$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ff8e386e-f345-3347-af96-09dacf6ef59f.roa File: ff8e386e-f345-3347-af96-09dacf6ef59f.roa (raw, json) Hash identifier: 7+ch/83L2y07vnbqs0KLVYcaP7jvOmlf5fkbqA1iZhA= Subject key identifier: 00:9A:4C:66:AB:D0:6C:F9:CE:5E:6B:F2:30:5F:78:CB:6D:00:CF:24 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D9755677FB50520937537E600 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ff8e386e-f345-3347-af96-09dacf6ef59f.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 8069 IP address blocks: 20.33.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:67:7f:b5:05:20:93:75:37:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=ca3c1903-ffb1-4fa7-91ec-a010952ef3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6d:19:3c:3e:be:d3:e4:b5:c6:6f:71:29:3d: dc:f3:4e:b9:d5:3a:50:47:fa:b2:90:e9:ee:20:6f: 60:3a:1c:4a:bd:fb:ac:c4:b7:c7:56:19:b3:ac:d5: 52:8c:a6:33:c2:1a:93:60:e7:d6:d5:46:00:fa:c4: cc:38:36:81:6f:c0:56:cd:48:d9:e9:cf:ee:ad:be: f4:9d:bd:fe:39:8c:ed:4f:e8:af:4a:30:4d:12:8c: 2c:d2:1f:e3:87:ab:3d:4d:9c:33:b9:c3:23:29:a6: 8f:01:0e:ac:ff:be:48:96:4b:3d:e2:38:f2:b8:cd: de:d5:d4:49:06:e7:84:73:87:72:62:87:3f:bd:42: 58:7c:b0:a6:9d:20:0d:e0:91:4a:ef:b5:f9:28:f4: 8e:6f:a0:8c:66:38:ee:8b:1a:24:7b:5a:c0:93:21: 7e:aa:2b:cb:d9:fa:e0:a8:b7:f3:aa:0c:d5:77:b4: b7:c5:8b:dd:ed:03:e9:c6:e4:a4:f3:e3:4b:07:33: e5:22:a9:5b:a2:07:1a:d9:e4:2c:6c:05:ea:d8:43: 0e:8a:50:46:4b:52:18:44:5f:02:37:10:c0:d7:66: f5:30:8b:c7:77:7c:af:0d:fb:36:79:df:f7:bf:4e: a9:61:ee:b3:2a:c5:90:75:64:9a:03:7d:db:0a:97: 90:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9A:4C:66:AB:D0:6C:F9:CE:5E:6B:F2:30:5F:78:CB:6D:00:CF:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ff8e386e-f345-3347-af96-09dacf6ef59f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:48:25:68:2d:c8:46:f4:b2:8d:db:e8:40:c2:2b:59:70:3e: d0:0d:c8:28:19:49:fa:90:27:ca:f1:b5:0c:c2:b0:9b:32:f6: 59:a4:ee:1c:30:84:53:8f:57:93:40:96:4a:35:79:cb:3d:1c: 0a:ed:88:12:4e:e7:31:ca:0f:17:bc:c0:87:cd:51:cc:c2:6f: c2:fe:e9:ce:77:d7:7f:4e:86:a9:4b:17:19:f0:30:7b:83:ca: f4:1c:17:d7:d4:7d:2a:7d:a0:ca:d8:eb:0a:eb:54:6f:20:6d: a7:3e:25:cc:b1:29:01:0f:28:df:84:d8:8c:28:6a:cc:35:a3: cb:25:d1:a0:b8:ce:7c:03:12:e9:4f:f3:74:6d:4c:10:ac:70: 57:8f:4c:08:c5:f4:e7:8b:b2:e2:d4:3f:c0:45:bb:1a:c9:a3: c8:f4:16:50:cc:7c:53:35:88:44:66:1e:b3:f0:5b:1c:39:fa: cc:1a:c0:06:42:47:f0:33:33:02:05:97:8d:6c:c1:c4:8b:0a: 7a:50:90:d2:4d:3f:6b:7c:2a:d6:af:3a:3e:db:07:80:0a:3f: cd:70:0b:aa:10:80:e0:e7:de:2d:0b:29:a0:a0:67:8e:a2:b1: cc:31:a9:56:f1:2d:45:ce:71:69:fc:45:2a:07:93:53:c6:fe: 40:d6:86:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XVWd/tQUgk3U35gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk Y2EzYzE5MDMtZmZiMS00ZmE3LTkxZWMtYTAxMDk1MmVmM2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkG0ZPD6+0+S1xm9xKT3c80651TpQR/qykOnu IG9gOhxKvfusxLfHVhmzrNVSjKYzwhqTYOfW1UYA+sTMODaBb8BWzUjZ6c/urb70 nb3+OYztT+ivSjBNEows0h/jh6s9TZwzucMjKaaPAQ6s/75Ilks94jjyuM3e1dRJ BueEc4dyYoc/vUJYfLCmnSAN4JFK77X5KPSOb6CMZjjuixoke1rAkyF+qivL2frg qLfzqgzVd7S3xYvd7QPpxuSk8+NLBzPlIqlbogca2eQsbAXq2EMOilBGS1IYRF8C NxDA12b1MIvHd3yvDfs2ed/3v06pYe6zKsWQdWSaA33bCpeQaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACaTGar0Gz5zl5r8jBfeMttAM8kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZmY4ZTM4NmUtZjM0NS0z MzQ3LWFmOTYtMDlkYWNmNmVmNTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCF7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVIJWgtyEb0so3b6EDCK1lwPtANyCgZSfqQJ8rxtQzCsJsy9lmk7hww hFOPV5NAlko1ecs9HArtiBJO5zHKDxe8wIfNUczCb8L+6c53139OhqlLFxnwMHuD yvQcF9fUfSp9oMrY6wrrVG8gbac+JcyxKQEPKN+E2Iwoasw1o8sl0aC4znwDEulP 83RtTBCscFePTAjF9OeLsuLUP8BFuxrJo8j0FlDMfFM1iERmHrPwWxw5+swawAZC R/AzMwIFl41swcSLCnpQkNJNP2t8KtavOj7bB4AKP81wC6oQgODn3i0LKaCgZ46i scwxqVbxLUXOcWn8RSoHk1PG/kDWhiY= -----END CERTIFICATE-----Generated at Wed May 13 14:29:53 2026 by rpki-client