$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/250542c4-d296-36c5-89dd-5586e9f13223.roa File: 250542c4-d296-36c5-89dd-5586e9f13223.roa (raw, json) Hash identifier: LSHdTeJaamwblYJl3pc8yrQy7MuleDosM6XNvLPHuD4= Subject key identifier: FC:D9:CA:C2:DA:51:8C:ED:80:F2:75:45:65:AB:DF:EF:91:94:B0:A8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D0912708C5617F758E805D100 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/250542c4-d296-36c5-89dd-5586e9f13223.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 8069 IP address blocks: 20.33.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:70:8c:56:17:f7:58:e8:05:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=b75a60d0-c9b6-432e-b84a-434268588a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a8:ec:49:28:03:e7:07:b7:61:07:b1:bf:1c: a2:18:be:9c:d0:ab:7d:69:4f:39:5f:41:96:66:cf: cd:eb:bf:ef:a0:b2:b7:a6:56:6f:ff:88:a3:11:ec: 02:3a:e9:c3:2f:e7:28:c4:72:2b:f6:cc:bb:b4:66: 00:60:01:21:95:03:f9:58:6a:eb:66:74:75:02:5a: 01:6d:0a:4e:a6:20:fb:8c:dd:2e:28:2d:23:9d:e1: 9b:d7:e2:f6:35:cf:c0:f3:39:e2:40:94:b2:88:8c: ef:8f:02:c9:3e:df:9c:a4:1a:94:25:2f:79:59:df: d7:d1:61:69:6d:4a:f9:8b:4a:f6:86:cb:dd:3a:8a: b6:1d:0d:56:26:24:c2:76:ee:1e:28:69:22:a8:57: 6a:9c:63:31:39:ab:7d:a6:9e:d3:f3:a2:be:f8:3b: a4:dc:d1:12:60:01:b5:f8:e2:67:00:6f:82:c0:be: 91:74:07:88:11:05:1f:d7:db:11:18:73:e4:5e:90: 4f:ce:33:e8:d8:3c:cd:2b:7e:07:61:56:5a:92:b3: 01:0e:de:a1:6a:09:52:63:33:3e:2c:dc:31:15:2a: 76:d4:42:5f:fa:3b:5c:80:d1:77:af:a9:d1:f2:72: c0:fe:ec:6a:13:3d:2c:01:b4:fb:cf:9e:cb:f2:2c: 3d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D9:CA:C2:DA:51:8C:ED:80:F2:75:45:65:AB:DF:EF:91:94:B0:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/250542c4-d296-36c5-89dd-5586e9f13223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:da:f3:2b:ba:77:09:ca:a8:0e:75:b3:7d:3c:5d:83:29:2f: d2:f9:fa:c5:4f:43:d4:7d:5f:f3:9f:c3:d6:0e:de:c5:17:c1: a1:a1:73:62:09:27:4d:45:d2:a1:4f:d3:a6:45:da:91:86:5d: e0:ab:6f:50:0c:74:91:0f:3e:f1:32:1a:b6:f0:6f:40:3c:7e: a0:49:3b:46:6c:c6:ce:48:95:b9:a8:f0:7f:aa:28:0e:63:b1: fd:ee:61:e0:ca:da:1c:04:38:0c:98:97:10:fc:30:fc:b1:b6: 62:8b:1f:10:78:e4:5c:a3:33:0e:1d:0a:c6:36:43:64:d9:4f: de:54:22:b3:39:df:26:9d:d7:e9:87:70:b3:e7:d0:ee:d3:eb: bd:67:41:96:8b:f5:57:be:ba:15:f7:8c:b8:3d:3b:23:8d:77: 83:a6:54:5b:8d:8c:47:91:41:f1:e1:b8:46:e9:7d:30:2c:55: 7c:18:68:f6:1a:be:cf:a3:5f:33:a7:d1:46:ad:f9:ec:1b:90: 26:37:22:b6:26:b7:1c:1c:33:7b:4e:0a:ab:66:7f:dd:87:d7: 8d:fc:6b:72:f7:59:91:34:a6:0a:71:dc:56:44:21:76:19:27: 35:95:d1:c6:7e:2a:01:b1:cc:89:c0:30:8b:67:dc:fc:e9:d0: 5b:cd:74:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEnCMVhf3WOgF0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk Yjc1YTYwZDAtYzliNi00MzJlLWI4NGEtNDM0MjY4NTg4YTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqjsSSgD5we3YQexvxyiGL6c0Kt9aU85X0GW Zs/N67/voLK3plZv/4ijEewCOunDL+coxHIr9sy7tGYAYAEhlQP5WGrrZnR1AloB bQpOpiD7jN0uKC0jneGb1+L2Nc/A8zniQJSyiIzvjwLJPt+cpBqUJS95Wd/X0WFp bUr5i0r2hsvdOoq2HQ1WJiTCdu4eKGkiqFdqnGMxOat9pp7T86K++Duk3NESYAG1 +OJnAG+CwL6RdAeIEQUf19sRGHPkXpBPzjPo2DzNK34HYVZakrMBDt6haglSYzM+ LNwxFSp21EJf+jtcgNF3r6nR8nLA/uxqEz0sAbT7z57L8iw96wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzZysLaUYztgPJ1RWWr3++RlLCoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjUwNTQyYzQtZDI5Ni0z NmM1LTg5ZGQtNTU4NmU5ZjEzMjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXa8yu6dwnKqA51s308XYMpL9L5+sVPQ9R9X/Ofw9YO3sUXwaGhc2IJ J01F0qFP06ZF2pGGXeCrb1AMdJEPPvEyGrbwb0A8fqBJO0Zsxs5Ilbmo8H+qKA5j sf3uYeDK2hwEOAyYlxD8MPyxtmKLHxB45FyjMw4dCsY2Q2TZT95UIrM53yad1+mH cLPn0O7T671nQZaL9Ve+uhX3jLg9OyONd4OmVFuNjEeRQfHhuEbpfTAsVXwYaPYa vs+jXzOn0Uat+ewbkCY3IrYmtxwcM3tOCqtmf92H1438a3L3WZE0pgpx3FZEIXYZ JzWV0cZ+KgGxzInAMItn3Pzp0FvNdOM= -----END CERTIFICATE-----Generated at Mon Mar 2 16:32:19 2026 by rpki-client