$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/50659308-5102-3fed-ac9a-ec288f3afe84.roa File: 50659308-5102-3fed-ac9a-ec288f3afe84.roa (raw, json) Hash identifier: Oxc3wwVvPOh+Gh0VzqhzylCYRFkHzgNql72iD6n2E3o= Subject key identifier: 76:53:B5:5E:14:D8:6B:00:E3:F7:89:F2:85:FD:AA:FC:EB:E0:3E:F0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CB28747818A446BD43C382900 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/50659308-5102-3fed-ac9a-ec288f3afe84.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.33.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:47:81:8a:44:6b:d4:3c:38:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=81d6367a-2776-4b60-b146-b83af6b99429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:22:dc:76:73:83:15:59:ea:8b:2b:a6:94:32: 89:88:d2:a3:1a:5b:ba:25:c5:f2:b6:48:9d:7b:73: 4d:fe:25:38:38:71:2a:75:94:fc:4c:7a:f2:8c:07: 46:f1:05:16:dd:f7:95:fc:33:b9:40:87:dd:b0:0b: b7:7d:46:90:c8:5f:ee:4f:7e:25:0a:2d:68:e0:3c: 69:30:62:9b:e6:45:6c:6e:16:6c:5a:5f:27:c9:54: dc:1a:70:cf:19:6b:15:53:cf:0f:42:ce:e5:b9:33: de:40:2e:dc:47:c9:72:f7:7a:4f:63:58:9c:93:9e: 7a:5b:1f:c3:aa:2b:ab:7b:f5:69:71:56:fe:75:51: 2b:d7:a4:9e:46:e5:d9:31:f9:09:a0:18:73:69:21: 00:47:25:98:84:86:1b:9d:7f:a9:e7:77:89:d3:dd: 4e:46:d1:5b:b5:6c:c2:ec:d8:00:54:f9:dd:bc:24: c6:f4:10:15:fd:79:28:4e:54:f5:e1:6c:e6:40:d1: 53:3f:95:b6:60:d5:11:a5:73:3a:d4:2e:8e:fb:df: ae:46:8e:12:c2:ac:94:c3:39:e6:b1:03:c3:49:3c: db:79:d2:24:fa:af:40:ee:ba:35:29:91:f6:e3:97: 52:dc:dc:8c:f1:03:5f:cd:af:f4:81:bb:dc:47:db: 3e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:53:B5:5E:14:D8:6B:00:E3:F7:89:F2:85:FD:AA:FC:EB:E0:3E:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/50659308-5102-3fed-ac9a-ec288f3afe84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ac:79:d5:8f:e5:70:d1:57:70:ca:01:40:dd:c4:c3:70:ff: 94:1d:7e:01:19:e0:63:9f:ad:7e:2c:d9:25:68:93:35:b0:45: 28:8f:10:6b:db:46:09:15:4f:65:9b:8f:4f:32:7b:12:0c:f1: ff:97:3a:22:9b:33:2d:42:75:d2:0f:f5:ea:81:95:de:04:0f: da:70:b7:43:12:4d:1f:68:3f:47:89:67:dc:bf:30:9c:78:b5: ad:33:71:a7:5e:5c:26:b5:25:3a:ac:89:c2:aa:a8:ec:5f:08: 13:5a:db:99:3f:3f:c4:5a:42:61:98:bb:0e:55:f1:23:8b:30: 48:3a:ad:5d:22:1a:2e:20:c4:1a:3d:d6:55:12:16:8e:75:62: 88:64:33:49:e1:b7:2f:f9:53:b3:7d:48:19:d8:5a:a0:bd:59: 94:62:7c:6f:e6:95:c7:b9:55:70:8f:ed:12:63:24:cc:e0:64: 03:d0:44:db:2a:55:65:ce:bf:be:ed:c5:67:a7:62:dd:a5:29: e3:92:ca:b5:88:03:f8:5e:2e:69:0a:cf:44:8f:dd:b5:ce:c9: ef:14:98:9a:58:b1:92:10:05:0b:62:01:83:60:9e:4b:b5:d6: 7b:e6:7f:e6:1d:06:d6:2e:9a:b6:8f:d4:28:33:87:ff:aa:9f: 39:30:26:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyh0eBikRr1Dw4KQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk ODFkNjM2N2EtMjc3Ni00YjYwLWIxNDYtYjgzYWY2Yjk5NDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SLcdnODFVnqiyumlDKJiNKjGlu6JcXytkid e3NN/iU4OHEqdZT8THryjAdG8QUW3feV/DO5QIfdsAu3fUaQyF/uT34lCi1o4Dxp MGKb5kVsbhZsWl8nyVTcGnDPGWsVU88PQs7luTPeQC7cR8ly93pPY1ick556Wx/D qiure/VpcVb+dVEr16SeRuXZMfkJoBhzaSEARyWYhIYbnX+p53eJ091ORtFbtWzC 7NgAVPndvCTG9BAV/XkoTlT14WzmQNFTP5W2YNURpXM61C6O+9+uRo4SwqyUwznm sQPDSTzbedIk+q9A7ro1KZH245dS3NyM8QNfza/0gbvcR9s+fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZTtV4U2GsA4/eJ8oX9qvzr4D7wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTA2NTkzMDgtNTEwMi0z ZmVkLWFjOWEtZWMyODhmM2FmZTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACasedWP5XDRV3DKAUDdxMNw/5QdfgEZ4GOfrX4s2SVokzWwRSiPEGvb RgkVT2Wbj08yexIM8f+XOiKbMy1CddIP9eqBld4ED9pwt0MSTR9oP0eJZ9y/MJx4 ta0zcadeXCa1JTqsicKqqOxfCBNa25k/P8RaQmGYuw5V8SOLMEg6rV0iGi4gxBo9 1lUSFo51YohkM0nhty/5U7N9SBnYWqC9WZRifG/mlce5VXCP7RJjJMzgZAPQRNsq VWXOv77txWenYt2lKeOSyrWIA/heLmkKz0SP3bXOye8UmJpYsZIQBQtiAYNgnku1 1nvmf+YdBtYumraP1Cgzh/+qnzkwJl4= -----END CERTIFICATE-----Generated at Mon Mar 2 16:50:28 2026 by rpki-client