$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/343b56e4-2785-3758-8b98-7b8ee4b8652f.roa File: 343b56e4-2785-3758-8b98-7b8ee4b8652f.roa (raw, json) Hash identifier: ofuE5CjwSDHk/HAuOGpuKkwX5mMMHM424Eo5ZL2v6o8= Subject key identifier: 06:1B:E1:1E:CD:E7:94:C8:EE:6C:E9:ED:B3:28:15:7B:C7:81:D5:21 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CC6120A66E905930227D31580 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/343b56e4-2785-3758-8b98-7b8ee4b8652f.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.33.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:12:0a:66:e9:05:93:02:27:d3:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=8b53e300-8066-4b17-9323-ebbf097d45c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b2:ff:24:8e:47:5e:f9:30:9b:d2:c6:82:ad: b4:e3:ae:15:05:00:7d:b7:1b:3a:5b:34:5c:f6:40: a8:d5:a7:a5:f8:f5:bb:85:55:66:f2:08:34:93:db: 9a:ae:45:fa:3e:cb:e0:31:cf:64:11:48:7b:ed:a4: 12:5c:98:43:48:c2:43:53:82:2d:ac:cf:88:98:b2: a8:4a:ef:78:8b:01:59:42:8e:ec:87:2a:2b:20:26: 15:e0:64:98:8d:ee:4f:ee:b9:b8:71:25:e6:32:e3: 19:a3:c0:d9:7d:db:d1:e6:da:54:90:2c:4c:87:12: e3:e0:72:71:c5:84:71:ed:2f:12:b9:4d:af:99:bd: 41:58:b3:77:47:b5:74:a8:e4:62:a4:ef:1e:c0:51: 78:dc:26:f3:8a:20:29:6e:03:c8:3a:ef:d7:fd:db: 34:f1:c7:d6:ee:eb:58:43:1e:c7:0f:2d:2f:a5:90: 32:79:cd:5e:c9:a7:4f:8e:79:06:b7:04:a5:8d:1d: 26:59:76:af:5e:cd:f7:5c:a9:18:d4:6a:78:20:87: 72:6c:f7:8b:28:da:46:e1:3d:60:cd:a2:43:4b:85: 8a:47:1e:67:cc:35:ea:a9:22:cf:6e:40:11:ee:f4: 66:b8:c2:32:83:79:5f:c4:07:ea:48:5b:3c:ba:1f: 06:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1B:E1:1E:CD:E7:94:C8:EE:6C:E9:ED:B3:28:15:7B:C7:81:D5:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/343b56e4-2785-3758-8b98-7b8ee4b8652f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:cf:fa:b5:f2:1f:1c:f4:b3:ec:a5:68:98:c4:25:51:50:a6: 65:73:2f:54:96:20:94:57:b4:61:8d:6a:21:8d:b7:67:6d:e4: 4b:f1:b9:fe:e8:94:e7:cb:28:f6:6d:03:a7:bc:4c:b8:d8:74: ff:51:82:04:2b:05:a2:01:dc:16:de:e7:95:8b:95:03:74:fb: b6:68:bf:d4:ff:64:9e:86:87:48:e6:e2:12:70:a8:87:12:a4: 4e:8f:5e:23:a6:f4:dd:e5:d7:18:98:e5:37:4a:dd:e5:ea:e7: f9:3a:5c:c1:4d:2e:04:59:71:ac:06:fb:a1:ba:82:14:7a:5e: df:85:d9:a2:a1:d0:2f:18:61:95:ee:68:db:2a:64:ab:61:17: 23:d2:71:c3:2f:b7:77:96:73:8f:cc:8b:58:4c:8c:62:7b:e7: f2:48:34:b2:28:b4:b2:43:78:d9:f4:92:67:25:9a:bf:54:d5: 5a:16:2b:79:c3:fe:bd:0c:ac:37:43:73:08:30:65:03:0a:e2: fb:6a:bf:8d:2f:be:9e:07:54:ac:76:31:74:44:ac:89:32:2e: c8:86:90:1b:cd:8f:d7:21:f2:4b:1a:62:4a:b7:7e:53:a7:4e: f3:12:6f:33:37:fd:30:b5:04:23:a2:aa:c1:a6:ce:dd:e6:d1: 6f:49:55:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEgpm6QWTAifTFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk OGI1M2UzMDAtODA2Ni00YjE3LTkzMjMtZWJiZjA5N2Q0NWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7L/JI5HXvkwm9LGgq20464VBQB9txs6WzRc 9kCo1ael+PW7hVVm8gg0k9uarkX6PsvgMc9kEUh77aQSXJhDSMJDU4ItrM+ImLKo Su94iwFZQo7shyorICYV4GSYje5P7rm4cSXmMuMZo8DZfdvR5tpUkCxMhxLj4HJx xYRx7S8SuU2vmb1BWLN3R7V0qORipO8ewFF43CbziiApbgPIOu/X/ds08cfW7utY Qx7HDy0vpZAyec1eyadPjnkGtwSljR0mWXavXs33XKkY1Gp4IIdybPeLKNpG4T1g zaJDS4WKRx5nzDXqqSLPbkAR7vRmuMIyg3lfxAfqSFs8uh8GKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYb4R7N55TI7mzp7bMoFXvHgdUhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzQzYjU2ZTQtMjc4NS0z NzU4LThiOTgtN2I4ZWU0Yjg2NTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXP+rXyHxz0s+ylaJjEJVFQpmVzL1SWIJRXtGGNaiGNt2dt5Evxuf7o lOfLKPZtA6e8TLjYdP9RggQrBaIB3Bbe55WLlQN0+7Zov9T/ZJ6Gh0jm4hJwqIcS pE6PXiOm9N3l1xiY5TdK3eXq5/k6XMFNLgRZcawG+6G6ghR6Xt+F2aKh0C8YYZXu aNsqZKthFyPSccMvt3eWc4/Mi1hMjGJ75/JINLIotLJDeNn0kmclmr9U1VoWK3nD /r0MrDdDcwgwZQMK4vtqv40vvp4HVKx2MXRErIkyLsiGkBvNj9ch8ksaYkq3flOn TvMSbzM3/TC1BCOiqsGmzt3m0W9JVRM= -----END CERTIFICATE-----Generated at Mon Mar 2 20:06:11 2026 by rpki-client