$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0944b58f-2c51-3787-a810-732d8f208d66.roa File: 0944b58f-2c51-3787-a810-732d8f208d66.roa (raw, json) Hash identifier: zxK05x5YUFD2twRJfhrhWNkn8gVxuz6hoRaK0MIaHwM= Subject key identifier: 2D:76:80:7E:18:6D:A6:90:30:A4:37:66:7B:B5:10:74:5B:07:F8:5A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CDC678E9A344CEC574749AE20 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0944b58f-2c51-3787-a810-732d8f208d66.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 8069 IP address blocks: 20.33.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:8e:9a:34:4c:ec:57:47:49:ae:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=03740860-3e9e-4da5-a17d-bd3989bd0f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1b:d0:96:32:6b:37:62:7e:7a:80:41:16:ef: ac:b5:ac:3c:55:34:2f:d9:eb:66:18:14:94:68:be: ef:48:85:b3:47:7b:e8:f5:24:eb:88:80:fe:31:3a: 20:35:da:ce:19:aa:b8:2f:95:17:e7:0b:16:4b:0b: b6:31:be:5f:7c:26:e1:aa:26:dd:ce:76:d8:4d:8a: e6:3f:5b:b6:e6:24:bc:13:50:ca:49:05:36:d2:a4: 86:98:61:cf:d9:dc:1d:d2:a6:99:bd:6b:e4:78:1d: 49:db:b7:ec:53:57:14:0e:e3:ee:ef:26:09:b9:47: fb:8d:fd:9e:59:25:77:af:49:c3:2e:65:26:30:f4: 33:71:2a:25:28:ef:b1:ea:fa:d6:f7:ce:0a:26:98: b3:b5:30:18:44:7e:de:c4:36:77:d8:e9:44:76:1b: 72:c9:2b:af:09:84:59:9f:72:c6:c6:9e:3d:e9:5c: cd:e5:ed:68:e3:79:b2:ff:25:25:cc:2d:aa:62:94: f4:3c:44:74:a3:81:55:12:8a:07:73:6c:d7:ff:ea: d6:72:1e:4b:b2:a1:da:2b:29:77:8f:8e:17:4e:8e: fc:9a:76:07:c3:36:fe:14:2e:6c:07:69:05:5c:d5: 69:f9:48:ad:2e:fe:34:ec:be:b1:8b:67:db:4f:09: 08:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:76:80:7E:18:6D:A6:90:30:A4:37:66:7B:B5:10:74:5B:07:F8:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0944b58f-2c51-3787-a810-732d8f208d66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:25:42:95:dd:ea:a9:e8:bf:82:8d:9a:37:98:c8:f2:a6:ee: 50:e1:e0:bc:24:52:74:62:cd:c9:00:50:50:51:73:9e:d7:c9: 61:06:90:dd:90:24:6d:d7:44:ea:4f:27:6d:74:8e:0a:25:c7: 01:1f:c4:f7:74:bb:a1:1f:53:ca:39:39:10:09:d7:f7:82:6e: eb:4d:35:9d:8b:c7:29:37:bb:06:c0:ef:32:07:15:a0:ef:4c: 47:ce:4c:0f:37:87:e9:20:97:f9:a3:aa:55:e8:37:24:44:d2: dc:cb:f8:59:ec:8b:a8:e7:0f:93:aa:55:bd:b0:d6:4c:d4:68: 6d:d3:5b:3a:af:ff:12:4d:15:fd:8c:fd:9b:f5:34:ef:70:ad: 5b:15:7b:37:3e:bd:df:58:8d:80:7e:44:74:14:2b:22:2c:d1: b5:a3:9c:4c:70:b5:65:83:f0:02:18:3b:90:f3:10:2e:7a:45: 08:98:7c:11:5e:85:fc:da:98:c5:4d:20:ec:f5:97:0d:6d:d8: bb:d3:f2:ec:88:cb:47:1c:b5:02:53:2c:47:19:37:fb:98:e2: 52:89:de:12:85:a0:69:db:52:d8:ae:cc:55:f5:ff:4b:fc:a9: 2d:b5:f6:10:bb:e2:28:66:92:8b:24:33:44:e3:e2:56:1f:ee: 50:61:10:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ46aNEzsV0dJriAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk MDM3NDA4NjAtM2U5ZS00ZGE1LWExN2QtYmQzOTg5YmQwZjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBvQljJrN2J+eoBBFu+staw8VTQv2etmGBSU aL7vSIWzR3vo9STriID+MTogNdrOGaq4L5UX5wsWSwu2Mb5ffCbhqibdznbYTYrm P1u25iS8E1DKSQU20qSGmGHP2dwd0qaZvWvkeB1J27fsU1cUDuPu7yYJuUf7jf2e WSV3r0nDLmUmMPQzcSolKO+x6vrW984KJpiztTAYRH7exDZ32OlEdhtyySuvCYRZ n3LGxp496VzN5e1o43my/yUlzC2qYpT0PER0o4FVEooHc2zX/+rWch5LsqHaKyl3 j44XTo78mnYHwzb+FC5sB2kFXNVp+UitLv407L6xi2fbTwkIkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC12gH4YbaaQMKQ3Znu1EHRbB/haMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDk0NGI1OGYtMmM1MS0z Nzg3LWE4MTAtNzMyZDhmMjA4ZDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8lQpXd6qnov4KNmjeYyPKm7lDh4LwkUnRizckAUFBRc57XyWEGkN2Q JG3XROpPJ210jgolxwEfxPd0u6EfU8o5ORAJ1/eCbutNNZ2Lxyk3uwbA7zIHFaDv TEfOTA83h+kgl/mjqlXoNyRE0tzL+Fnsi6jnD5OqVb2w1kzUaG3TWzqv/xJNFf2M /Zv1NO9wrVsVezc+vd9YjYB+RHQUKyIs0bWjnExwtWWD8AIYO5DzEC56RQiYfBFe hfzamMVNIOz1lw1t2LvT8uyIy0cctQJTLEcZN/uY4lKJ3hKFoGnbUtiuzFX1/0v8 qS219hC74ihmkoskM0Tj4lYf7lBhELg= -----END CERTIFICATE-----Generated at Mon Mar 2 21:56:22 2026 by rpki-client