$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1da52d71-8ee6-39ae-8f50-8b6776ffe1ff.roa File: 1da52d71-8ee6-39ae-8f50-8b6776ffe1ff.roa (raw, json) Hash identifier: 5I0rVFOm9rFaZeH/LBdgeVbPnDwGhLEl7fwNtnTVjUM= Subject key identifier: 78:35:52:D6:B3:D9:02:4C:95:C6:BE:E5:2E:89:7E:22:99:BA:35:7D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CEA5CF504C548472410F01800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1da52d71-8ee6-39ae-8f50-8b6776ffe1ff.roa Signing time: Thu 19 Feb 2026 14:00:40 +0000 ROA not before: Thu 19 Feb 2026 14:00:40 +0000 ROA not after: Wed 20 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.33.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ea:5c:f5:04:c5:48:47:24:10:f0:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 19 14:00:40 2026 GMT Not After : May 20 13:00:40 2026 GMT Subject: CN=95b790fe-96e8-4587-b499-78861b74c112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:16:65:28:0a:3c:4e:16:bb:13:d5:cb:92:15: 0b:e7:80:d0:dc:ec:fc:b5:b6:76:fa:e0:23:56:17: f7:62:c1:f4:a1:0a:87:d5:96:fd:2d:fb:08:39:35: 57:42:13:c8:a8:57:ed:56:e0:9c:0d:d1:a1:25:14: 88:bb:ee:58:b5:c8:51:6a:23:30:8a:c4:49:72:e1: 12:d1:86:4c:91:23:7b:1c:96:13:9e:e8:c9:ac:fd: c5:ab:8d:f0:82:ce:0e:3d:6e:b2:95:f0:d1:c6:f9: 25:b7:4a:e3:ed:d8:0b:7a:52:9f:79:83:e0:df:df: 52:3a:08:6d:8c:ad:44:c5:ae:a5:06:6d:35:d5:a9: 96:28:c7:fe:00:3f:de:75:80:5d:a7:ec:64:84:bb: 28:38:b2:a8:9c:84:02:44:b5:b1:de:98:3b:61:1b: c8:66:e5:00:a4:45:13:d1:37:04:43:7a:07:ec:a3: 02:5d:91:1d:36:c2:7b:f9:a3:89:0f:6d:8c:6d:8b: 17:22:c8:c4:1b:ae:f4:d8:9b:97:c8:da:10:ea:9d: f6:72:e3:e0:32:63:32:c9:83:71:4f:23:c0:29:d4: 1a:f2:c7:da:b5:54:f6:bf:fc:ab:d2:35:fc:ce:68: b0:10:fc:40:ca:fd:02:e1:b9:a4:65:71:b0:42:0d: b0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:35:52:D6:B3:D9:02:4C:95:C6:BE:E5:2E:89:7E:22:99:BA:35:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1da52d71-8ee6-39ae-8f50-8b6776ffe1ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:86:2e:89:dd:36:89:15:b4:96:be:60:ee:76:f7:89:63:7f: 11:06:4e:08:0d:36:a6:71:2e:99:be:2c:f9:15:c8:03:17:62: ad:f7:fd:f9:96:b5:42:8b:b0:b4:95:48:de:7e:ae:d9:42:9d: ed:f5:4e:d1:b1:69:5c:e3:ba:cb:86:a3:d3:68:29:73:85:aa: f8:8f:10:56:d8:19:d7:df:ec:03:3d:37:97:72:12:cc:4a:a5: 03:aa:3f:dd:19:5c:f3:22:d4:fb:c9:b1:40:19:f9:75:3a:d9: 84:0a:63:57:41:4f:e2:e0:78:df:8c:2a:ae:e9:eb:dd:a5:48: f2:d8:23:b4:88:1e:77:38:ba:47:8d:61:d3:7e:e4:b4:f2:d9: 6d:62:9f:8f:ab:38:fc:a8:34:3e:89:85:33:0c:8b:13:77:23: b9:9b:fa:6a:c5:29:dd:2b:17:57:9e:4a:51:4e:18:22:03:96: 3c:f2:11:1d:c6:b4:8d:9a:f9:dc:d2:62:0e:b2:50:6e:63:49: c5:44:bd:e0:72:4d:8a:cf:02:49:b2:16:45:31:6f:e1:a3:b6: bd:7b:b0:10:bc:f0:87:0d:2d:e7:b7:6a:3d:fc:40:b3:53:c0: d4:67:c2:1b:47:12:22:0b:b1:66:30:38:61:dc:ad:e9:de:d0: 33:0e:d3:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzqXPUExUhHJBDwGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk OTViNzkwZmUtOTZlOC00NTg3LWI0OTktNzg4NjFiNzRjMTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxZlKAo8Tha7E9XLkhUL54DQ3Oz8tbZ2+uAj Vhf3YsH0oQqH1Zb9LfsIOTVXQhPIqFftVuCcDdGhJRSIu+5YtchRaiMwisRJcuES 0YZMkSN7HJYTnujJrP3Fq43wgs4OPW6ylfDRxvklt0rj7dgLelKfeYPg399SOght jK1Exa6lBm011amWKMf+AD/edYBdp+xkhLsoOLKonIQCRLWx3pg7YRvIZuUApEUT 0TcEQ3oH7KMCXZEdNsJ7+aOJD22MbYsXIsjEG6702JuXyNoQ6p32cuPgMmMyyYNx TyPAKdQa8sfatVT2v/yr0jX8zmiwEPxAyv0C4bmkZXGwQg2wmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHg1Utaz2QJMlca+5S6JfiKZujV9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMWRhNTJkNzEtOGVlNi0z OWFlLThmNTAtOGI2Nzc2ZmZlMWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiGLondNokVtJa+YO5294ljfxEGTggNNqZxLpm+LPkVyAMXYq33/fmW tUKLsLSVSN5+rtlCne31TtGxaVzjusuGo9NoKXOFqviPEFbYGdff7AM9N5dyEsxK pQOqP90ZXPMi1PvJsUAZ+XU62YQKY1dBT+LgeN+MKq7p692lSPLYI7SIHnc4ukeN YdN+5LTy2W1in4+rOPyoND6JhTMMixN3I7mb+mrFKd0rF1eeSlFOGCIDljzyER3G tI2a+dzSYg6yUG5jScVEveByTYrPAkmyFkUxb+Gjtr17sBC88IcNLee3aj38QLNT wNRnwhtHEiILsWYwOGHcrene0DMO0+U= -----END CERTIFICATE-----Generated at Mon Mar 2 16:29:49 2026 by rpki-client