$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01a3c2a1-2f63-34b0-8a64-c14151d1f457.roa File: 01a3c2a1-2f63-34b0-8a64-c14151d1f457.roa (raw, json) Hash identifier: fTRgYUdyN5ncU7PhN7lQIgA6463SQcvotWfNiNlINdM= Subject key identifier: 38:2F:CC:F8:1B:2F:EE:59:23:CD:30:8D:58:79:35:96:82:F7:76:87 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DDD207ED85FD6559718AD2C90 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01a3c2a1-2f63-34b0-8a64-c14151d1f457.roa Signing time: Sun 17 May 2026 13:00:32 +0000 ROA not before: Sun 17 May 2026 13:00:32 +0000 ROA not after: Sat 15 Aug 2026 13:00:32 +0000 asID: 8069 IP address blocks: 20.33.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:dd:20:7e:d8:5f:d6:55:97:18:ad:2c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 17 13:00:32 2026 GMT Not After : Aug 15 13:00:32 2026 GMT Subject: CN=0947ba9d-74d2-46da-95d1-7599faea9876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:14:33:83:98:0c:68:3f:23:02:3c:73:c6:de: a9:ab:42:00:9e:f3:52:ea:9c:e2:54:12:90:19:7d: 6b:90:40:ab:4a:4f:85:a1:db:e7:72:c8:6f:a9:66: bc:62:d3:fb:aa:3b:93:ec:6f:29:94:36:f0:5b:ae: 06:6b:a0:4c:0c:0d:10:dd:c5:ad:5e:42:82:c8:1e: e2:ac:15:c3:ec:e8:bf:2f:c4:67:ea:9c:c4:ad:be: 3c:df:d3:f5:4a:8b:15:55:e5:98:12:3b:bd:35:fd: d4:2d:fa:23:dd:59:9b:e4:bc:48:cc:df:9e:f6:79: 53:c2:0f:06:28:f1:6c:79:20:d9:59:c6:d3:62:85: 0c:38:a0:c1:8f:02:71:82:87:47:7e:0d:23:0c:ca: 27:e4:4e:8b:9d:31:cb:a4:3d:06:ac:67:b7:31:11: 14:e7:af:c4:61:3d:7d:21:ab:d6:d9:e2:de:fe:86: ac:7a:84:c0:21:ca:81:0f:e0:76:33:19:c8:82:7d: 65:12:3c:18:32:bd:70:33:2c:94:c6:d9:5a:22:51: b5:17:de:98:f9:56:f2:d6:f9:a4:3f:53:1d:74:6c: 02:92:e8:23:50:01:47:eb:01:88:d6:3b:d4:d7:c4: 63:1c:4c:a2:ad:c2:6b:b8:d6:13:56:9b:ae:23:36: 1f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2F:CC:F8:1B:2F:EE:59:23:CD:30:8D:58:79:35:96:82:F7:76:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01a3c2a1-2f63-34b0-8a64-c14151d1f457.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:e6:fe:f3:98:11:43:ee:17:fa:2f:46:d4:8e:ef:8c:59:ee: 83:3c:81:57:a7:83:58:d3:72:1b:b4:dc:24:43:f1:d8:66:26: 21:6a:8c:75:2f:76:2b:c2:f1:f1:f5:f7:d0:e3:ae:a9:3e:b6: bc:9c:7f:69:eb:74:e3:41:b9:7b:f9:18:bc:91:4d:f1:fb:ab: e2:1d:ec:88:f4:bb:df:c3:c8:5f:bb:1f:6a:c6:63:46:88:e4: 31:0b:ca:76:2f:1c:c4:3f:0e:ca:51:01:15:9f:a7:77:76:01: 58:a2:f4:75:e1:d4:5a:96:65:a8:43:41:d3:6c:d7:4c:04:8e: 28:b6:55:7f:a3:2e:58:5f:f9:7d:d1:9a:ab:da:a1:45:af:e1: 85:b5:5d:5f:e6:24:b0:16:ad:8b:05:25:94:eb:c8:05:95:6d: 3d:d2:b7:fc:1b:57:d5:d5:00:9e:37:ab:a0:70:b5:e3:88:87: a4:a0:21:9a:46:eb:6a:63:7a:bd:0a:6f:fa:7c:1f:3b:ea:f1: 11:fa:26:0a:a7:f4:fd:75:ac:91:bb:25:fb:d0:b1:af:33:11: 29:2e:3f:eb:8c:8c:d1:97:00:1f:c1:36:c3:3f:71:47:2d:81: 39:59:4d:ee:08:5e:79:0f:2a:5f:7d:04:6f:62:dd:52:b2:2d: 3e:2f:e1:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3dIH7YX9ZVlxitLJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUxNzEzMDAzMloXDTI2MDgxNTEzMDAzMlowLzEtMCsGA1UEAxMk MDk0N2JhOWQtNzRkMi00NmRhLTk1ZDEtNzU5OWZhZWE5ODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxQzg5gMaD8jAjxzxt6pq0IAnvNS6pziVBKQ GX1rkECrSk+FodvncshvqWa8YtP7qjuT7G8plDbwW64Ga6BMDA0Q3cWtXkKCyB7i rBXD7Oi/L8Rn6pzErb4839P1SosVVeWYEju9Nf3ULfoj3Vmb5LxIzN+e9nlTwg8G KPFseSDZWcbTYoUMOKDBjwJxgodHfg0jDMon5E6LnTHLpD0GrGe3MREU56/EYT19 IavW2eLe/oaseoTAIcqBD+B2MxnIgn1lEjwYMr1wMyyUxtlaIlG1F96Y+Vby1vmk P1MddGwCkugjUAFH6wGI1jvU18RjHEyircJruNYTVpuuIzYftwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgvzPgbL+5ZI80wjVh5NZaC93aHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDFhM2MyYTEtMmY2My0z NGIwLThhNjQtYzE0MTUxZDFmNDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPm/vOYEUPuF/ovRtSO74xZ7oM8gVeng1jTchu03CRD8dhmJiFqjHUv divC8fH199Djrqk+trycf2nrdONBuXv5GLyRTfH7q+Id7Ij0u9/DyF+7H2rGY0aI 5DELynYvHMQ/DspRARWfp3d2AVii9HXh1FqWZahDQdNs10wEjii2VX+jLlhf+X3R mqvaoUWv4YW1XV/mJLAWrYsFJZTryAWVbT3St/wbV9XVAJ43q6BwteOIh6SgIZpG 62pjer0Kb/p8Hzvq8RH6Jgqn9P11rJG7JfvQsa8zESkuP+uMjNGXAB/BNsM/cUct gTlZTe4IXnkPKl99BG9i3VKyLT4v4R4= -----END CERTIFICATE-----Generated at Sat Jun 6 14:46:24 2026 by rpki-client