$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14bac7c1-ebe0-340e-83ed-d325f5e09ad1.roa File: 14bac7c1-ebe0-340e-83ed-d325f5e09ad1.roa (raw, json) Hash identifier: w0VPwIFEb+mYoihEf8V1PhchtnCJw4cgzHl1hu7RDas= Subject key identifier: B6:17:03:E7:38:32:E3:9F:79:AE:A4:E0:E2:2F:A3:EF:4A:7D:FF:93 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CC6120BF77DE15D3175C9FDC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14bac7c1-ebe0-340e-83ed-d325f5e09ad1.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.33.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:12:0b:f7:7d:e1:5d:31:75:c9:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=0beb0dd8-a555-4e98-ba29-b0352667ee13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:50:f0:d1:7c:fd:c5:8b:41:27:c1:65:97:58: d6:4d:2c:4e:6e:f0:4a:c8:07:0c:b2:8a:c7:61:65: 19:f2:1e:d9:f3:d7:b7:06:df:42:1d:e9:65:3c:58: 26:d6:16:46:f8:5b:0c:46:f6:17:d9:de:32:be:5d: 88:ae:9c:ee:7b:2c:2e:28:fc:8f:57:95:7c:f1:49: 77:60:ee:d1:9e:e8:da:21:46:cf:97:21:23:b9:20: 01:de:31:bd:b1:ee:31:24:a6:e5:7f:66:b1:11:3f: f5:f8:f6:c0:45:b4:03:7f:d5:39:de:56:54:ff:0c: bf:cf:87:69:1b:c9:ab:13:28:f8:2b:2f:8a:f3:81: 7c:37:ff:42:ec:3b:a7:40:90:0f:be:03:80:59:07: 24:8f:9d:5f:ff:30:61:6f:a2:b5:ac:51:8a:60:40: 7c:99:14:93:c8:ad:b1:22:a8:47:c9:dc:47:87:66: f5:91:f0:ef:30:82:5f:ec:61:b6:11:0a:7e:92:f0: 53:78:f1:8d:dc:2a:5a:a5:c8:d4:85:cb:f6:60:00: fd:f3:01:52:93:6e:a3:cd:43:53:24:41:55:9c:4a: 6f:4f:05:6c:2b:b3:13:91:b2:80:12:85:d9:13:92: 16:ea:20:53:57:25:0a:f2:35:56:27:d3:a8:a2:5d: 0b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:17:03:E7:38:32:E3:9F:79:AE:A4:E0:E2:2F:A3:EF:4A:7D:FF:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/14bac7c1-ebe0-340e-83ed-d325f5e09ad1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d8:33:a2:a8:df:a1:e8:8e:e4:3c:fe:bd:f3:40:47:6b:1e: cc:17:18:12:b7:70:4a:a7:0b:4c:77:0e:fa:4d:da:70:2b:d5: 70:e4:a2:c9:ad:3b:56:7b:3a:36:1a:6b:f0:da:25:49:6f:24: 15:b5:3f:a6:91:88:03:dd:ef:e5:95:0a:df:df:a2:90:7d:33: 5d:cb:3b:0b:d3:a1:66:fd:3f:b9:af:1d:7e:15:a5:03:a1:0d: ee:29:1b:2c:4a:77:22:8c:d9:ca:ca:aa:d0:b4:bc:44:e2:93: 28:a7:2a:47:4e:58:6f:44:e3:07:03:be:1a:6a:0d:ac:f0:9d: 5b:74:26:98:2d:6a:62:06:c6:28:66:42:34:10:4c:fc:99:3b: 19:0d:20:e7:d5:b8:42:1e:5c:d4:62:41:b6:de:05:a4:3c:70: f1:da:72:6d:d4:cc:02:fd:e4:d2:4c:5e:52:f2:30:70:3c:60: c8:ee:3c:99:b9:85:ba:19:1b:cf:fd:99:f2:a2:25:42:16:69: 1c:20:d7:e8:70:cf:97:ee:44:c4:80:e7:e1:67:3a:d6:4e:73: fd:45:e6:8d:a5:d9:fd:0a:0c:fd:08:40:38:fb:80:4d:c3:eb: a9:5e:a1:e3:02:4e:3e:7d:70:76:49:43:81:0d:3c:7f:54:2d: 6b:94:5c:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEgv3feFdMXXJ/cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk MGJlYjBkZDgtYTU1NS00ZTk4LWJhMjktYjAzNTI2NjdlZTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlDw0Xz9xYtBJ8Fll1jWTSxObvBKyAcMsorH YWUZ8h7Z89e3Bt9CHellPFgm1hZG+FsMRvYX2d4yvl2IrpzueywuKPyPV5V88Ul3 YO7RnujaIUbPlyEjuSAB3jG9se4xJKblf2axET/1+PbARbQDf9U53lZU/wy/z4dp G8mrEyj4Ky+K84F8N/9C7DunQJAPvgOAWQckj51f/zBhb6K1rFGKYEB8mRSTyK2x IqhHydxHh2b1kfDvMIJf7GG2EQp+kvBTePGN3CpapcjUhcv2YAD98wFSk26jzUNT JEFVnEpvTwVsK7MTkbKAEoXZE5IW6iBTVyUK8jVWJ9Oool0LawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYXA+c4MuOfea6k4OIvo+9Kff+TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTRiYWM3YzEtZWJlMC0z NDBlLTgzZWQtZDMyNWY1ZTA5YWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrYM6Ko36HojuQ8/r3zQEdrHswXGBK3cEqnC0x3DvpN2nAr1XDkosmt O1Z7OjYaa/DaJUlvJBW1P6aRiAPd7+WVCt/fopB9M13LOwvToWb9P7mvHX4VpQOh De4pGyxKdyKM2crKqtC0vETikyinKkdOWG9E4wcDvhpqDazwnVt0JpgtamIGxihm QjQQTPyZOxkNIOfVuEIeXNRiQbbeBaQ8cPHacm3UzAL95NJMXlLyMHA8YMjuPJm5 hboZG8/9mfKiJUIWaRwg1+hwz5fuRMSA5+FnOtZOc/1F5o2l2f0KDP0IQDj7gE3D 66leoeMCTj59cHZJQ4ENPH9ULWuUXEY= -----END CERTIFICATE-----Generated at Mon Mar 2 16:28:53 2026 by rpki-client