$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/41d75923-4fed-3529-9c5f-c5e9ff40d9e6.roa File: 41d75923-4fed-3529-9c5f-c5e9ff40d9e6.roa (raw, json) Hash identifier: CCecUwC7BpM786bDQaKveEg15RMd/vvxTqdUdDz+a+o= Subject key identifier: C8:8B:E0:47:E1:3B:2C:3A:A8:5E:3E:CB:F3:7E:A3:6E:7E:42:47:E4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CCD0CA973EBC0971F30EBEC80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/41d75923-4fed-3529-9c5f-c5e9ff40d9e6.roa Signing time: Mon 09 Feb 2026 02:00:31 +0000 ROA not before: Mon 09 Feb 2026 02:00:31 +0000 ROA not after: Sun 10 May 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.33.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cd:0c:a9:73:eb:c0:97:1f:30:eb:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 9 02:00:31 2026 GMT Not After : May 10 01:00:31 2026 GMT Subject: CN=e8c3a91c-8a77-4b1b-9a58-85c1f74e99bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:26:88:9a:75:b2:1c:b2:d7:64:b3:3c:6c:50: 55:d8:4d:ae:1a:c7:87:e2:8f:70:c1:bb:ba:23:78: dc:b7:f6:00:4f:e7:ae:69:e2:06:27:74:f7:b8:bf: 0d:68:d0:22:f7:d8:52:73:0e:d3:7f:3f:6a:46:a4: 2b:90:1c:77:db:4f:d5:a0:8b:2a:b0:06:c8:f5:8d: d9:68:27:0a:94:5c:c1:5c:e3:f7:b0:b7:87:04:40: 21:ee:4b:1a:7e:a3:82:0b:1c:b1:9a:63:0f:e0:25: 2f:76:c9:b2:54:bf:75:76:0e:57:36:47:5b:bb:03: bf:52:df:0b:97:7b:a1:f6:c8:d3:58:b2:aa:2d:77: 15:d5:04:74:78:56:51:1a:90:14:75:77:09:2e:31: 04:3d:f6:92:2c:cb:4a:70:62:14:9e:33:93:50:83: 15:87:89:1c:be:a8:4e:0a:ed:2e:d5:34:00:6e:3e: d8:10:66:39:3e:3c:79:5f:3d:5f:e2:a4:01:0f:03: 66:d3:2e:78:56:e6:ac:28:59:87:ab:66:66:d8:9d: f3:96:f3:95:d2:98:97:b1:f2:d1:ab:4a:d9:87:f5: d4:ab:4b:ae:c5:96:6d:d2:c6:0e:9b:88:e6:ab:e3: e1:8d:89:3c:9f:f2:24:3c:e4:d8:a9:1b:ae:c4:ee: 7a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8B:E0:47:E1:3B:2C:3A:A8:5E:3E:CB:F3:7E:A3:6E:7E:42:47:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/41d75923-4fed-3529-9c5f-c5e9ff40d9e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:39:8a:a1:76:12:e2:5d:cd:33:e0:43:f1:b4:16:30:71:2b: 8e:7a:29:e7:56:b0:58:e9:52:a3:8f:d2:64:d5:e6:dd:f1:6d: dc:a1:91:bb:84:67:46:5a:b0:6f:93:5a:e0:4a:b4:e0:b5:ea: 75:8b:52:53:0c:2c:b3:80:38:e0:7d:2a:4f:c4:0c:b2:52:fa: 0f:4b:4d:a5:5f:e2:c6:99:34:c4:4e:ac:5b:b3:06:39:81:62: a0:f7:9d:06:5b:d8:0b:04:64:b6:f7:79:56:9a:b7:7a:21:7a: b7:d1:99:2c:37:db:ba:87:9d:06:a4:f3:4b:78:ee:bc:3e:a7: af:73:71:cd:59:af:66:7d:86:d4:27:d0:a7:c8:75:66:e6:ce: 1d:2a:1e:11:e1:72:f8:e0:f7:ec:53:4c:b1:1c:6a:b2:45:07: b2:d9:8f:c1:36:8a:92:72:90:37:8a:69:27:29:58:49:6b:07: c8:09:e0:2b:9b:d5:26:c7:61:cf:4e:c4:b4:7c:04:28:4d:b2: d9:0a:32:d7:97:c7:18:18:b2:5b:01:28:33:81:bb:46:c9:e4: 3f:83:da:6f:ee:f0:82:43:0b:97:91:30:10:d4:80:84:03:1a: 7b:b4:41:21:bf:70:04:06:f4:5b:b6:cd:db:36:48:58:a3:3d: d2:25:d7:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzNDKlz68CXHzDr7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk ZThjM2E5MWMtOGE3Ny00YjFiLTlhNTgtODVjMWY3NGU5OWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCaImnWyHLLXZLM8bFBV2E2uGseH4o9wwbu6 I3jct/YAT+euaeIGJ3T3uL8NaNAi99hScw7Tfz9qRqQrkBx320/VoIsqsAbI9Y3Z aCcKlFzBXOP3sLeHBEAh7ksafqOCCxyxmmMP4CUvdsmyVL91dg5XNkdbuwO/Ut8L l3uh9sjTWLKqLXcV1QR0eFZRGpAUdXcJLjEEPfaSLMtKcGIUnjOTUIMVh4kcvqhO Cu0u1TQAbj7YEGY5Pjx5Xz1f4qQBDwNm0y54VuasKFmHq2Zm2J3zlvOV0piXsfLR q0rZh/XUq0uuxZZt0sYOm4jmq+PhjYk8n/IkPOTYqRuuxO56UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiL4EfhOyw6qF4+y/N+o25+QkfkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDFkNzU5MjMtNGZlZC0z NTI5LTljNWYtYzVlOWZmNDBkOWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHg5iqF2EuJdzTPgQ/G0FjBxK456KedWsFjpUqOP0mTV5t3xbdyhkbuE Z0ZasG+TWuBKtOC16nWLUlMMLLOAOOB9Kk/EDLJS+g9LTaVf4saZNMROrFuzBjmB YqD3nQZb2AsEZLb3eVaat3oherfRmSw327qHnQak80t47rw+p69zcc1Zr2Z9htQn 0KfIdWbmzh0qHhHhcvjg9+xTTLEcarJFB7LZj8E2ipJykDeKaScpWElrB8gJ4Cub 1SbHYc9OxLR8BChNstkKMteXxxgYslsBKDOBu0bJ5D+D2m/u8IJDC5eRMBDUgIQD Gnu0QSG/cAQG9Fu2zds2SFijPdIl10U= -----END CERTIFICATE-----Generated at Mon Mar 2 16:29:10 2026 by rpki-client