$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e958850-6659-3d52-bbff-26a04f499d8d.roa File: 4e958850-6659-3d52-bbff-26a04f499d8d.roa (raw, json) Hash identifier: mV8W1S5Oe46kYSeHrBnPaXx7ofZEdxHc8exjTR4IOIU= Subject key identifier: B1:90:2C:6B:F6:03:13:B2:9D:0C:27:02:F8:F5:4B:C2:0A:DD:84:4D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D091270CF064633DF9768CB80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e958850-6659-3d52-bbff-26a04f499d8d.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 8069 IP address blocks: 20.33.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:70:cf:06:46:33:df:97:68:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=04d6e5cb-17b0-43c2-a67a-4258e3f02613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f4:bb:ff:ef:db:da:33:68:8e:5b:56:eb:b7: 31:31:76:a8:8c:cd:c0:ae:ff:e7:6e:ef:1b:52:e7: 80:10:0d:f7:62:ba:7f:83:91:4b:56:3e:df:4e:aa: 7d:38:e3:b9:07:45:11:23:a9:0f:0d:87:67:1e:f4: 3a:f1:79:93:74:a9:9f:51:bc:3f:1d:f1:62:0b:e9: a3:b2:16:8d:f2:2d:4b:4f:97:b4:fa:20:de:18:b1: 92:f3:ec:eb:8d:35:8d:cc:11:e8:b4:ec:12:7c:2f: 0a:a0:1a:a4:88:34:90:dc:32:22:d0:34:ea:5d:52: 7e:5c:ff:f5:74:fe:a1:b6:7f:56:8f:a3:69:af:f1: 0a:74:7e:47:e1:e2:d3:71:14:1e:5e:64:67:bc:53: ce:e6:f7:70:e1:c3:ab:b7:38:5b:b4:54:6f:b6:c5: 83:5f:20:e9:89:aa:a4:43:7c:29:ff:1d:57:3c:eb: 5e:68:05:62:3b:61:28:6d:c8:ef:a2:91:f1:12:51: 97:be:31:71:90:68:24:0c:e4:c7:23:08:46:77:18: 41:0b:4e:bf:fe:86:d9:13:63:27:13:da:dc:a1:ac: 94:3f:90:f8:46:a0:86:16:a0:dd:fd:9a:6d:77:07: 9b:1b:4f:f4:24:bd:a5:e7:43:ac:25:ff:3c:f9:b6: d6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:90:2C:6B:F6:03:13:B2:9D:0C:27:02:F8:F5:4B:C2:0A:DD:84:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e958850-6659-3d52-bbff-26a04f499d8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:30:82:a0:91:3c:6b:f9:91:4e:d3:41:d9:8c:65:10:41:41: ea:68:5d:14:17:a3:08:7e:87:70:bd:88:48:80:81:f3:be:4a: 64:83:c8:52:af:5c:d6:2f:79:1b:d8:ec:c3:02:aa:5d:f4:f5: 54:52:2c:83:4b:0d:84:f0:ce:ca:43:8e:26:d1:84:28:63:fb: 4f:17:6b:1f:fc:cd:ca:b0:dd:f7:43:b2:b9:65:b1:e6:56:ec: bf:d6:ce:4e:e1:43:ab:93:de:d0:be:1c:41:11:13:0b:2c:08: 14:a9:46:07:80:ef:e1:0a:e5:e3:7f:c8:85:9d:46:98:ee:11: bd:8c:25:0b:61:69:c9:c4:7d:b1:51:03:d3:c6:24:fc:63:d4: 7f:b2:af:28:67:50:1c:0d:08:bf:bc:99:9b:c8:e7:88:cc:41: 5d:c1:c2:75:13:b7:89:df:70:b5:d2:9f:09:c3:a6:99:80:7f: 74:af:87:c9:e7:08:84:20:2f:d3:e1:17:d7:1e:ef:3c:e6:28: 17:13:45:8c:aa:34:01:d6:70:8c:f3:3b:a5:28:8d:da:43:f3: 75:c7:42:37:8c:39:51:e6:c8:62:12:5a:f4:6a:0c:34:c2:03: 19:e8:f1:4c:c8:c0:02:76:85:41:02:2e:0e:39:bb:3a:f5:97: 66:8c:f4:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEnDPBkYz35doy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MDRkNmU1Y2ItMTdiMC00M2MyLWE2N2EtNDI1OGUzZjAyNjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/S7/+/b2jNojltW67cxMXaojM3Arv/nbu8b UueAEA33Yrp/g5FLVj7fTqp9OOO5B0URI6kPDYdnHvQ68XmTdKmfUbw/HfFiC+mj shaN8i1LT5e0+iDeGLGS8+zrjTWNzBHotOwSfC8KoBqkiDSQ3DIi0DTqXVJ+XP/1 dP6htn9Wj6Npr/EKdH5H4eLTcRQeXmRnvFPO5vdw4cOrtzhbtFRvtsWDXyDpiaqk Q3wp/x1XPOteaAViO2EobcjvopHxElGXvjFxkGgkDOTHIwhGdxhBC06//obZE2Mn E9rcoayUP5D4RqCGFqDd/ZptdwebG0/0JL2l50OsJf88+bbWiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGQLGv2AxOynQwnAvj1S8IK3YRNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGU5NTg4NTAtNjY1OS0z ZDUyLWJiZmYtMjZhMDRmNDk5ZDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGswgqCRPGv5kU7TQdmMZRBBQepoXRQXowh+h3C9iEiAgfO+SmSDyFKv XNYveRvY7MMCql309VRSLINLDYTwzspDjibRhChj+08Xax/8zcqw3fdDsrllseZW 7L/Wzk7hQ6uT3tC+HEEREwssCBSpRgeA7+EK5eN/yIWdRpjuEb2MJQthacnEfbFR A9PGJPxj1H+yryhnUBwNCL+8mZvI54jMQV3BwnUTt4nfcLXSnwnDppmAf3Svh8nn CIQgL9PhF9ce7zzmKBcTRYyqNAHWcIzzO6UojdpD83XHQjeMOVHmyGISWvRqDDTC Axno8UzIwAJ2hUECLg45uzr1l2aM9Io= -----END CERTIFICATE-----Generated at Mon Mar 2 16:28:17 2026 by rpki-client