:c7:88:9f:a3:8d:bf:62:a2:f4:0b:bc:6b:89:66: ef:12:7e:a3:07:30:40:ae:cc:35:fd:eb:65:88:b8:a0:26:49: 40:8a:1d:3a:44:69:6a:3f:7f:94:55:e0:94:22:7d:76:1b:78: 6e:d0:82:56:49:b4:f8:b1:07:6b:02:6b:a6:d6:9f:c6:75:63: f8:b8:8b:02:1b:b5:60:01:b3:0c:05:7d:be:69:59:4c:c9:1f: 09:07:7b:b7:9f:8f:12:e7:c9:69:1b:c5:c7:a0:49:bb:30:73: e2:f5:1d:f4:de:77:e7:04:a7:e1:fd:20:e2:36:90:0b:d1:aa: 02:2b:f3:53:db:8f:c9:d7:ce:b0:28:63:d0:11:bf:43:f2:81: 58:ea:44:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tqufJMfLPPnfeVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk ZjA5ZTQ2OGQtYjE2YS00NTVlLTk0ZjEtMTFjZDc0OTMwZTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDtefoBicb7lwoXHwbfThwUmsTp+S/HXJePZ roC/bKTuz0rPeL8cY7iqpXIYiaDSarW2j2msTwvr04s9tEXl/adwOBfSGAjFXy6p Mn/fzZyRdcVNWbSdF2q2Lcgk/cB53IRREoe7RhWqjY5cxAyndS2ZarBRSQ4q18BX UHfk+nVYpdDNsL+erX+ZrjcLMjBnM5tyMhlYtcIS/9hE5RFqs5FnJ0eDRFpAjx4P c1dQkx+iGpcY2cQAPK2iCl98qceKCNsSqB2R9Vd97M2pk08GxhIlakB8FXRarKYF rILbot9p1EtMDOWLcLEbqiTKn6RZW8FMyWRxYULYzCusBhkbXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSceZfZrDv0X7Bu9A3J6axc4p6gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjQ1YWNjMDItZGU4MS0z NWZjLTg1ODMtNTllNjExMTg3NzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwXvh2YP7g518oskMB6cUWhlUsxme9EaThC9zZVe0VuQ05ZOEizaGtH TquIv9zYLv1XlnvoKLNtOXe5VO1HetkxopmByqqy7mB4qdGy/bBNl4e1QlNtWB3W crR3skrXnlVXLV1jLFv8bfO1NQosi9jHiJ+jjb9iovQLvGuJZu8SfqMHMECuzDX9 62WIuKAmSUCKHTpEaWo/f5RV4JQifXYbeG7QglZJtPixB2sCa6bWn8Z1Y/i4iwIb tWABswwFfb5pWUzJHwkHe7efjxLnyWkbxcegSbswc+L1HfTed+cEp+H9IOI2kAvR qgIr81Pbj8nXzrAoY9ARv0PygVjqRJg= -----END CERTIFICATE-----Generated at Wed May 13 14:48:44 2026 by rpki-client