$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/19eeb1b8-4ee6-3a5a-8669-0ec5d5e20141.roa File: 19eeb1b8-4ee6-3a5a-8669-0ec5d5e20141.roa (raw, json) Hash identifier: 7GNPTg5+bAgJS4HfIpndDhf5P6s/LrIJ6dN7sxOXNwA= Subject key identifier: 32:16:C1:F1:9F:6B:A4:46:2E:01:AF:27:E6:7C:24:DF:82:AE:78:3D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CBAE73C5C1091FD0810595A00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/19eeb1b8-4ee6-3a5a-8669-0ec5d5e20141.roa Signing time: Mon 02 Feb 2026 14:00:40 +0000 ROA not before: Mon 02 Feb 2026 14:00:40 +0000 ROA not after: Sun 03 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.33.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ba:e7:3c:5c:10:91:fd:08:10:59:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 2 14:00:40 2026 GMT Not After : May 3 13:00:40 2026 GMT Subject: CN=05a009cf-23eb-4129-9024-c580a0c17e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fe:91:f3:bf:88:9f:e8:80:49:e7:8c:15:d4: 70:ef:d1:a2:11:3b:90:8b:ad:0b:63:8a:2f:b1:c1: 79:50:3c:b1:23:24:72:7b:3e:7e:04:de:31:3b:f7: 6c:af:ef:43:6c:ed:26:56:09:f4:73:76:e9:6f:e8: f0:c5:73:87:b8:b1:ac:77:88:d5:ef:38:14:3d:39: ef:70:3b:c0:9b:45:72:66:d0:11:ff:b3:a5:67:4c: 55:f4:73:74:a5:b1:b4:93:bd:10:05:cb:6f:63:8d: 38:02:7f:2e:d9:9c:c2:10:a9:8b:50:f4:e8:cc:e0: 3c:b3:92:4f:e7:34:d9:3e:d4:8e:a5:d5:ae:23:ce: 3e:59:c0:2e:65:bb:44:dc:09:02:77:87:60:61:de: 95:f4:2f:85:65:c1:40:da:d1:a4:09:a8:23:41:6d: 77:74:c2:df:d0:02:85:ea:16:64:a9:a4:64:94:4b: 35:97:f7:07:ce:f8:f7:8e:97:d0:c4:07:44:5e:ab: ea:77:eb:74:62:89:b7:ac:d1:7d:20:45:ef:d1:19: cf:6f:4c:5f:7a:50:c9:cf:f0:56:2f:30:52:65:a5: 2e:24:49:9e:ed:0a:9f:d9:d5:45:87:ca:6a:82:6c: d0:c7:01:b1:3e:e7:28:ab:e6:bb:51:9b:bf:5b:2c: 33:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:16:C1:F1:9F:6B:A4:46:2E:01:AF:27:E6:7C:24:DF:82:AE:78:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/19eeb1b8-4ee6-3a5a-8669-0ec5d5e20141.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:9c:3f:3e:6a:96:cd:50:be:83:71:40:91:a7:09:8b:3b:d4: f5:cc:e8:32:50:c9:97:cd:aa:72:9a:1c:cc:bb:c1:6b:6c:07: 2e:46:de:c1:c9:86:83:26:43:27:80:ff:88:a6:4f:ef:56:1d: ba:8a:17:7d:d6:ca:94:4a:06:7b:16:ea:e6:01:36:f6:b2:a6: 1b:94:86:ad:45:fa:29:ea:c5:43:23:6f:bd:6e:8c:ca:61:11: 0f:25:eb:0b:61:66:ce:42:17:c2:ab:e1:b9:95:8f:9d:03:b9: 49:39:7e:2e:45:7e:3f:29:6b:7e:fd:6b:cc:8b:80:18:eb:3c: b2:a7:a7:42:9c:bd:a3:c0:c6:20:2a:22:bb:3c:0f:ed:ff:24: c3:fb:a6:32:29:66:5a:29:be:c8:fa:b2:64:4b:9e:45:3e:b7: 30:14:be:27:74:88:91:dd:ac:1e:80:f7:03:31:c1:46:09:65: 63:84:03:d6:98:7b:6d:82:9a:b0:89:81:18:a8:35:09:ab:3f: 78:1b:e8:18:f9:bc:1e:3b:83:9a:a5:bb:b3:a0:28:76:88:63: 7b:2a:45:cc:81:ab:42:87:26:bf:8a:ec:28:eb:2b:3a:bc:ca: 0f:5a:cd:94:56:d7:2d:3a:71:7f:ad:66:80:89:aa:45:63:7c: 2f:4a:93:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy65zxcEJH9CBBZWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwMjE0MDA0MFoXDTI2MDUwMzEzMDA0MFowLzEtMCsGA1UEAxMk MDVhMDA5Y2YtMjNlYi00MTI5LTkwMjQtYzU4MGEwYzE3ZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP6R87+In+iASeeMFdRw79GiETuQi60LY4ov scF5UDyxIyRyez5+BN4xO/dsr+9DbO0mVgn0c3bpb+jwxXOHuLGsd4jV7zgUPTnv cDvAm0VyZtAR/7OlZ0xV9HN0pbG0k70QBctvY404An8u2ZzCEKmLUPTozOA8s5JP 5zTZPtSOpdWuI84+WcAuZbtE3AkCd4dgYd6V9C+FZcFA2tGkCagjQW13dMLf0AKF 6hZkqaRklEs1l/cHzvj3jpfQxAdEXqvqd+t0Yom3rNF9IEXv0RnPb0xfelDJz/BW LzBSZaUuJEme7Qqf2dVFh8pqgmzQxwGxPucoq+a7UZu/Wywz7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIWwfGfa6RGLgGvJ+Z8JN+Crng9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTllZWIxYjgtNGVlNi0z YTVhLTg2NjktMGVjNWQ1ZTIwMTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGycPz5qls1QvoNxQJGnCYs71PXM6DJQyZfNqnKaHMy7wWtsBy5G3sHJ hoMmQyeA/4imT+9WHbqKF33WypRKBnsW6uYBNvayphuUhq1F+inqxUMjb71ujMph EQ8l6wthZs5CF8Kr4bmVj50DuUk5fi5Ffj8pa379a8yLgBjrPLKnp0KcvaPAxiAq Irs8D+3/JMP7pjIpZlopvsj6smRLnkU+tzAUvid0iJHdrB6A9wMxwUYJZWOEA9aY e22CmrCJgRioNQmrP3gb6Bj5vB47g5qlu7OgKHaIY3sqRcyBq0KHJr+K7CjrKzq8 yg9azZRW1y06cX+tZoCJqkVjfC9Kkwk= -----END CERTIFICATE-----Generated at Mon Mar 2 16:30:08 2026 by rpki-client