$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2c2aeecb-6fa1-3eb0-95f9-a54c25fd21a0.roa File: 2c2aeecb-6fa1-3eb0-95f9-a54c25fd21a0.roa (raw, json) Hash identifier: 7/wMlviYDSiYqf/tk+9CRC3ZIoBzwq2jjkpgktL64m8= Subject key identifier: 0C:78:E3:E9:2B:65:7C:0A:8D:3F:1E:01:2C:DF:1B:2A:AE:5C:4B:23 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CBAE73C6C4E6A1F6A6BEA1380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2c2aeecb-6fa1-3eb0-95f9-a54c25fd21a0.roa Signing time: Mon 02 Feb 2026 14:00:40 +0000 ROA not before: Mon 02 Feb 2026 14:00:40 +0000 ROA not after: Sun 03 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.33.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ba:e7:3c:6c:4e:6a:1f:6a:6b:ea:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 2 14:00:40 2026 GMT Not After : May 3 13:00:40 2026 GMT Subject: CN=1d052d2c-5931-4168-b6db-55e97ae362f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0a:56:d1:c8:bd:7e:a5:d2:84:62:b0:43:78: 0c:c6:3c:b7:58:73:63:82:05:2e:4e:58:a1:a4:ca: 02:5a:e4:fe:51:f3:c3:19:e9:2a:e1:31:dd:d9:0e: 45:fd:a1:d0:e4:94:c5:4c:f9:97:b3:25:4e:1a:eb: 1d:35:15:9a:9a:d3:3b:b1:2b:65:80:7b:93:eb:f4: 75:a7:84:87:fd:8b:ab:44:ff:98:cc:a4:7d:41:f7: 7e:9c:23:1a:28:e5:73:b2:7e:85:32:4b:c8:25:85: 8e:cb:66:b3:54:43:2a:42:90:06:7f:e1:ad:e6:ea: 9a:5a:07:c8:4d:86:26:86:a7:b4:d0:a4:bc:c5:ae: ed:18:b9:5c:8e:db:9c:01:43:2f:08:68:21:28:7b: 94:67:4a:17:7f:f4:1d:51:f2:05:48:09:d5:60:1c: 5c:26:0c:5b:6c:99:30:af:6a:46:12:28:74:e6:1d: 93:84:00:cb:8f:11:20:3f:61:7e:9a:27:9a:7e:7b: b1:5a:bf:41:c2:1f:b1:96:99:48:1d:e0:80:4d:ed: 82:ad:9a:2e:08:78:a5:73:06:15:1a:91:db:5d:45: 68:21:e4:7e:c6:2d:fd:be:24:73:a0:02:45:e2:4a: 47:20:03:2c:24:3a:9c:f5:3c:bb:2d:ca:4b:3b:db: bb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:78:E3:E9:2B:65:7C:0A:8D:3F:1E:01:2C:DF:1B:2A:AE:5C:4B:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2c2aeecb-6fa1-3eb0-95f9-a54c25fd21a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:fa:85:f0:ff:46:e2:27:45:76:6d:9c:b5:07:9b:7b:a5:67: 99:50:70:a4:57:ce:aa:01:da:b4:c9:32:fd:76:e2:db:a8:09: 05:42:0f:d0:1d:5c:ec:58:05:54:cd:b7:6d:26:21:7a:6b:53: 47:5b:22:6c:cb:10:3b:a9:c7:60:f6:bc:4b:51:80:b6:0e:87: 55:d6:b9:70:8b:16:22:62:ef:be:95:f0:05:49:fc:ee:34:b6: 74:b4:e2:33:bb:9e:02:28:36:b0:cd:92:04:b8:60:6d:77:95: 4c:18:8d:f5:82:0b:b8:68:6d:16:8d:5d:71:4b:ec:b4:34:e4: f0:fb:2f:b3:ea:27:bc:15:15:16:cb:1f:03:e6:46:32:fa:6d: 62:b2:b3:7f:fc:9e:50:d6:91:2b:b4:35:22:a2:c8:45:48:f1: 06:11:82:12:f5:b7:0a:5c:87:79:74:6d:e4:59:4c:ed:11:12: 54:a0:0d:ef:ed:48:ab:38:d7:12:42:b3:44:37:d1:02:9f:58: 21:f3:41:e1:cd:cb:78:7f:b5:c5:8b:c3:28:5a:6e:61:f1:a5: ef:dd:80:2d:11:18:f6:32:f4:86:5b:a6:16:c6:92:d4:a0:e0: 9c:d6:d2:57:c5:4e:d2:7e:62:09:5a:62:57:88:ca:6a:c4:75: 80:c7:07:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy65zxsTmofamvqE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwMjE0MDA0MFoXDTI2MDUwMzEzMDA0MFowLzEtMCsGA1UEAxMk MWQwNTJkMmMtNTkzMS00MTY4LWI2ZGItNTVlOTdhZTM2MmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwpW0ci9fqXShGKwQ3gMxjy3WHNjggUuTlih pMoCWuT+UfPDGekq4THd2Q5F/aHQ5JTFTPmXsyVOGusdNRWamtM7sStlgHuT6/R1 p4SH/YurRP+YzKR9Qfd+nCMaKOVzsn6FMkvIJYWOy2azVEMqQpAGf+Gt5uqaWgfI TYYmhqe00KS8xa7tGLlcjtucAUMvCGghKHuUZ0oXf/QdUfIFSAnVYBxcJgxbbJkw r2pGEih05h2ThADLjxEgP2F+mieafnuxWr9Bwh+xlplIHeCATe2CrZouCHilcwYV GpHbXUVoIeR+xi39viRzoAJF4kpHIAMsJDqc9Ty7LcpLO9u76QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAx44+krZXwKjT8eASzfGyquXEsjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMmMyYWVlY2ItNmZhMS0z ZWIwLTk1ZjktYTU0YzI1ZmQyMWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGn6hfD/RuInRXZtnLUHm3ulZ5lQcKRXzqoB2rTJMv124tuoCQVCD9Ad XOxYBVTNt20mIXprU0dbImzLEDupx2D2vEtRgLYOh1XWuXCLFiJi776V8AVJ/O40 tnS04jO7ngIoNrDNkgS4YG13lUwYjfWCC7hobRaNXXFL7LQ05PD7L7PqJ7wVFRbL HwPmRjL6bWKys3/8nlDWkSu0NSKiyEVI8QYRghL1twpch3l0beRZTO0RElSgDe/t SKs41xJCs0Q30QKfWCHzQeHNy3h/tcWLwyhabmHxpe/dgC0RGPYy9IZbphbGktSg 4JzW0lfFTtJ+YglaYleIymrEdYDHB8c= -----END CERTIFICATE-----Generated at Mon Mar 2 16:30:16 2026 by rpki-client