$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5937f320-e64d-3772-84e9-bde88f69a677.roa File: 5937f320-e64d-3772-84e9-bde88f69a677.roa (raw, json) Hash identifier: +HqNMOHaU/I9G2jfdTQwCqBRvWc5/vEA9qvNnaR1eCw= Subject key identifier: 41:E7:F9:7B:BA:7B:CD:98:0B:58:4D:85:49:D8:D3:0F:86:7E:D2:B2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CCD0CA94E82307CAC1D575D80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5937f320-e64d-3772-84e9-bde88f69a677.roa Signing time: Mon 09 Feb 2026 02:00:31 +0000 ROA not before: Mon 09 Feb 2026 02:00:31 +0000 ROA not after: Sun 10 May 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.33.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cd:0c:a9:4e:82:30:7c:ac:1d:57:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 9 02:00:31 2026 GMT Not After : May 10 01:00:31 2026 GMT Subject: CN=dfea348d-19cd-47ef-ba17-039e96cc1df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b6:98:43:23:ec:96:fb:42:ca:e4:55:ff:c1: d2:81:e8:08:ba:e9:46:dd:a8:6d:ac:4b:1e:5a:d3: c9:1a:54:5b:1c:f7:7f:51:67:02:5c:9f:c6:40:8d: 44:75:db:63:01:16:2a:93:b8:0f:6f:ea:06:29:ae: 3b:56:96:0a:f4:46:ca:76:7c:cf:2e:35:3a:6d:2b: be:55:bf:04:0a:61:c6:a9:f6:85:2e:a8:c9:24:7b: d1:c4:bd:1d:b8:11:9b:86:59:c3:5a:8c:d2:22:68: f4:d2:40:9f:77:72:f2:9f:55:93:31:e1:82:9b:54: d2:b1:fc:ca:00:ce:1d:10:ae:a1:f4:69:31:e3:8f: 24:3f:7f:8f:b0:0d:05:51:58:e6:4d:d8:3c:ab:72: 7e:8c:b8:3d:12:87:a6:3e:67:e4:c2:77:44:db:43: 61:fe:a5:cb:eb:3c:d2:e0:3d:0c:36:5b:bd:70:44: f6:de:26:52:e9:ca:1a:0d:f5:d1:f1:ae:88:da:57: 35:56:cd:b1:75:e0:98:cf:7a:34:c0:99:71:cb:11: 9d:67:73:d0:e6:e8:85:50:76:21:c5:5f:e6:09:7d: dd:20:85:f0:b4:30:ad:ba:f1:54:f0:e5:1a:52:b5: c9:60:0e:65:35:1f:dd:5d:14:10:6c:ca:f7:83:fb: 27:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E7:F9:7B:BA:7B:CD:98:0B:58:4D:85:49:D8:D3:0F:86:7E:D2:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5937f320-e64d-3772-84e9-bde88f69a677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:de:d4:90:38:66:b0:ff:e4:72:4e:eb:19:2b:52:0b:ed:b8: e7:c9:f9:69:a3:dd:b8:c8:cf:88:41:56:12:56:a9:60:a5:c0: be:fa:5a:28:0e:b4:1e:75:30:85:bb:f2:d3:ce:a8:85:f9:88: 9a:93:be:67:f0:10:fe:4f:65:98:3d:fd:ed:9d:8f:0f:7d:d0: 31:76:7a:8b:33:c3:0f:ea:69:b2:fc:5e:a3:cf:03:5c:8d:0f: 6f:37:ff:1f:36:21:90:e8:b8:60:36:8b:36:b8:43:fb:74:fc: 6f:4a:f5:6e:3f:03:45:e0:04:e3:d7:48:91:63:48:f7:9d:cd: 85:b7:06:cc:c1:db:67:2a:3c:06:b7:5f:9a:ee:28:8b:60:6d: d7:c5:7b:53:e1:5d:58:76:27:15:b1:78:5e:87:d1:46:ec:f3: 98:fa:f4:06:9d:ae:e0:b6:b0:73:fb:87:bc:12:c7:4b:99:b3: cb:3a:27:d8:19:5b:8a:db:fe:87:3a:71:cf:d4:40:84:b2:54: 77:22:f0:26:0f:36:e2:e8:4d:02:0a:dd:31:11:bd:cc:2f:00: a8:b8:a1:68:32:ad:75:bc:30:21:9d:18:c6:35:75:02:ec:87: a2:0d:f5:7a:d1:b8:09:6e:1d:3e:cb:3c:5a:b5:01:dc:3b:77: 2a:b0:03:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzNDKlOgjB8rB1XXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk ZGZlYTM0OGQtMTljZC00N2VmLWJhMTctMDM5ZTk2Y2MxZGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnraYQyPslvtCyuRV/8HSgegIuulG3ahtrEse WtPJGlRbHPd/UWcCXJ/GQI1EddtjARYqk7gPb+oGKa47VpYK9EbKdnzPLjU6bSu+ Vb8ECmHGqfaFLqjJJHvRxL0duBGbhlnDWozSImj00kCfd3Lyn1WTMeGCm1TSsfzK AM4dEK6h9Gkx448kP3+PsA0FUVjmTdg8q3J+jLg9EoemPmfkwndE20Nh/qXL6zzS 4D0MNlu9cET23iZS6coaDfXR8a6I2lc1Vs2xdeCYz3o0wJlxyxGdZ3PQ5uiFUHYh xV/mCX3dIIXwtDCtuvFU8OUaUrXJYA5lNR/dXRQQbMr3g/sn0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHn+Xu6e82YC1hNhUnY0w+GftKyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTkzN2YzMjAtZTY0ZC0z NzcyLTg0ZTktYmRlODhmNjlhNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTe1JA4ZrD/5HJO6xkrUgvtuOfJ+Wmj3bjIz4hBVhJWqWClwL76WigO tB51MIW78tPOqIX5iJqTvmfwEP5PZZg9/e2djw990DF2eoszww/qabL8XqPPA1yN D283/x82IZDouGA2iza4Q/t0/G9K9W4/A0XgBOPXSJFjSPedzYW3BszB22cqPAa3 X5ruKItgbdfFe1PhXVh2JxWxeF6H0Ubs85j69AadruC2sHP7h7wSx0uZs8s6J9gZ W4rb/oc6cc/UQISyVHci8CYPNuLoTQIK3TERvcwvAKi4oWgyrXW8MCGdGMY1dQLs h6IN9XrRuAluHT7LPFq1Adw7dyqwA38= -----END CERTIFICATE-----Generated at Mon Mar 2 16:28:58 2026 by rpki-client