$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5611583f-0381-377c-8dab-8bb3ddb62332.roa File: 5611583f-0381-377c-8dab-8bb3ddb62332.roa (raw, json) Hash identifier: vhjzGNEIvGRAW5CPRDz8kzkuLDyDq3j/EzNSBput7QI= Subject key identifier: 94:9C:23:8C:89:3F:02:E7:85:74:90:29:F5:44:BA:4A:86:FB:AB:0E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CB551F8614B604C93A62DA2E0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5611583f-0381-377c-8dab-8bb3ddb62332.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 8069 IP address blocks: 20.33.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:f8:61:4b:60:4c:93:a6:2d:a2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=472dd49d-791d-4a09-8c48-20b98b858192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d9:4e:6c:bd:70:a3:62:7e:7d:7c:7f:3a:5b: fb:34:d7:2f:ab:68:4c:58:dd:17:03:72:1f:49:76: 37:b0:88:e5:07:58:f3:66:91:46:b7:41:fb:4e:c7: 99:72:59:fc:3a:45:b7:e5:0b:f3:e0:7f:aa:31:ea: f8:e6:79:6e:ee:7c:3c:fc:98:fd:7b:5c:3a:ef:31: 5c:17:20:59:52:36:1b:6e:af:aa:3a:08:d8:5d:0e: 64:b7:28:b4:a1:42:e3:22:bb:bd:d1:1c:64:3b:e8: fd:08:fe:e7:c4:cf:e4:f1:a1:4c:23:50:06:12:1d: d8:3f:95:59:67:63:26:dc:6a:2c:76:1b:6e:c8:9d: 14:45:ad:f0:76:aa:c8:20:9c:a2:b4:72:34:6c:86: ac:fc:26:b7:e1:3b:25:10:7a:4c:4c:ff:3c:e0:98: bd:3b:26:ae:b4:f2:87:d8:e5:81:a6:89:43:07:2e: 38:74:da:1c:6a:0f:4c:a8:61:35:56:a0:6c:70:4b: 45:a3:57:0c:e9:eb:fd:d3:58:e7:e0:98:f3:85:f0: ab:3e:7c:95:98:75:e6:83:9a:52:0c:01:fd:5d:76: 7c:b9:21:dd:28:a7:42:4d:52:ef:5f:2c:73:8e:7b: 31:ef:82:e4:ce:ed:ea:76:0d:74:d3:d2:d2:01:65: 78:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9C:23:8C:89:3F:02:E7:85:74:90:29:F5:44:BA:4A:86:FB:AB:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5611583f-0381-377c-8dab-8bb3ddb62332.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:f6:bf:5e:44:8e:6e:f4:d5:16:e8:07:1b:90:52:cc:5d:a9: cc:5f:71:48:a8:1a:d2:23:3f:a1:c3:2b:40:94:45:12:b1:25: 4d:b1:03:1c:56:35:f4:79:4b:27:01:0c:fb:f8:50:15:17:83: 55:2d:64:de:90:03:5f:65:ee:e6:1f:6f:3f:f0:b9:d1:26:03: 54:18:39:40:6d:4c:6b:2f:32:f3:29:8d:75:8c:ef:4f:60:c9: d1:d9:14:26:c3:38:09:06:dc:f0:d7:7a:8b:87:f1:ff:42:06: 57:12:17:db:3d:05:a0:d4:70:1e:f1:a7:af:c7:72:20:6a:db: e9:fd:fe:1c:1b:d0:df:5a:4c:e3:ef:df:42:fa:58:83:7d:71: 03:42:c8:5d:c3:3b:e7:4f:2b:01:90:51:b6:05:03:71:a4:57: 1a:7d:11:6c:60:bc:47:b4:e8:0a:8a:d2:a7:ee:8c:47:23:d7: 66:da:91:23:93:5b:da:d6:52:1c:0b:55:83:2a:b5:82:2f:e1: dc:ac:41:d3:28:c1:e0:f9:a8:ec:bc:23:56:dd:b2:e8:41:cc: 99:aa:f9:48:01:1e:59:76:a9:5d:95:56:25:ab:c9:1b:82:c5: 9e:48:60:96:91:56:76:7c:50:ae:d4:be:f3:7e:16:83:92:6c: 8e:5d:48:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1UfhhS2BMk6YtouAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk NDcyZGQ0OWQtNzkxZC00YTA5LThjNDgtMjBiOThiODU4MTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodlObL1wo2J+fXx/Olv7NNcvq2hMWN0XA3If SXY3sIjlB1jzZpFGt0H7TseZcln8OkW35Qvz4H+qMer45nlu7nw8/Jj9e1w67zFc FyBZUjYbbq+qOgjYXQ5ktyi0oULjIru90RxkO+j9CP7nxM/k8aFMI1AGEh3YP5VZ Z2Mm3GosdhtuyJ0URa3wdqrIIJyitHI0bIas/Ca34TslEHpMTP884Ji9OyautPKH 2OWBpolDBy44dNocag9MqGE1VqBscEtFo1cM6ev901jn4JjzhfCrPnyVmHXmg5pS DAH9XXZ8uSHdKKdCTVLvXyxzjnsx74Lkzu3qdg1009LSAWV4TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJScI4yJPwLnhXSQKfVEukqG+6sOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTYxMTU4M2YtMDM4MS0z NzdjLThkYWItOGJiM2RkYjYyMzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIr2v15Ejm701RboBxuQUsxdqcxfcUioGtIjP6HDK0CURRKxJU2xAxxW NfR5SycBDPv4UBUXg1UtZN6QA19l7uYfbz/wudEmA1QYOUBtTGsvMvMpjXWM709g ydHZFCbDOAkG3PDXeouH8f9CBlcSF9s9BaDUcB7xp6/HciBq2+n9/hwb0N9aTOPv 30L6WIN9cQNCyF3DO+dPKwGQUbYFA3GkVxp9EWxgvEe06AqK0qfujEcj12bakSOT W9rWUhwLVYMqtYIv4dysQdMoweD5qOy8I1bdsuhBzJmq+UgBHll2qV2VViWryRuC xZ5IYJaRVnZ8UK7UvvN+FoOSbI5dSPQ= -----END CERTIFICATE-----Generated at Mon Mar 2 20:06:29 2026 by rpki-client