$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28ce3fe1-8f0d-36ad-91a1-188a0656d0a0.roa File: 28ce3fe1-8f0d-36ad-91a1-188a0656d0a0.roa (raw, json) Hash identifier: nWDz6oOnv+cOv3hLk3GQ2BKJMmn71WTY5X7j4tsCkAI= Subject key identifier: 49:AE:BC:77:60:38:1C:A8:88:2D:0C:E4:17:EB:35:08:3A:9F:44:D9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CC7774EE0674EE326371B2400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28ce3fe1-8f0d-36ad-91a1-188a0656d0a0.roa Signing time: Sat 07 Feb 2026 02:00:31 +0000 ROA not before: Sat 07 Feb 2026 02:00:31 +0000 ROA not after: Fri 08 May 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.33.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c7:77:4e:e0:67:4e:e3:26:37:1b:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 7 02:00:31 2026 GMT Not After : May 8 01:00:31 2026 GMT Subject: CN=675760fd-f483-43b3-af5c-88d5eeb9065c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b5:88:60:c8:49:be:2b:fc:d4:a4:db:28:e0: f4:83:df:2f:cc:09:f2:49:a5:d4:a3:bf:56:07:d4: e1:ec:bc:33:e1:c8:33:5d:0e:74:15:6c:ac:ca:36: 0c:6a:b1:2a:68:ee:8d:4f:76:16:65:32:1e:6d:60: c3:b1:64:6b:37:44:13:e4:d8:5b:d0:8e:51:6b:c4: 82:f4:28:ba:58:dd:a3:40:89:3b:24:4e:f2:8f:95: 4f:f5:de:b2:f4:ee:08:a6:52:42:7b:31:f5:82:d8: d4:40:15:7a:3a:d3:8f:49:89:02:9b:31:34:b5:7a: 94:72:6f:de:21:a8:78:6f:40:82:70:d9:33:72:dc: 54:2f:27:b2:36:99:a4:21:c5:74:8e:e8:f3:e0:50: b9:a6:6b:b5:25:1c:b5:99:b8:c3:78:b7:15:71:e2: 1a:98:01:70:04:b1:e5:4c:fd:73:99:8d:9a:85:6b: cb:1b:ae:a7:44:38:a5:ab:aa:30:f3:68:4f:44:74: 58:7d:7c:3d:9c:b2:1a:bd:96:23:72:ef:6c:e9:a1: d7:93:90:ca:fa:67:86:54:45:7d:ab:06:84:67:b8: c8:b9:a9:e8:4c:31:1c:2d:e3:71:51:e2:78:03:35: 1f:c3:37:bd:ef:0e:d2:85:26:a9:2c:45:fc:f6:23: 5c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AE:BC:77:60:38:1C:A8:88:2D:0C:E4:17:EB:35:08:3A:9F:44:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28ce3fe1-8f0d-36ad-91a1-188a0656d0a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:ff:25:8d:40:92:28:f8:e8:85:71:1b:3a:45:6b:60:1e:ed: 60:f9:ad:9e:6b:cb:88:9c:b5:71:c2:bf:50:11:dd:a6:70:e0: d7:23:d0:8d:b0:22:da:71:eb:37:75:59:2e:43:81:a2:03:40: 0e:87:03:51:cb:ee:33:47:d4:9e:37:fe:17:4b:92:10:85:bc: a0:11:9b:d2:fa:55:ec:14:b7:db:c7:19:f4:2c:3f:81:61:95: b3:03:d8:a6:9d:db:0f:30:c6:55:55:87:54:74:71:37:11:25: 88:84:93:32:07:d8:a5:eb:e7:c7:17:f6:ef:69:bb:fe:1c:c6: 92:c0:7d:c9:c9:3f:53:06:51:fb:a3:72:8c:bb:48:b1:cf:c7: f5:d4:62:8d:0f:01:57:b9:1a:f8:2f:62:f6:ac:2d:8f:9b:b8: 62:15:ec:6d:35:7b:63:99:a2:ed:9c:96:b0:7a:2d:94:53:49: c7:ac:ad:d0:eb:bb:d5:a0:10:7d:f5:f9:dd:b1:4e:c7:bb:d4: 3c:5a:77:b7:30:e9:55:30:76:d0:72:50:a8:f3:8d:41:ac:f4: 12:f4:56:2b:98:65:1c:58:e3:03:2e:b0:b0:f9:8a:ec:ff:8a: ad:88:39:a6:fa:7e:eb:26:a9:24:ce:48:fc:75:de:f1:ad:4b: 1b:cc:14:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzHd07gZ07jJjcbJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwNzAyMDAzMVoXDTI2MDUwODAxMDAzMVowLzEtMCsGA1UEAxMk Njc1NzYwZmQtZjQ4My00M2IzLWFmNWMtODhkNWVlYjkwNjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLWIYMhJviv81KTbKOD0g98vzAnySaXUo79W B9Th7Lwz4cgzXQ50FWysyjYMarEqaO6NT3YWZTIebWDDsWRrN0QT5Nhb0I5Ra8SC 9Ci6WN2jQIk7JE7yj5VP9d6y9O4IplJCezH1gtjUQBV6OtOPSYkCmzE0tXqUcm/e Iah4b0CCcNkzctxULyeyNpmkIcV0jujz4FC5pmu1JRy1mbjDeLcVceIamAFwBLHl TP1zmY2ahWvLG66nRDilq6ow82hPRHRYfXw9nLIavZYjcu9s6aHXk5DK+meGVEV9 qwaEZ7jIuanoTDEcLeNxUeJ4AzUfwze97w7ShSapLEX89iNcDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmuvHdgOByoiC0M5BfrNQg6n0TZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjhjZTNmZTEtOGYwZC0z NmFkLTkxYTEtMTg4YTA2NTZkMGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJL/JY1Akij46IVxGzpFa2Ae7WD5rZ5ry4ictXHCv1AR3aZw4Ncj0I2w Itpx6zd1WS5DgaIDQA6HA1HL7jNH1J43/hdLkhCFvKARm9L6VewUt9vHGfQsP4Fh lbMD2Kad2w8wxlVVh1R0cTcRJYiEkzIH2KXr58cX9u9pu/4cxpLAfcnJP1MGUfuj coy7SLHPx/XUYo0PAVe5GvgvYvasLY+buGIV7G01e2OZou2clrB6LZRTScesrdDr u9WgEH31+d2xTse71Dxad7cw6VUwdtByUKjzjUGs9BL0ViuYZRxY4wMusLD5iuz/ iq2IOab6fusmqSTOSPx13vGtSxvMFO4= -----END CERTIFICATE-----Generated at Mon Mar 2 16:29:09 2026 by rpki-client