$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3ada3c10-cbc2-358a-adb9-370a16b13ac8.roa File: 3ada3c10-cbc2-358a-adb9-370a16b13ac8.roa (raw, json) Hash identifier: FFcR6+PZba+vc60izI44r4jp47XUr2n3tDTrYNkdUG4= Subject key identifier: 2D:30:CA:95:96:16:D5:0E:9D:D7:85:CC:B2:21:A4:61:0E:DD:C4:78 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CC6120ABDA018790F45D84680 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3ada3c10-cbc2-358a-adb9-370a16b13ac8.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.33.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:12:0a:bd:a0:18:79:0f:45:d8:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=5325785c-c825-4d22-9653-ea56f80705f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2f:71:1c:04:06:ff:9a:dc:fa:63:1e:6c:30: d3:94:ad:64:45:20:13:54:36:23:a9:5e:fc:b0:38: c5:25:f1:58:7c:18:90:29:47:98:4e:fd:94:6b:20: 56:db:60:59:d9:5d:ff:ec:9c:9c:3e:85:2e:da:7b: 56:e5:b2:66:90:b4:c4:03:07:06:8b:d9:a6:d7:ac: 99:f7:fd:dc:80:e3:f7:8a:3b:37:14:c4:40:52:b5: fc:a5:f7:0e:3a:ac:65:f6:57:0d:f3:5a:61:9f:e5: a2:89:c9:3f:65:73:2b:74:f9:59:a3:73:2f:d4:98: a3:7a:f6:81:6b:31:d3:03:7b:de:aa:b6:d1:63:40: 16:71:ff:28:0a:ae:66:65:5e:59:7a:ad:5b:f1:8c: b0:b1:fe:cd:b5:f4:b5:00:ef:79:63:2a:8d:7c:9c: 57:84:67:65:e5:71:48:5c:f0:05:0e:7f:71:3e:40: f6:61:9c:99:af:ce:9c:9d:b1:81:2d:81:8a:08:70: f3:04:6f:f9:61:91:f9:c8:d3:72:da:5a:93:8d:a4: bb:7e:a3:ac:7e:9e:9c:4e:fd:22:f0:99:3b:ce:7b: 96:c1:97:60:3b:01:32:b6:91:43:53:23:e2:64:69: 20:14:13:de:eb:50:29:68:71:84:50:29:a9:a9:65: 7d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:30:CA:95:96:16:D5:0E:9D:D7:85:CC:B2:21:A4:61:0E:DD:C4:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3ada3c10-cbc2-358a-adb9-370a16b13ac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:cb:c7:75:45:f2:7a:24:5c:00:fb:41:7e:cd:3d:08:4f:31: 52:1f:76:a4:bb:fe:35:db:11:a7:75:35:97:98:f8:05:a9:df: 3b:9c:cc:e8:5c:ec:d2:19:b9:d5:11:7d:d2:e0:95:1c:f3:ee: f7:ac:b6:23:5f:72:8c:99:45:c7:6e:1e:ce:e0:3f:34:f1:fc: 97:2d:18:49:f1:e9:6a:93:d7:ac:29:f7:cb:40:09:fb:26:c9: 02:d9:49:29:cb:87:f2:33:59:86:e2:e8:1c:2f:02:76:c1:b1: e3:e4:01:36:90:0d:6d:99:57:72:e3:43:8d:70:0d:be:df:ef: 86:4e:b0:f0:f6:39:7b:95:67:cf:ac:7b:3e:d3:04:7b:ac:d6: 19:2c:20:96:13:3a:dd:58:5e:5c:95:a9:7a:c1:37:9d:f8:00: a5:0b:f4:20:3c:69:9e:e0:fd:6b:22:d2:f7:c5:42:bc:7f:48: 79:64:1d:f6:9d:2f:be:3e:03:ef:c7:16:3e:84:74:cc:0d:7c: 0c:b7:fd:e1:2c:1f:08:20:87:d6:3a:a5:03:e3:11:31:e2:ad: 1c:70:05:81:65:01:b4:5b:f6:6f:92:cd:26:a4:34:ca:c0:15: 0a:64:74:cd:96:16:02:67:bc:6f:02:a1:20:ed:59:9b:ce:95: 93:f7:91:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEgq9oBh5D0XYRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk NTMyNTc4NWMtYzgyNS00ZDIyLTk2NTMtZWE1NmY4MDcwNWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC9xHAQG/5rc+mMebDDTlK1kRSATVDYjqV78 sDjFJfFYfBiQKUeYTv2UayBW22BZ2V3/7JycPoUu2ntW5bJmkLTEAwcGi9mm16yZ 9/3cgOP3ijs3FMRAUrX8pfcOOqxl9lcN81phn+Wiick/ZXMrdPlZo3Mv1JijevaB azHTA3veqrbRY0AWcf8oCq5mZV5Zeq1b8Yywsf7NtfS1AO95YyqNfJxXhGdl5XFI XPAFDn9xPkD2YZyZr86cnbGBLYGKCHDzBG/5YZH5yNNy2lqTjaS7fqOsfp6cTv0i 8Jk7znuWwZdgOwEytpFDUyPiZGkgFBPe61ApaHGEUCmpqWV9EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0wypWWFtUOndeFzLIhpGEO3cR4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2FkYTNjMTAtY2JjMi0z NThhLWFkYjktMzcwYTE2YjEzYWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKTLx3VF8nokXAD7QX7NPQhPMVIfdqS7/jXbEad1NZeY+AWp3zuczOhc 7NIZudURfdLglRzz7vestiNfcoyZRcduHs7gPzTx/JctGEnx6WqT16wp98tACfsm yQLZSSnLh/IzWYbi6BwvAnbBsePkATaQDW2ZV3LjQ41wDb7f74ZOsPD2OXuVZ8+s ez7TBHus1hksIJYTOt1YXlyVqXrBN534AKUL9CA8aZ7g/Wsi0vfFQrx/SHlkHfad L74+A+/HFj6EdMwNfAy3/eEsHwggh9Y6pQPjETHirRxwBYFlAbRb9m+SzSakNMrA FQpkdM2WFgJnvG8CoSDtWZvOlZP3kZo= -----END CERTIFICATE-----Generated at Mon Mar 2 20:06:26 2026 by rpki-client