$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/294e9347-de22-31e7-bfc5-75bd383b4a41.roa File: 294e9347-de22-31e7-bfc5-75bd383b4a41.roa (raw, json) Hash identifier: UQlQrU/zHm57Fl6TCE/2B9+dS49dYrZ9PzA40MNkFvM= Subject key identifier: 12:CF:FC:9D:6E:5C:69:C5:13:AB:28:84:96:1F:F3:AA:8C:61:F5:1B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CBAE73C9DA9B6981FACD3DB00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/294e9347-de22-31e7-bfc5-75bd383b4a41.roa Signing time: Mon 02 Feb 2026 14:00:40 +0000 ROA not before: Mon 02 Feb 2026 14:00:40 +0000 ROA not after: Sun 03 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.33.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ba:e7:3c:9d:a9:b6:98:1f:ac:d3:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 2 14:00:40 2026 GMT Not After : May 3 13:00:40 2026 GMT Subject: CN=32bce3d9-ac8b-4c76-a71b-308bb4eabf7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:94:89:4e:19:97:a9:90:4a:37:81:ac:08:f2: df:94:4b:f5:82:54:62:a1:9f:be:c9:23:6e:28:b9: b6:63:43:a5:93:d4:01:1c:26:a6:28:05:f4:37:b7: 25:a4:c1:fc:c5:96:aa:1d:a7:b7:f6:d6:48:7d:41: f9:4a:69:56:3c:3f:31:24:c1:f8:63:99:ed:c6:b0: a9:1b:a2:6e:0c:14:40:23:66:e2:60:18:68:bb:ba: 76:87:49:6b:98:3e:3c:64:48:f7:ea:53:52:a4:db: 0b:fb:4b:a2:31:1d:22:b7:78:ba:58:cb:e5:b0:55: ed:a5:9b:fd:30:48:7f:a5:25:34:54:3d:b2:7b:07: 2e:5c:7e:9f:35:68:d8:28:16:10:4e:b5:97:c1:0d: 97:dd:c1:8d:18:2d:cd:7e:67:33:26:23:ea:40:9e: f0:69:2c:fc:28:94:7d:85:c2:45:c1:af:a2:4f:41: 5f:e4:1a:0f:b0:a8:c6:db:22:1d:f1:4b:4f:7e:4a: 5b:7b:d6:c1:76:79:44:06:0c:2d:bf:da:b0:a7:6e: 02:ed:d8:ae:d7:af:3b:9f:01:49:72:82:c9:10:98: 0d:0e:80:2e:4e:dd:61:bf:2f:d6:9d:8a:6f:91:f0: 24:bf:89:93:2c:39:2a:3c:5f:24:21:77:92:3e:31: c9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:CF:FC:9D:6E:5C:69:C5:13:AB:28:84:96:1F:F3:AA:8C:61:F5:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/294e9347-de22-31e7-bfc5-75bd383b4a41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c0:62:f6:8f:e1:ab:84:35:b2:f0:93:90:10:65:b4:19:d2: 83:3c:5d:0b:f0:40:1e:76:72:fd:ec:39:30:4c:2c:47:7a:fc: 53:65:ec:46:d0:22:18:2e:22:5f:92:16:08:01:f0:fd:c3:44: c9:61:b7:24:f7:67:60:25:b4:c2:64:8c:f9:02:4e:df:1e:ef: 79:6f:41:b6:fb:e2:5c:f8:40:af:96:ba:f5:68:7a:f1:1f:80: 9d:91:d0:0a:50:40:b9:e2:0b:ce:85:49:0f:34:4c:a4:c4:4a: b4:3e:18:11:95:d7:f2:f7:4a:3e:79:6a:db:e1:a0:83:26:ea: 46:4c:06:c6:28:1d:79:92:5e:0e:29:9e:2f:4b:7a:39:6d:95: e1:ba:bd:9e:e3:81:6d:74:32:79:45:6a:9e:6f:98:df:d3:dd: a9:68:6b:f4:67:4c:fa:40:15:a9:8f:d1:cc:a3:fa:2a:0d:af: 1c:63:8c:02:ee:de:e9:65:87:47:98:c4:4f:df:84:66:b5:c7: c3:fc:a1:c4:5e:0e:72:81:98:7b:e8:46:01:71:f5:13:49:f4: c0:63:5e:17:49:d8:de:bb:c0:64:21:f5:2f:95:4e:ac:fe:44: 8f:0a:d3:de:e7:93:5b:f5:3f:7a:e9:79:fd:6d:f2:88:05:6a: 32:3e:b7:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy65zydqbaYH6zT2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwMjE0MDA0MFoXDTI2MDUwMzEzMDA0MFowLzEtMCsGA1UEAxMk MzJiY2UzZDktYWM4Yi00Yzc2LWE3MWItMzA4YmI0ZWFiZjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpSJThmXqZBKN4GsCPLflEv1glRioZ++ySNu KLm2Y0Olk9QBHCamKAX0N7clpMH8xZaqHae39tZIfUH5SmlWPD8xJMH4Y5ntxrCp G6JuDBRAI2biYBhou7p2h0lrmD48ZEj36lNSpNsL+0uiMR0it3i6WMvlsFXtpZv9 MEh/pSU0VD2yewcuXH6fNWjYKBYQTrWXwQ2X3cGNGC3NfmczJiPqQJ7waSz8KJR9 hcJFwa+iT0Ff5BoPsKjG2yId8UtPfkpbe9bBdnlEBgwtv9qwp24C7diu1687nwFJ coLJEJgNDoAuTt1hvy/WnYpvkfAkv4mTLDkqPF8kIXeSPjHJ+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLP/J1uXGnFE6sohJYf86qMYfUbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjk0ZTkzNDctZGUyMi0z MWU3LWJmYzUtNzViZDM4M2I0YTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXAYvaP4auENbLwk5AQZbQZ0oM8XQvwQB52cv3sOTBMLEd6/FNl7EbQ IhguIl+SFggB8P3DRMlhtyT3Z2AltMJkjPkCTt8e73lvQbb74lz4QK+WuvVoevEf gJ2R0ApQQLniC86FSQ80TKTESrQ+GBGV1/L3Sj55atvhoIMm6kZMBsYoHXmSXg4p ni9LejltleG6vZ7jgW10MnlFap5vmN/T3aloa/RnTPpAFamP0cyj+ioNrxxjjALu 3ullh0eYxE/fhGa1x8P8ocReDnKBmHvoRgFx9RNJ9MBjXhdJ2N67wGQh9S+VTqz+ RI8K097nk1v1P3rpef1t8ogFajI+t04= -----END CERTIFICATE-----Generated at Mon Mar 2 16:28:55 2026 by rpki-client