$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28828403-ac9c-38f9-8aa3-540107e65b98.roa File: 28828403-ac9c-38f9-8aa3-540107e65b98.roa (raw, json) Hash identifier: HLEJWHVtf9uaJjBOsiDszzh5WndFFa6vcI+pAwfDJWY= Subject key identifier: 81:A5:E9:B6:32:75:76:F7:15:89:E4:7C:54:C5:99:01:38:28:6E:63 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CB6B72523D61CEEDF98BEB980 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28828403-ac9c-38f9-8aa3-540107e65b98.roa Signing time: Sun 01 Feb 2026 02:00:32 +0000 ROA not before: Sun 01 Feb 2026 02:00:32 +0000 ROA not after: Sat 02 May 2026 01:00:32 +0000 asID: 8069 IP address blocks: 20.153.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b6:b7:25:23:d6:1c:ee:df:98:be:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 1 02:00:32 2026 GMT Not After : May 2 01:00:32 2026 GMT Subject: CN=2ad7bc46-88f3-499c-80ef-e069fc8c2cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ab:f5:05:f4:e5:a6:2e:b5:90:b5:31:e0:16: d9:d5:ed:e5:80:b8:fe:e7:ee:86:73:75:ec:c4:b9: ee:75:21:15:5c:18:5a:00:11:a8:65:ef:32:85:fc: 6a:35:ec:55:76:a4:c2:0c:25:e2:8b:24:bb:56:18: e2:3f:76:12:e1:af:7b:3d:07:8a:49:a9:3d:90:9e: 33:5e:b4:34:1f:94:60:45:71:d0:e6:2b:e2:42:b3: 72:7e:94:70:29:f0:03:15:fe:12:5a:a3:21:07:2a: 5e:05:c6:7b:30:3a:3f:e7:5a:ca:56:88:a1:40:c1: 55:54:cd:6f:b1:36:15:72:06:0f:20:d6:73:23:db: 0c:2d:02:9c:e9:39:04:cc:9d:6f:65:ab:cd:4c:7c: 9a:e1:33:e4:74:9d:2c:6e:b3:7a:f5:a4:5f:5a:f6: c0:a1:11:37:da:27:03:39:78:66:a1:7d:58:b0:ce: f7:d7:fe:5b:84:9c:e1:ae:2f:6f:b5:d0:00:68:ca: d5:45:1a:3b:05:76:b1:ce:94:79:5d:7f:fe:06:e2: 81:47:51:9b:10:65:c8:84:d5:08:18:3e:5c:3c:e9: b3:b8:26:4a:6b:2d:68:ec:66:90:22:3d:b9:39:b8: 39:39:e4:09:7c:85:7e:cb:e0:70:ed:56:50:37:93: 03:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A5:E9:B6:32:75:76:F7:15:89:E4:7C:54:C5:99:01:38:28:6E:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28828403-ac9c-38f9-8aa3-540107e65b98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:dd:27:1f:52:c8:24:0c:bd:44:b5:ed:ca:2c:c8:34:d6:91: 36:b0:cd:0c:97:19:12:29:9a:81:98:95:13:c7:ec:a6:a3:8a: cb:26:59:a5:17:9b:ae:ff:3e:d2:8f:36:91:fd:24:fb:a3:dd: 1b:45:da:33:73:f8:88:24:a8:2d:68:cc:94:1c:cb:3b:a1:7b: ac:f6:e2:c4:13:a1:71:47:dc:53:bd:04:a5:59:5e:dd:8b:bb: ee:9f:22:dc:03:be:e2:e8:f2:b7:20:d3:ee:ef:31:fa:03:b8: da:7f:3c:9b:15:cb:70:09:6c:bc:77:58:c6:39:c8:0b:04:c5: e1:2c:98:0c:cd:40:56:9b:6a:e4:1f:cb:7e:a5:e7:e4:2e:20: 46:d8:1d:9c:39:70:66:22:14:ab:5f:af:04:79:5c:e5:0d:5e: fd:be:ab:26:9e:89:6e:30:dd:fb:7f:cb:8d:59:af:b3:52:91: fa:9a:fd:f5:18:f0:86:5b:e9:ea:d1:65:30:d6:95:9c:0a:94: c2:37:5d:68:07:21:43:9e:3c:29:bb:2a:64:9f:bd:34:fd:72: 05:76:82:ec:33:54:4f:9e:c3:ae:9e:4a:5b:3e:b5:79:e8:52: 13:90:ee:34:81:c2:c2:d0:7b:02:32:1e:16:96:25:dc:58:6b: ea:7a:35:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy2tyUj1hzu35i+uYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk MmFkN2JjNDYtODhmMy00OTljLTgwZWYtZTA2OWZjOGMyY2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qv1BfTlpi61kLUx4BbZ1e3lgLj+5+6Gc3Xs xLnudSEVXBhaABGoZe8yhfxqNexVdqTCDCXiiyS7VhjiP3YS4a97PQeKSak9kJ4z XrQ0H5RgRXHQ5iviQrNyfpRwKfADFf4SWqMhBypeBcZ7MDo/51rKVoihQMFVVM1v sTYVcgYPINZzI9sMLQKc6TkEzJ1vZavNTHya4TPkdJ0sbrN69aRfWvbAoRE32icD OXhmoX1YsM731/5bhJzhri9vtdAAaMrVRRo7BXaxzpR5XX/+BuKBR1GbEGXIhNUI GD5cPOmzuCZKay1o7GaQIj25Obg5OeQJfIV+y+Bw7VZQN5MDQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGl6bYydXb3FYnkfFTFmQE4KG5jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjg4Mjg0MDMtYWM5Yy0z OGY5LThhYTMtNTQwMTA3ZTY1Yjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbdJx9SyCQMvUS17cosyDTWkTawzQyXGRIpmoGYlRPH7KajissmWaUX m67/PtKPNpH9JPuj3RtF2jNz+IgkqC1ozJQcyzuhe6z24sQToXFH3FO9BKVZXt2L u+6fItwDvuLo8rcg0+7vMfoDuNp/PJsVy3AJbLx3WMY5yAsExeEsmAzNQFabauQf y36l5+QuIEbYHZw5cGYiFKtfrwR5XOUNXv2+qyaeiW4w3ft/y41Zr7NSkfqa/fUY 8IZb6erRZTDWlZwKlMI3XWgHIUOePCm7KmSfvTT9cgV2guwzVE+ew66eSls+tXno UhOQ7jSBwsLQewIyHhaWJdxYa+p6NeM= -----END CERTIFICATE-----Generated at Mon Mar 2 21:56:23 2026 by rpki-client