$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/437bc310-8748-3d28-b170-0b50da76f3c2.roa File: 437bc310-8748-3d28-b170-0b50da76f3c2.roa (raw, json) Hash identifier: /pbwMveDFIyC0kCiowm8F9ptdwirnxpk1YeL6e64fEg= Subject key identifier: 6A:F2:37:82:71:0C:28:01:78:03:03:FF:D1:D2:78:1E:5E:1E:F2:74 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CFC8237CB472D9B7EB3CFA180 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/437bc310-8748-3d28-b170-0b50da76f3c2.roa Signing time: Thu 26 Feb 2026 02:00:32 +0000 ROA not before: Thu 26 Feb 2026 02:00:32 +0000 ROA not after: Wed 27 May 2026 01:00:32 +0000 asID: 8069 IP address blocks: 20.33.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fc:82:37:cb:47:2d:9b:7e:b3:cf:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 26 02:00:32 2026 GMT Not After : May 27 01:00:32 2026 GMT Subject: CN=07e7f89b-9031-4bf1-8c52-80590de0fe53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:38:6e:b2:22:a3:b1:f7:3f:d2:83:9a:e0:5c: 27:80:34:85:e3:0b:fb:f0:58:cd:77:51:da:a3:b0: 32:55:80:0f:27:1d:87:e1:a5:ef:9d:ec:48:19:1b: d5:8a:0c:72:3d:06:6d:8a:2a:0b:ee:67:74:f0:a0: 6b:74:30:fb:d1:ae:62:8c:29:13:82:ef:43:dc:9a: 23:c9:78:80:47:78:a4:db:18:1b:08:55:8b:49:02: 32:f2:6f:4b:10:22:6d:cd:36:00:90:b9:48:f8:5f: dc:79:a3:ad:11:6b:1c:54:f6:f6:c8:2d:b6:ce:ea: 50:dd:47:fb:07:c3:4c:ac:2d:b9:bb:69:9e:cc:63: 70:ea:4a:11:10:8d:e8:18:c0:0b:40:15:b6:3d:87: 8f:09:35:1d:b8:82:8d:00:f1:06:8b:87:e5:05:4d: b2:2d:f6:04:22:fb:a5:30:f3:a1:57:c2:a7:52:a5: c4:ff:e7:1b:81:22:0a:13:f1:73:16:03:eb:c0:97: 88:dc:12:b4:a1:27:59:92:c9:a3:83:0e:e9:72:aa: 4f:11:91:95:dd:fb:60:98:05:dd:cf:0d:36:2e:e1: 42:c1:81:51:55:86:e4:a4:c3:a3:50:23:e8:cf:2d: f7:da:4b:e9:6a:21:7a:96:67:87:9a:88:9a:65:7d: bb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F2:37:82:71:0C:28:01:78:03:03:FF:D1:D2:78:1E:5E:1E:F2:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/437bc310-8748-3d28-b170-0b50da76f3c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:b1:33:87:98:13:7c:76:86:f3:6f:e6:0b:51:43:8b:01:77: 56:13:51:8b:73:44:db:14:16:54:b2:e3:66:22:71:3f:68:03: 44:50:90:ea:e1:ef:c2:e0:23:85:f8:d1:ce:f7:2c:26:31:f9: 47:b5:b2:45:97:39:70:87:18:92:fa:c1:c0:43:61:76:14:5f: e0:67:8e:f8:2a:f8:ea:c1:f1:6d:de:e1:e8:0e:d0:40:7e:fe: ab:4c:47:01:83:68:00:e0:d2:1e:26:41:6b:4f:ee:ba:c6:b5: bb:cc:ee:3f:35:2c:5f:4e:4d:75:8e:75:b1:7c:8c:5b:75:66: 3b:e8:b6:00:3e:d4:dd:31:2d:05:b3:a9:8c:d0:d0:38:e0:84: 48:9d:cd:10:59:f2:a2:f6:6b:d7:3e:cc:4b:05:a6:ac:d0:00: 81:32:e4:4e:ed:56:e3:3a:35:f4:d1:d9:d6:d6:5a:ad:99:81: 81:aa:4c:ca:57:ea:b2:62:d1:11:36:a7:31:84:e3:56:a0:3d: 57:d4:72:8e:9b:b3:7d:f7:1c:58:70:56:df:40:8e:04:28:e2: 07:84:43:9c:0b:40:23:f7:e3:bd:c6:0b:54:9b:5a:90:4f:27: 0a:43:0c:7a:43:04:85:1d:9a:61:e4:7e:a6:b0:ca:9a:1a:0c: 80:7a:2a:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz8gjfLRy2bfrPPoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIyNjAyMDAzMloXDTI2MDUyNzAxMDAzMlowLzEtMCsGA1UEAxMk MDdlN2Y4OWItOTAzMS00YmYxLThjNTItODA1OTBkZTBmZTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDhusiKjsfc/0oOa4FwngDSF4wv78FjNd1Ha o7AyVYAPJx2H4aXvnexIGRvVigxyPQZtiioL7md08KBrdDD70a5ijCkTgu9D3Joj yXiAR3ik2xgbCFWLSQIy8m9LECJtzTYAkLlI+F/ceaOtEWscVPb2yC22zupQ3Uf7 B8NMrC25u2mezGNw6koREI3oGMALQBW2PYePCTUduIKNAPEGi4flBU2yLfYEIvul MPOhV8KnUqXE/+cbgSIKE/FzFgPrwJeI3BK0oSdZksmjgw7pcqpPEZGV3ftgmAXd zw02LuFCwYFRVYbkpMOjUCPozy332kvpaiF6lmeHmoiaZX27fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGryN4JxDCgBeAMD/9HSeB5eHvJ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDM3YmMzMTAtODc0OC0z ZDI4LWIxNzAtMGI1MGRhNzZmM2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2xM4eYE3x2hvNv5gtRQ4sBd1YTUYtzRNsUFlSy42YicT9oA0RQkOrh 78LgI4X40c73LCYx+Ue1skWXOXCHGJL6wcBDYXYUX+Bnjvgq+OrB8W3e4egO0EB+ /qtMRwGDaADg0h4mQWtP7rrGtbvM7j81LF9OTXWOdbF8jFt1ZjvotgA+1N0xLQWz qYzQ0DjghEidzRBZ8qL2a9c+zEsFpqzQAIEy5E7tVuM6NfTR2dbWWq2ZgYGqTMpX 6rJi0RE2pzGE41agPVfUco6bs333HFhwVt9AjgQo4geEQ5wLQCP3473GC1SbWpBP JwpDDHpDBIUdmmHkfqawypoaDIB6KmU= -----END CERTIFICATE-----Generated at Mon Mar 2 20:06:26 2026 by rpki-client