$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14a380d8-92fd-3622-b799-436fce5ea07c.roa File: 14a380d8-92fd-3622-b799-436fce5ea07c.roa (raw, json) Hash identifier: 6w806/IZZnuUAF9fIKSKfCQdK3gYuY5/eTxk4980suU= Subject key identifier: 6E:1C:3D:20:2E:41:24:51:48:FD:89:1A:CE:D3:14:A6:67:C7:EE:A4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CC6120A4E7A1A2B7B3AC18340 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14a380d8-92fd-3622-b799-436fce5ea07c.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.33.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:12:0a:4e:7a:1a:2b:7b:3a:c1:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=3f1a6799-4700-4e2a-9530-b55974b6239e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d6:da:c9:1c:7b:f6:a0:c4:9f:47:83:5e:39: 6c:ba:d6:60:1d:f4:cf:48:d3:16:4b:d1:ce:fa:d9: d6:15:c8:3a:cf:74:4b:14:5e:6f:c6:a5:83:93:24: 02:5f:e6:d8:6b:a0:e0:ca:9f:fd:a6:74:c3:29:84: 5b:61:d3:27:f8:81:65:4c:b3:9f:a4:15:d6:b6:aa: 2c:46:21:d0:cd:25:50:90:a2:5a:88:5a:29:cc:9b: 60:bd:2e:74:ef:f3:3b:97:71:a0:7a:11:b1:8f:af: ba:c4:7b:5e:55:75:af:35:73:f3:06:2a:b1:a0:e4: df:5f:7b:7c:d9:52:d2:0b:2d:ad:6b:1d:40:06:24: 04:d5:45:94:d1:41:5c:b4:bd:00:f2:56:a8:78:a0: 94:e6:0c:f4:57:b4:07:8d:df:7a:03:e3:3b:2f:2f: ee:af:e6:89:24:4e:19:b5:5a:29:c7:75:d5:31:af: 68:bb:fd:d3:c0:cd:0a:5d:fd:24:b8:c2:13:c2:42: 46:09:b3:5f:72:b1:25:bf:72:93:08:84:9c:c4:9a: fb:3a:66:03:e0:c7:ca:4c:4c:10:ad:53:4e:a9:f2: ae:88:6a:b9:ce:24:9f:c3:11:fd:ba:fa:c5:dc:74: 02:05:37:06:13:99:b9:ae:14:37:d0:3d:65:56:66: f6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:1C:3D:20:2E:41:24:51:48:FD:89:1A:CE:D3:14:A6:67:C7:EE:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14a380d8-92fd-3622-b799-436fce5ea07c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:34:bd:ed:a0:46:dd:df:2a:3d:7a:70:a4:fb:e7:36:ad:f6: 6b:ed:bf:39:65:fb:5c:30:73:7f:13:12:7d:03:22:c4:d4:ce: 7e:09:5d:6f:e0:ac:77:cc:44:a7:82:32:fb:4f:c1:83:8d:85: e1:41:5b:27:b0:4c:ef:56:97:49:33:c3:40:6b:66:da:39:16: 63:27:bf:34:d2:98:49:21:29:ff:86:d2:36:a8:98:30:dd:96: 12:a5:d4:c7:b7:f4:2f:ea:58:5f:67:13:f6:80:af:00:a1:50: 61:98:3a:24:28:ac:fc:eb:a1:c5:79:24:d6:07:b1:74:13:67: 46:91:0d:d5:7d:27:88:97:a5:67:3e:cc:a0:8e:8f:83:5b:5d: c1:e1:86:03:fe:e0:f6:9d:70:e7:59:2d:ff:38:4c:51:53:27: 30:ed:61:d9:08:a9:46:fd:cb:72:98:20:b9:f8:e8:b3:79:4c: b7:84:de:4a:e0:1d:aa:da:b7:77:d4:3e:b7:b5:4b:a8:52:7b: 36:cf:e3:ad:f9:a5:07:88:d1:df:7f:de:5f:b7:c4:3e:38:47: 58:4b:2e:78:79:ae:b1:03:54:53:90:04:51:bd:d5:0c:d9:86: 78:3a:18:09:84:0e:48:f4:b8:f1:df:2d:bc:7f:eb:a6:44:d5: 41:7d:15:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEgpOehorezrBg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk M2YxYTY3OTktNDcwMC00ZTJhLTk1MzAtYjU1OTc0YjYyMzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitbayRx79qDEn0eDXjlsutZgHfTPSNMWS9HO +tnWFcg6z3RLFF5vxqWDkyQCX+bYa6Dgyp/9pnTDKYRbYdMn+IFlTLOfpBXWtqos RiHQzSVQkKJaiFopzJtgvS507/M7l3GgehGxj6+6xHteVXWvNXPzBiqxoOTfX3t8 2VLSCy2tax1ABiQE1UWU0UFctL0A8laoeKCU5gz0V7QHjd96A+M7Ly/ur+aJJE4Z tVopx3XVMa9ou/3TwM0KXf0kuMITwkJGCbNfcrElv3KTCIScxJr7OmYD4MfKTEwQ rVNOqfKuiGq5ziSfwxH9uvrF3HQCBTcGE5m5rhQ30D1lVmb2rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4cPSAuQSRRSP2JGs7TFKZnx+6kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTRhMzgwZDgtOTJmZC0z NjIyLWI3OTktNDM2ZmNlNWVhMDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI80ve2gRt3fKj16cKT75zat9mvtvzll+1wwc38TEn0DIsTUzn4JXW/g rHfMRKeCMvtPwYONheFBWyewTO9Wl0kzw0BrZto5FmMnvzTSmEkhKf+G0jaomDDd lhKl1Me39C/qWF9nE/aArwChUGGYOiQorPzrocV5JNYHsXQTZ0aRDdV9J4iXpWc+ zKCOj4NbXcHhhgP+4PadcOdZLf84TFFTJzDtYdkIqUb9y3KYILn46LN5TLeE3krg Harat3fUPre1S6hSezbP4635pQeI0d9/3l+3xD44R1hLLnh5rrEDVFOQBFG91QzZ hng6GAmEDkj0uPHfLbx/66ZE1UF9FZc= -----END CERTIFICATE-----Generated at Mon Mar 2 18:24:59 2026 by rpki-client