$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4a91552d-6deb-3e19-805b-ab52062a7fcd.roa File: 4a91552d-6deb-3e19-805b-ab52062a7fcd.roa (raw, json) Hash identifier: eJsa1CrFkM/PdNG7HpnFOS5CdOfjfSAT9aKWUWi45oM= Subject key identifier: B3:AC:D5:8F:FF:D6:90:66:36:E0:CE:A2:F4:AC:45:71:13:71:57:82 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CC6120B3710390375A5DD3200 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4a91552d-6deb-3e19-805b-ab52062a7fcd.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.33.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:12:0b:37:10:39:03:75:a5:dd:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=74cc10ca-1e2b-41c9-bdb7-131bba572ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3d:16:df:56:e4:e5:8f:7a:14:85:cf:90:fa: 82:49:56:b1:30:17:fb:b8:d0:e2:57:36:f5:12:6c: 43:c2:1e:f8:6e:07:27:ae:4b:55:31:c8:8d:bc:e8: 40:14:81:9f:bd:56:9a:a8:fd:7d:84:d8:98:63:63: e6:74:43:c1:3f:41:cc:7a:83:e2:da:0e:72:44:c3: 33:da:2e:f9:45:50:16:47:30:bd:6c:7b:5d:16:f4: 8b:4d:31:71:bd:76:33:22:7a:4e:87:4e:b3:86:44: bc:ed:59:c2:79:0a:b6:11:1a:7c:57:9e:97:7f:57: 59:12:00:1c:7e:29:24:2d:5e:c0:c6:60:9e:5b:5a: 98:07:15:c4:9a:b1:74:7a:19:52:0a:b7:17:da:b4: e3:bb:2b:84:81:c1:55:65:a3:88:31:7a:ac:04:57: 68:c6:ea:70:74:f4:21:58:32:f3:ed:0e:9e:19:94: ba:ae:e5:35:05:f3:52:10:ad:6f:fd:9c:56:db:58: db:a8:0b:9d:5d:f3:da:48:12:28:c6:a0:09:0f:86: 81:77:ab:b2:94:1a:65:25:57:08:32:c1:33:96:18: 49:81:02:8b:80:70:41:4a:31:f9:d4:c1:c1:01:71: 89:4a:a5:c2:52:78:67:ec:6f:f2:94:34:eb:b8:f2: 91:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AC:D5:8F:FF:D6:90:66:36:E0:CE:A2:F4:AC:45:71:13:71:57:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4a91552d-6deb-3e19-805b-ab52062a7fcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:5c:89:73:92:89:59:e6:d5:3a:18:4e:c1:63:b3:57:14:97: aa:85:9f:43:03:b3:58:3d:05:e0:18:37:53:2e:41:59:55:7a: ac:0e:77:08:01:81:07:2a:91:b8:1d:56:cb:95:ef:7d:7f:51: 59:1a:f9:14:fb:dd:a3:20:38:4d:47:75:51:8d:23:02:fa:75: 0a:39:54:39:e7:a3:31:2f:c0:06:0f:10:e6:72:78:49:57:da: 5d:ba:74:96:5a:42:59:50:8b:6c:ac:26:de:dd:19:66:27:45: bc:75:b0:9a:f3:d5:81:d5:37:dc:00:f5:5e:4b:2c:72:49:b3: ae:04:d7:f6:64:80:13:c4:61:0f:ec:03:04:9c:c9:0e:8d:b2: ce:3f:e9:27:bd:b5:4f:99:81:a7:8b:cc:69:ca:91:0a:c4:eb: 22:d9:e3:5a:ac:97:c3:61:86:35:ba:c2:33:78:9d:61:35:49: cb:ff:8c:ea:5a:a5:16:6f:ce:70:02:3f:55:1a:71:b2:3f:07: 50:4e:da:7b:fc:ca:91:29:1f:48:fe:54:67:f3:83:3d:75:7c: 74:e0:f9:ab:88:e2:1a:f5:14:19:9a:c4:94:9c:5f:7e:c7:90: 37:1f:aa:ab:81:e8:02:e0:82:a4:95:39:8e:1d:23:f1:31:0e: 4a:8a:1d:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEgs3EDkDdaXdMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk NzRjYzEwY2EtMWUyYi00MWM5LWJkYjctMTMxYmJhNTcyYWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiD0W31bk5Y96FIXPkPqCSVaxMBf7uNDiVzb1 EmxDwh74bgcnrktVMciNvOhAFIGfvVaaqP19hNiYY2PmdEPBP0HMeoPi2g5yRMMz 2i75RVAWRzC9bHtdFvSLTTFxvXYzInpOh06zhkS87VnCeQq2ERp8V56Xf1dZEgAc fikkLV7AxmCeW1qYBxXEmrF0ehlSCrcX2rTjuyuEgcFVZaOIMXqsBFdoxupwdPQh WDLz7Q6eGZS6ruU1BfNSEK1v/ZxW21jbqAudXfPaSBIoxqAJD4aBd6uylBplJVcI MsEzlhhJgQKLgHBBSjH51MHBAXGJSqXCUnhn7G/ylDTruPKRVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOs1Y//1pBmNuDOovSsRXETcVeCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGE5MTU1MmQtNmRlYi0z ZTE5LTgwNWItYWI1MjA2MmE3ZmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9ciXOSiVnm1ToYTsFjs1cUl6qFn0MDs1g9BeAYN1MuQVlVeqwOdwgB gQcqkbgdVsuV731/UVka+RT73aMgOE1HdVGNIwL6dQo5VDnnozEvwAYPEOZyeElX 2l26dJZaQllQi2ysJt7dGWYnRbx1sJrz1YHVN9wA9V5LLHJJs64E1/ZkgBPEYQ/s AwScyQ6Nss4/6Se9tU+ZgaeLzGnKkQrE6yLZ41qsl8NhhjW6wjN4nWE1Scv/jOpa pRZvznACP1UacbI/B1BO2nv8ypEpH0j+VGfzgz11fHTg+auI4hr1FBmaxJScX37H kDcfqquB6ALggqSVOY4dI/ExDkqKHVE= -----END CERTIFICATE-----Generated at Mon Mar 2 20:06:52 2026 by rpki-client