$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c849a306-4c2a-3fc3-b123-c6713222f536.roa File: c849a306-4c2a-3fc3-b123-c6713222f536.roa (raw, json) Hash identifier: a1ovXxOGBidruQjSDK3CnMuquB1Zq9PSly9svVosg6c= Subject key identifier: A4:AA:3B:AF:D8:E3:3E:28:CF:C0:D9:92:EB:62:6E:C9:D4:52:15:17 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DDD207D7F15A1445FC5D01280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c849a306-4c2a-3fc3-b123-c6713222f536.roa Signing time: Sun 17 May 2026 13:00:32 +0000 ROA not before: Sun 17 May 2026 13:00:32 +0000 ROA not after: Sat 15 Aug 2026 13:00:32 +0000 asID: 8069 IP address blocks: 20.33.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:dd:20:7d:7f:15:a1:44:5f:c5:d0:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 17 13:00:32 2026 GMT Not After : Aug 15 13:00:32 2026 GMT Subject: CN=70800235-7360-4ced-9bce-0a76fe72bb6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3d:32:a1:c8:6f:2f:92:26:9e:9b:73:70:8a: c4:32:38:b4:b8:cc:f2:8a:30:39:c6:4d:9e:80:9e: b9:3d:43:6d:ee:0d:9b:b6:d7:45:db:0a:aa:e4:7a: 35:c7:43:1e:b0:96:5c:a1:2c:7a:02:4f:df:af:99: a6:c3:39:46:a2:d6:e6:13:a8:04:15:ce:26:cb:bf: 4a:c5:2d:d1:72:22:1f:bb:42:fa:72:80:27:ff:a0: ea:02:a7:d0:89:38:53:fd:0b:60:d9:89:a0:32:3a: de:1e:ed:1d:3b:19:71:49:25:fc:a4:99:f3:5c:4a: df:bc:2c:a3:d7:f8:28:9a:f2:9d:1c:80:9c:c7:48: 6c:d5:97:6b:0b:8b:6f:8e:7c:cb:fc:85:cb:c2:9c: 78:41:1b:7b:ee:f0:fd:98:cb:66:b6:f8:d4:01:96: ee:eb:ac:7f:ca:be:aa:e7:63:13:1c:a7:46:f8:a2: 55:7e:aa:b5:12:6c:93:36:17:e7:ad:dd:d3:5e:28: 04:85:69:11:a5:4f:a9:3c:25:c1:d1:21:95:9a:6d: 4f:0b:14:87:07:df:e8:e4:71:b5:09:b9:e5:d4:64: 56:00:b1:55:85:c7:af:dc:00:4b:c4:d0:9c:a5:46: 6c:76:80:28:0e:11:97:8f:34:e8:f3:1d:c5:05:aa: 6e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:AA:3B:AF:D8:E3:3E:28:CF:C0:D9:92:EB:62:6E:C9:D4:52:15:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c849a306-4c2a-3fc3-b123-c6713222f536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:fe:ae:08:ae:9e:5c:cb:3d:44:07:eb:a5:36:f4:b3:ea:0b: 95:e0:c8:61:14:c7:8d:c0:7f:e1:4d:c7:10:18:6b:02:7a:5d: 28:dc:c8:48:7f:6c:f5:60:73:53:ee:de:c6:08:0f:46:24:0e: fb:b8:25:63:58:6e:f4:f9:1a:16:b5:5c:0f:ce:ad:e8:e9:52: c7:34:85:37:6e:33:d3:4a:22:1a:73:17:f1:03:98:63:1c:9a: a1:7d:ba:e8:4d:2f:c9:75:e7:05:1f:a6:b3:ff:0c:8b:33:ec: bf:59:4b:a3:f0:bc:00:e1:7f:95:11:35:80:3b:ec:fc:53:ce: 08:ce:0a:34:bc:39:db:ec:24:33:8d:11:79:19:07:53:db:68: a7:3c:d9:81:ce:98:b6:e8:2f:3d:62:a8:e0:ca:10:23:8e:5b: 9a:75:e8:c8:23:ad:21:06:60:eb:0b:33:ae:b9:74:af:c0:e3: 7b:00:ab:12:9b:13:0a:65:e0:84:56:dd:e0:4e:74:33:0b:ab: b4:27:b0:fe:99:8f:1d:11:1d:d6:fc:68:50:1b:1d:1f:30:82: 9d:f2:e3:10:1d:05:6d:37:0e:c5:bb:18:78:28:d7:c7:d4:98: 0d:2f:c7:73:3c:c8:a1:93:1f:f0:37:45:1c:cd:2e:00:e4:39: 9e:8c:8b:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3dIH1/FaFEX8XQEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUxNzEzMDAzMloXDTI2MDgxNTEzMDAzMlowLzEtMCsGA1UEAxMk NzA4MDAyMzUtNzM2MC00Y2VkLTliY2UtMGE3NmZlNzJiYjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz0yochvL5ImnptzcIrEMji0uMzyijA5xk2e gJ65PUNt7g2bttdF2wqq5Ho1x0MesJZcoSx6Ak/fr5mmwzlGotbmE6gEFc4my79K xS3RciIfu0L6coAn/6DqAqfQiThT/Qtg2YmgMjreHu0dOxlxSSX8pJnzXErfvCyj 1/gomvKdHICcx0hs1ZdrC4tvjnzL/IXLwpx4QRt77vD9mMtmtvjUAZbu66x/yr6q 52MTHKdG+KJVfqq1EmyTNhfnrd3TXigEhWkRpU+pPCXB0SGVmm1PCxSHB9/o5HG1 Cbnl1GRWALFVhcev3ABLxNCcpUZsdoAoDhGXjzTo8x3FBapuTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSqO6/Y4z4oz8DZkutibsnUUhUXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzg0OWEzMDYtNGMyYS0z ZmMzLWIxMjMtYzY3MTMyMjJmNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFT+rgiunlzLPUQH66U29LPqC5XgyGEUx43Af+FNxxAYawJ6XSjcyEh/ bPVgc1Pu3sYID0YkDvu4JWNYbvT5Gha1XA/OrejpUsc0hTduM9NKIhpzF/EDmGMc mqF9uuhNL8l15wUfprP/DIsz7L9ZS6PwvADhf5URNYA77PxTzgjOCjS8OdvsJDON EXkZB1PbaKc82YHOmLboLz1iqODKECOOW5p16MgjrSEGYOsLM665dK/A43sAqxKb Ewpl4IRW3eBOdDMLq7QnsP6Zjx0RHdb8aFAbHR8wgp3y4xAdBW03DsW7GHgo18fU mA0vx3M8yKGTH/A3RRzNLgDkOZ6MiwI= -----END CERTIFICATE-----Generated at Sat Jun 6 14:46:39 2026 by rpki-client