$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2dcfd525-f3e6-335f-8507-9dbff9bd843e.roa File: 2dcfd525-f3e6-335f-8507-9dbff9bd843e.roa (raw, json) Hash identifier: +95+coSUYUWEhwR71n/WpD4IY+jX2dleAwb1LXcZp6A= Subject key identifier: 7D:C1:13:60:F9:D3:50:59:9C:38:11:A8:9F:FA:16:BC:6F:AF:40:20 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CC7774E8CF1649128E8C63B80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2dcfd525-f3e6-335f-8507-9dbff9bd843e.roa Signing time: Sat 07 Feb 2026 02:00:31 +0000 ROA not before: Sat 07 Feb 2026 02:00:31 +0000 ROA not after: Fri 08 May 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.33.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c7:77:4e:8c:f1:64:91:28:e8:c6:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 7 02:00:31 2026 GMT Not After : May 8 01:00:31 2026 GMT Subject: CN=d862932e-4b0e-42a8-87dd-8cc4288f2863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f6:41:f4:65:8f:c3:fa:99:e0:8b:48:cd:8a: 7d:b2:6a:0e:7b:28:25:32:e1:7d:e7:6b:35:22:0a: b2:f9:3f:18:cf:f8:21:e1:dc:ee:c2:7f:27:91:15: c3:2c:91:45:00:98:86:f8:73:9a:4e:53:0a:a4:3d: 73:76:83:9c:98:39:21:82:a0:3a:0f:f8:fd:83:c8: 2e:b5:d6:bd:70:73:18:98:0b:71:c7:25:e8:f0:b7: 5e:3e:7a:52:f8:9c:22:4e:d1:33:a6:93:36:ca:aa: 21:b5:0c:c3:a0:d9:bd:8d:a6:cc:04:e3:01:bd:d8: 88:52:f5:fb:f2:39:56:ed:5a:17:dc:7b:e5:a0:76: 52:51:94:97:97:ae:f3:f7:d8:fb:76:71:c9:14:22: 5d:45:65:a0:4b:2d:19:62:16:e0:8e:f1:f6:74:1f: 22:53:33:7b:76:dd:66:56:9a:7b:25:a3:53:2f:74: bf:58:8f:25:7c:c1:92:a0:d2:82:af:bc:eb:88:21: 9e:90:a1:21:64:2c:16:95:ee:72:89:eb:03:84:ff: 78:e7:a3:9a:43:ec:aa:67:23:c3:1c:de:52:41:c8: f5:ca:41:ba:ea:d4:56:8d:0b:a0:b8:a2:d0:64:34: 16:2c:ef:a7:1c:56:cb:11:83:4e:87:72:55:6b:4b: 66:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C1:13:60:F9:D3:50:59:9C:38:11:A8:9F:FA:16:BC:6F:AF:40:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2dcfd525-f3e6-335f-8507-9dbff9bd843e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:83:7a:c4:67:13:76:a1:9d:9a:a6:42:75:6c:bc:fc:13:73: 05:14:34:92:0b:7a:75:48:a7:c8:c1:35:22:18:92:70:1b:7c: 2a:09:f2:c8:42:bd:7f:d2:c8:ee:d9:b0:56:7c:2f:4a:2b:c4: c8:00:b2:d2:30:8f:89:50:59:1e:8b:a9:9e:64:b7:e3:72:ad: 16:f8:1c:ba:c7:f6:09:0e:0a:aa:42:bc:e5:80:55:1a:e0:dc: b9:2e:40:e2:99:7f:2c:8f:1b:0a:a5:1d:d1:5e:21:2e:10:43: bc:a8:f1:db:4d:a9:eb:a5:c2:77:3e:6e:a9:d8:54:2d:01:f1: c0:b2:ef:ac:2e:0c:65:34:61:0f:5a:e3:94:5b:1f:02:15:4a: be:6b:5d:5f:9b:2b:48:48:38:34:9c:94:38:5d:95:7e:8e:5d: 12:81:ac:48:61:9b:5e:d3:31:d6:46:0b:43:be:e4:36:d3:58: b9:7f:03:c9:97:18:2a:f1:84:67:fc:54:e3:09:40:ce:07:92: 5c:e7:65:d3:82:60:a3:46:8b:66:df:45:6f:bb:79:a0:92:60: b0:8b:6f:39:29:2a:cb:41:bb:01:08:68:0f:2d:f5:ec:ad:f9: 2e:7a:b4:88:ba:33:78:22:28:42:5f:cd:69:03:ab:a0:4a:8c: e1:62:9f:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzHd06M8WSRKOjGO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwNzAyMDAzMVoXDTI2MDUwODAxMDAzMVowLzEtMCsGA1UEAxMk ZDg2MjkzMmUtNGIwZS00MmE4LTg3ZGQtOGNjNDI4OGYyODYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPZB9GWPw/qZ4ItIzYp9smoOeyglMuF952s1 Igqy+T8Yz/gh4dzuwn8nkRXDLJFFAJiG+HOaTlMKpD1zdoOcmDkhgqA6D/j9g8gu tda9cHMYmAtxxyXo8LdePnpS+JwiTtEzppM2yqohtQzDoNm9jabMBOMBvdiIUvX7 8jlW7VoX3HvloHZSUZSXl67z99j7dnHJFCJdRWWgSy0ZYhbgjvH2dB8iUzN7dt1m Vpp7JaNTL3S/WI8lfMGSoNKCr7zriCGekKEhZCwWle5yiesDhP9456OaQ+yqZyPD HN5SQcj1ykG66tRWjQuguKLQZDQWLO+nHFbLEYNOh3JVa0tmIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3BE2D501BZnDgRqJ/6Frxvr0AgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMmRjZmQ1MjUtZjNlNi0z MzVmLTg1MDctOWRiZmY5YmQ4NDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6DesRnE3ahnZqmQnVsvPwTcwUUNJILenVIp8jBNSIYknAbfCoJ8shC vX/SyO7ZsFZ8L0orxMgAstIwj4lQWR6LqZ5kt+NyrRb4HLrH9gkOCqpCvOWAVRrg 3LkuQOKZfyyPGwqlHdFeIS4QQ7yo8dtNqeulwnc+bqnYVC0B8cCy76wuDGU0YQ9a 45RbHwIVSr5rXV+bK0hIODSclDhdlX6OXRKBrEhhm17TMdZGC0O+5DbTWLl/A8mX GCrxhGf8VOMJQM4HklznZdOCYKNGi2bfRW+7eaCSYLCLbzkpKstBuwEIaA8t9eyt +S56tIi6M3giKEJfzWkDq6BKjOFin5Y= -----END CERTIFICATE-----Generated at Mon Mar 2 21:55:30 2026 by rpki-client