$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2c93a2fe-59c9-3004-aace-53a40166520d.roa File: 2c93a2fe-59c9-3004-aace-53a40166520d.roa (raw, json) Hash identifier: B2ntfcRAgvvz9p1MXBvX2HUKOXJZINHV5csSoi9S2Hw= Subject key identifier: 03:5A:10:01:57:19:D4:C8:76:C1:2A:05:F7:0D:56:82:14:42:E5:BE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CFC8236CA4AD69FA3F92CCF80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2c93a2fe-59c9-3004-aace-53a40166520d.roa Signing time: Thu 26 Feb 2026 02:00:32 +0000 ROA not before: Thu 26 Feb 2026 02:00:32 +0000 ROA not after: Wed 27 May 2026 01:00:32 +0000 asID: 8069 IP address blocks: 20.33.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fc:82:36:ca:4a:d6:9f:a3:f9:2c:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 26 02:00:32 2026 GMT Not After : May 27 01:00:32 2026 GMT Subject: CN=3d783281-a87d-4e14-a1c9-b6ee1321a024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:58:07:19:f8:49:2d:fe:53:57:ef:da:1d:93: 6a:77:40:f5:98:18:87:dd:3d:72:5b:2a:a0:aa:94: 21:f6:a2:71:1f:68:06:09:0b:50:7e:dd:db:f7:0a: 79:4a:97:1c:a9:56:a9:06:a3:7c:25:ec:ed:2d:1b: bf:4a:53:9b:b7:54:97:05:e8:25:43:db:f2:f2:61: a4:8e:ff:3f:c2:1d:85:82:ef:2e:48:95:0b:0c:9f: 7d:bd:ca:74:01:b0:12:09:50:60:0f:dd:68:31:c4: 70:d6:b1:81:d0:6e:cc:4e:7d:1f:8a:e6:7b:12:d9: 98:20:ca:b4:a6:88:9b:46:19:d3:2c:7f:24:61:5a: 57:cb:4c:e7:ed:85:f9:0e:8d:97:94:b9:15:af:7c: 25:d2:0d:7d:2b:66:2d:88:23:5c:13:bf:80:74:7a: d4:d9:9e:95:44:9a:1c:50:a2:2b:ed:c6:c6:fb:2d: 35:e9:3d:6a:2e:ac:9d:0a:47:41:4e:12:9c:46:19: 53:b1:a6:09:9f:6d:dc:1c:51:80:ed:7d:d3:ed:71: d3:b9:5b:d7:2e:e9:30:ea:ff:b4:67:42:01:a4:b0: c2:e2:7a:8e:ad:80:2e:0a:fa:b3:a6:20:f4:1d:5a: 7b:7d:4b:08:b7:cf:b2:67:58:f2:88:a0:3d:ea:6f: 4e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5A:10:01:57:19:D4:C8:76:C1:2A:05:F7:0D:56:82:14:42:E5:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2c93a2fe-59c9-3004-aace-53a40166520d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:1d:7e:9c:51:31:47:56:65:6f:c3:cf:f5:4a:bb:cb:e5:76: 1f:04:b9:af:9e:0f:2b:5c:a7:21:ab:05:98:bd:7c:f3:29:8d: e0:77:65:9f:2c:8a:e1:a7:c8:c6:a0:6a:29:77:be:0d:70:e1: 57:cb:1e:84:f6:cd:1c:d6:86:e5:cc:fc:8d:4c:19:dd:a0:38: 19:dc:fa:13:10:38:25:c9:b2:8c:da:e5:5a:a3:e7:21:5d:49: 60:af:92:9a:81:1c:d4:4d:a3:f1:12:0b:2d:12:18:9c:d3:aa: 5d:3d:d8:3a:30:34:44:84:15:b1:df:02:77:b2:36:99:39:78: a6:5c:37:49:7d:50:7c:6a:51:37:18:fc:03:57:e6:eb:94:ee: 78:a2:fb:37:79:5a:2e:fc:dd:e7:e5:90:05:08:2f:dd:0e:0e: 44:42:5b:64:66:8d:cd:ee:91:a2:e5:7b:4d:54:53:99:bc:41: bb:98:c1:1b:bf:ea:6a:02:52:9d:aa:25:53:0d:a1:7d:eb:39: a5:f8:35:32:0b:7e:e0:f7:80:44:bd:7e:c3:12:c1:57:81:07: 31:e5:e2:9d:51:96:cf:59:f5:b5:ee:1b:2f:91:28:52:95:97: 8d:fc:eb:af:bf:a8:04:e7:58:84:27:b1:8f:66:d9:43:24:b0: bf:c9:79:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz8gjbKStafo/ksz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIyNjAyMDAzMloXDTI2MDUyNzAxMDAzMlowLzEtMCsGA1UEAxMk M2Q3ODMyODEtYTg3ZC00ZTE0LWExYzktYjZlZTEzMjFhMDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlgHGfhJLf5TV+/aHZNqd0D1mBiH3T1yWyqg qpQh9qJxH2gGCQtQft3b9wp5SpccqVapBqN8JeztLRu/SlObt1SXBeglQ9vy8mGk jv8/wh2Fgu8uSJULDJ99vcp0AbASCVBgD91oMcRw1rGB0G7MTn0fiuZ7EtmYIMq0 poibRhnTLH8kYVpXy0zn7YX5Do2XlLkVr3wl0g19K2YtiCNcE7+AdHrU2Z6VRJoc UKIr7cbG+y016T1qLqydCkdBThKcRhlTsaYJn23cHFGA7X3T7XHTuVvXLukw6v+0 Z0IBpLDC4nqOrYAuCvqzpiD0HVp7fUsIt8+yZ1jyiKA96m9OowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANaEAFXGdTIdsEqBfcNVoIUQuW+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMmM5M2EyZmUtNTljOS0z MDA0LWFhY2UtNTNhNDAxNjY1MjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMdfpxRMUdWZW/Dz/VKu8vldh8Eua+eDytcpyGrBZi9fPMpjeB3ZZ8s iuGnyMagail3vg1w4VfLHoT2zRzWhuXM/I1MGd2gOBnc+hMQOCXJsoza5Vqj5yFd SWCvkpqBHNRNo/ESCy0SGJzTql092DowNESEFbHfAneyNpk5eKZcN0l9UHxqUTcY /ANX5uuU7nii+zd5Wi783eflkAUIL90ODkRCW2Rmjc3ukaLle01UU5m8QbuYwRu/ 6moCUp2qJVMNoX3rOaX4NTILfuD3gES9fsMSwVeBBzHl4p1Rls9Z9bXuGy+RKFKV l43866+/qATnWIQnsY9m2UMksL/JeTI= -----END CERTIFICATE-----Generated at Mon Mar 2 21:56:24 2026 by rpki-client