$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/193b4617-c040-35e0-ad01-80a5e562b1ae.roa File: 193b4617-c040-35e0-ad01-80a5e562b1ae.roa (raw, json) Hash identifier: /3jesl+DNO7fhc68olO66PPUXsDyy2deYJNh8hXvDbE= Subject key identifier: AD:25:98:8B:58:34:15:25:90:1F:E0:EA:55:DF:E0:1A:92:F8:02:C5 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CBAE73CF7A1ED4B7B9175D500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/193b4617-c040-35e0-ad01-80a5e562b1ae.roa Signing time: Mon 02 Feb 2026 14:00:40 +0000 ROA not before: Mon 02 Feb 2026 14:00:40 +0000 ROA not after: Sun 03 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.33.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ba:e7:3c:f7:a1:ed:4b:7b:91:75:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 2 14:00:40 2026 GMT Not After : May 3 13:00:40 2026 GMT Subject: CN=62eae6be-4f20-425a-b394-f374b9bcf51a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:27:e5:1e:e7:65:38:86:d8:73:e5:12:4a:18: 6c:55:18:2a:88:63:b6:c1:75:30:8d:af:e9:e9:34: 43:bf:86:d4:8a:33:6d:42:de:5c:a6:43:04:e2:be: 0e:58:f6:a8:9c:9b:1d:f3:f0:71:ab:2c:9a:24:64: d7:c9:e0:26:ae:3b:bb:98:49:01:d7:15:0a:72:b7: e6:da:12:97:95:10:3d:1c:bd:ae:4e:f1:49:b6:49: c3:c6:c1:9c:dd:b4:b4:cc:fb:4c:b5:68:dd:a1:d5: ed:32:1e:be:21:1a:44:3a:9b:0b:7a:e0:2a:2d:5b: 54:f6:14:89:31:36:53:a3:c6:50:2c:18:59:e1:18: 41:47:bf:b0:0e:70:78:d7:a8:db:bf:aa:98:7f:35: a5:90:b3:22:03:bc:9d:eb:f5:9b:f5:e8:dd:12:66: c8:1d:de:61:94:11:48:0b:72:c9:bc:05:fb:83:a0: 1f:2e:61:c4:b4:46:7e:2a:e3:e7:9f:67:6d:64:d8: a9:df:fc:77:7c:a9:0a:0e:a3:9a:97:49:66:7f:85: fe:94:bd:44:0a:2c:f5:89:32:c0:ae:29:ac:db:dd: 80:cb:a1:3d:f5:b4:8f:c2:ec:08:71:20:7a:3e:90: 5c:a7:ee:ef:bd:a7:02:7a:87:41:8a:dd:c7:03:64: 28:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:25:98:8B:58:34:15:25:90:1F:E0:EA:55:DF:E0:1A:92:F8:02:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/193b4617-c040-35e0-ad01-80a5e562b1ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:2e:7d:12:68:71:e3:ab:0b:fc:cb:92:44:13:2d:e7:a6:ae: d1:92:59:ed:12:ba:a4:b8:b6:61:6d:ce:e1:5a:97:27:46:3e: f4:29:b4:8d:b4:71:c4:69:c0:77:01:a8:d6:0e:f4:0c:da:c7: d9:f6:ab:c1:b0:00:2c:df:ba:d5:62:74:49:0e:a7:80:29:9d: 2a:d6:b4:cb:11:23:31:72:78:68:d2:7b:e4:a6:07:b1:20:c8: ee:99:4d:e9:b6:30:89:3e:f1:1d:06:97:61:e8:c6:92:ce:28: 30:24:21:80:ac:5c:e6:b9:e9:af:6c:fa:40:a6:a8:bc:99:1c: 5f:cd:7d:10:90:bc:1e:4f:0d:60:87:09:37:ac:ab:44:3a:1b: 8a:20:f0:1f:60:a5:a3:80:86:f5:1c:0f:a5:8d:9e:2b:8e:24: 64:23:32:bd:1d:0f:49:9d:fd:9f:4f:40:9d:4f:7d:76:1e:bb: 23:b2:1a:01:35:a0:a4:07:a2:ec:e4:ea:71:52:d1:1e:2f:ee: 40:fc:f7:97:fa:82:12:40:fb:3c:37:c2:b0:0b:10:88:2a:cd: 8a:0d:3f:a0:7e:b2:66:e2:18:4c:86:00:d2:c2:93:fe:4b:8a: 37:8f:28:8d:1d:e3:8b:85:ab:36:a6:ef:56:8a:7d:bf:4c:7c: fc:95:04:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy65zz3oe1Le5F11QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwMjE0MDA0MFoXDTI2MDUwMzEzMDA0MFowLzEtMCsGA1UEAxMk NjJlYWU2YmUtNGYyMC00MjVhLWIzOTQtZjM3NGI5YmNmNTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iflHudlOIbYc+USShhsVRgqiGO2wXUwja/p 6TRDv4bUijNtQt5cpkME4r4OWPaonJsd8/BxqyyaJGTXyeAmrju7mEkB1xUKcrfm 2hKXlRA9HL2uTvFJtknDxsGc3bS0zPtMtWjdodXtMh6+IRpEOpsLeuAqLVtU9hSJ MTZTo8ZQLBhZ4RhBR7+wDnB416jbv6qYfzWlkLMiA7yd6/Wb9ejdEmbIHd5hlBFI C3LJvAX7g6AfLmHEtEZ+KuPnn2dtZNip3/x3fKkKDqOal0lmf4X+lL1ECiz1iTLA rims292Ay6E99bSPwuwIcSB6PpBcp+7vvacCeodBit3HA2QobwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0lmItYNBUlkB/g6lXf4BqS+ALFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTkzYjQ2MTctYzA0MC0z NWUwLWFkMDEtODBhNWU1NjJiMWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoufRJoceOrC/zLkkQTLeemrtGSWe0SuqS4tmFtzuFalydGPvQptI20 ccRpwHcBqNYO9Azax9n2q8GwACzfutVidEkOp4ApnSrWtMsRIzFyeGjSe+SmB7Eg yO6ZTem2MIk+8R0Gl2HoxpLOKDAkIYCsXOa56a9s+kCmqLyZHF/NfRCQvB5PDWCH CTesq0Q6G4og8B9gpaOAhvUcD6WNniuOJGQjMr0dD0md/Z9PQJ1PfXYeuyOyGgE1 oKQHouzk6nFS0R4v7kD895f6ghJA+zw3wrALEIgqzYoNP6B+smbiGEyGANLCk/5L ijePKI0d44uFqzam71aKfb9MfPyVBDM= -----END CERTIFICATE-----Generated at Mon Mar 2 20:07:01 2026 by rpki-client