$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/17797fbe-976b-3a44-971c-5db64cddcfc1.roa File: 17797fbe-976b-3a44-971c-5db64cddcfc1.roa (raw, json) Hash identifier: WruHmBc5ZJPHi6dXKFtXD0jMWn4kMluxMYVPSNMjyLI= Subject key identifier: 7A:BC:84:EF:A0:C1:F6:99:ED:6D:F1:7F:B0:39:3E:4A:EE:6A:21:E3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CCD0CA9B3E0A5D10B1A12A000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/17797fbe-976b-3a44-971c-5db64cddcfc1.roa Signing time: Mon 09 Feb 2026 02:00:31 +0000 ROA not before: Mon 09 Feb 2026 02:00:31 +0000 ROA not after: Sun 10 May 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.33.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cd:0c:a9:b3:e0:a5:d1:0b:1a:12:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 9 02:00:31 2026 GMT Not After : May 10 01:00:31 2026 GMT Subject: CN=d425479b-777d-4ebc-9284-34e71ab62c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:03:2f:21:25:47:e8:f1:45:32:da:c3:c1:eb: e5:84:82:cd:15:60:f7:69:93:95:b5:4b:34:b6:15: 80:39:12:0e:67:22:51:36:d9:af:4e:09:39:68:5f: 73:86:ea:b3:29:d9:5a:54:e2:57:2e:ad:5e:62:66: 60:a3:75:bd:c4:5c:ba:c5:63:26:16:03:74:43:e0: 31:86:30:97:6f:b9:4c:1c:cd:f8:f3:52:7e:52:80: 03:b2:2a:e8:06:27:47:c8:91:c6:b8:36:5b:48:9f: c7:8f:99:13:b1:53:25:ff:b7:ef:8d:f6:50:6d:e3: 19:2b:b5:a9:b5:f2:ba:53:8e:f5:2a:4b:1f:52:67: f1:a7:7d:f1:a6:4e:db:35:16:d3:08:b4:82:6e:c2: f0:3e:d1:f1:6a:2a:ea:04:4b:de:2e:e7:96:8c:00: 1d:37:88:38:12:24:e5:28:67:2f:2b:14:e0:f5:ac: f5:24:91:f4:b4:25:73:1d:3e:c9:01:bb:a6:1c:b2: 40:9b:8e:e6:1f:e7:c0:ab:88:cf:5d:80:54:21:d0: cc:38:9e:06:b5:a2:84:77:af:d6:3c:86:f2:b0:6a: 5e:d5:56:f2:a2:d1:3e:d4:7f:06:5c:81:30:11:91: d9:7b:26:5b:a2:1a:50:2e:47:f0:89:57:7e:0b:04: 39:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BC:84:EF:A0:C1:F6:99:ED:6D:F1:7F:B0:39:3E:4A:EE:6A:21:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/17797fbe-976b-3a44-971c-5db64cddcfc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:bb:8d:32:5d:f8:7b:da:ea:45:dc:f0:37:d8:fc:5f:57:4b: b8:e9:52:88:53:cb:41:9e:32:75:77:73:2c:20:19:f3:f3:c2: 72:9b:a7:85:77:04:39:a8:2f:ad:f1:aa:7a:8d:73:46:71:3d: 4d:20:ab:f6:d8:d8:3c:b5:10:5b:d5:fe:88:8a:d8:3c:db:db: 07:c4:d1:f8:b4:06:45:60:11:e3:dc:0b:75:7b:ac:19:ce:0a: 4d:cd:99:61:89:d2:2a:cb:f2:0a:e1:f9:bb:ea:34:60:21:12: ec:59:ef:25:ec:d2:e4:1d:4a:5f:e6:52:ca:cf:a9:58:6e:fa: 19:2d:97:d0:f5:a3:76:3a:8a:17:54:65:ef:23:3b:4b:76:bc: f9:7e:40:c1:e0:ba:a5:be:8c:47:30:d4:fb:33:61:82:02:dc: a4:f3:b3:4d:24:f6:29:34:c7:41:bd:27:3d:9d:47:8a:4d:fd: 6d:6d:29:51:8a:96:64:c2:18:48:61:a1:d3:b4:65:7d:86:25: 8f:bd:32:1b:78:b2:5a:be:f9:c6:fb:dd:94:db:9d:a9:f2:0e: 09:4a:0d:0a:ff:be:aa:d8:d8:ea:52:49:8f:44:96:fe:05:bd: 14:68:04:33:aa:7a:93:89:0f:23:a4:85:06:ca:52:a8:fb:09: 37:6a:59:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzNDKmz4KXRCxoSoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk ZDQyNTQ3OWItNzc3ZC00ZWJjLTkyODQtMzRlNzFhYjYyYzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQMvISVH6PFFMtrDwevlhILNFWD3aZOVtUs0 thWAORIOZyJRNtmvTgk5aF9zhuqzKdlaVOJXLq1eYmZgo3W9xFy6xWMmFgN0Q+Ax hjCXb7lMHM3481J+UoADsiroBidHyJHGuDZbSJ/Hj5kTsVMl/7fvjfZQbeMZK7Wp tfK6U471KksfUmfxp33xpk7bNRbTCLSCbsLwPtHxairqBEveLueWjAAdN4g4EiTl KGcvKxTg9az1JJH0tCVzHT7JAbumHLJAm47mH+fAq4jPXYBUIdDMOJ4GtaKEd6/W PIbysGpe1VbyotE+1H8GXIEwEZHZeyZbohpQLkfwiVd+CwQ56QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHq8hO+gwfaZ7W3xf7A5PkruaiHjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTc3OTdmYmUtOTc2Yi0z YTQ0LTk3MWMtNWRiNjRjZGRjZmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJK7jTJd+Hva6kXc8DfY/F9XS7jpUohTy0GeMnV3cywgGfPzwnKbp4V3 BDmoL63xqnqNc0ZxPU0gq/bY2Dy1EFvV/oiK2Dzb2wfE0fi0BkVgEePcC3V7rBnO Ck3NmWGJ0irL8grh+bvqNGAhEuxZ7yXs0uQdSl/mUsrPqVhu+hktl9D1o3Y6ihdU Ze8jO0t2vPl+QMHguqW+jEcw1PszYYIC3KTzs00k9ik0x0G9Jz2dR4pN/W1tKVGK lmTCGEhhodO0ZX2GJY+9Mht4slq++cb73ZTbnanyDglKDQr/vqrY2OpSSY9Elv4F vRRoBDOqepOJDyOkhQbKUqj7CTdqWdo= -----END CERTIFICATE-----Generated at Mon Mar 2 16:29:36 2026 by rpki-client