$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c842db2-d012-3551-87ea-7b6b22348b27.roa File: 5c842db2-d012-3551-87ea-7b6b22348b27.roa (raw, json) Hash identifier: iPWb8ipBViAa9MiVbztHX4MFl1+XKMdv9S3sSfz8wmY= Subject key identifier: DA:34:05:46:AB:EB:CE:BE:5D:ED:5B:FD:11:2E:2E:66:3F:78:1C:CF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CFC8236411E0F4307C98B8510 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c842db2-d012-3551-87ea-7b6b22348b27.roa Signing time: Thu 26 Feb 2026 02:00:32 +0000 ROA not before: Thu 26 Feb 2026 02:00:32 +0000 ROA not after: Wed 27 May 2026 01:00:32 +0000 asID: 8069 IP address blocks: 20.33.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fc:82:36:41:1e:0f:43:07:c9:8b:85:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 26 02:00:32 2026 GMT Not After : May 27 01:00:32 2026 GMT Subject: CN=880f85c3-5993-4129-827e-f7b1c3a758bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f7:b1:ff:cc:d1:ef:dc:b5:71:e3:e2:71:3c: e5:b3:82:54:5b:32:b9:e0:b3:5c:54:d2:f3:cd:e4: 55:32:ff:68:7a:96:d3:8a:81:14:9d:9c:7f:ad:6e: 4e:c2:ea:ba:78:e2:79:4f:e8:4f:b6:32:84:49:b6: 5e:46:1b:e4:21:d4:e9:b3:f2:06:19:a5:7f:e8:54: e7:39:ba:e1:b7:4e:4f:bd:3c:cf:f6:1b:7b:15:75: 4a:34:f4:96:41:00:68:1c:84:a5:67:cf:59:6a:08: 10:24:bb:f3:9c:4c:a9:ab:4e:3c:f6:1b:37:0b:b1: 19:27:1b:40:7c:97:79:39:a4:e3:2a:b6:e5:2a:c7: 18:58:78:bb:de:1c:eb:70:d4:fa:08:fb:39:75:35: 11:94:c2:ad:1c:1b:28:ab:2f:ac:23:30:20:3b:85: cb:96:1a:00:3b:b4:d5:97:93:b9:f6:f2:92:50:d8: 60:fd:a0:35:a9:c5:47:96:d4:42:ed:91:4c:8f:68: fe:ae:46:4c:49:da:45:8c:e9:70:83:d6:27:67:65: b9:d0:c9:69:ab:69:6c:e0:1f:71:9e:2e:35:5e:a8: 6a:7e:ff:fe:0c:6f:0b:dc:4a:68:9f:6c:b0:f8:38: 78:d5:ec:fb:16:06:2a:87:d4:3d:3c:8d:6e:6f:d8: 6c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:34:05:46:AB:EB:CE:BE:5D:ED:5B:FD:11:2E:2E:66:3F:78:1C:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c842db2-d012-3551-87ea-7b6b22348b27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:61:15:30:31:ba:5e:81:6b:42:de:e5:09:13:75:c3:48:9f: c6:0e:d7:9f:c8:8a:54:cf:4c:42:09:ff:a6:a4:8f:1e:b0:c0: 01:97:62:ba:ed:86:75:78:ec:56:b7:6e:11:3b:c2:7e:46:0a: 6b:61:81:93:e7:79:f9:8a:6b:1b:89:01:b0:3d:74:6b:2d:46: b0:53:85:86:b6:7b:fc:17:53:de:b7:35:01:0f:36:60:6f:52: 1e:69:79:54:92:76:71:92:1b:8c:26:58:c2:6d:2e:a0:3f:c7: 17:f4:d5:f9:df:a3:c5:d4:c0:f9:44:c0:31:81:5b:cd:59:1b: 50:32:5d:bd:ba:9d:11:18:59:6c:74:b9:2b:3a:f7:c5:20:d4: bb:94:d3:ea:78:19:4b:5a:a7:28:2f:36:e6:6c:d0:2e:9f:a4: 8e:a7:11:ce:2c:8c:55:bc:a0:90:fc:95:ac:2c:95:4f:c9:dc: 63:c5:71:90:a4:fa:9a:5d:c7:68:e2:44:5b:68:c0:1b:56:a3: 28:6f:72:d2:24:7d:3e:33:51:5b:e1:ba:37:8b:a4:e5:b6:86: 8d:de:f3:55:d9:5f:5f:c1:1b:55:5b:4e:ab:60:bd:17:68:96: be:27:42:11:69:4a:c4:23:91:2d:ba:97:63:a3:0b:b1:84:10: 63:ff:de:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz8gjZBHg9DB8mLhRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIyNjAyMDAzMloXDTI2MDUyNzAxMDAzMlowLzEtMCsGA1UEAxMk ODgwZjg1YzMtNTk5My00MTI5LTgyN2UtZjdiMWMzYTc1OGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPex/8zR79y1cePicTzls4JUWzK54LNcVNLz zeRVMv9oepbTioEUnZx/rW5Owuq6eOJ5T+hPtjKESbZeRhvkIdTps/IGGaV/6FTn Obrht05PvTzP9ht7FXVKNPSWQQBoHISlZ89ZaggQJLvznEypq0489hs3C7EZJxtA fJd5OaTjKrblKscYWHi73hzrcNT6CPs5dTURlMKtHBsoqy+sIzAgO4XLlhoAO7TV l5O59vKSUNhg/aA1qcVHltRC7ZFMj2j+rkZMSdpFjOlwg9YnZ2W50Mlpq2ls4B9x ni41Xqhqfv/+DG8L3Epon2yw+Dh41ez7FgYqh9Q9PI1ub9hszQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNo0BUar686+Xe1b/REuLmY/eBzPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWM4NDJkYjItZDAxMi0z NTUxLTg3ZWEtN2I2YjIyMzQ4YjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZhFTAxul6Ba0Le5QkTdcNIn8YO15/IilTPTEIJ/6akjx6wwAGXYrrt hnV47Fa3bhE7wn5GCmthgZPnefmKaxuJAbA9dGstRrBThYa2e/wXU963NQEPNmBv Uh5peVSSdnGSG4wmWMJtLqA/xxf01fnfo8XUwPlEwDGBW81ZG1AyXb26nREYWWx0 uSs698Ug1LuU0+p4GUtapygvNuZs0C6fpI6nEc4sjFW8oJD8lawslU/J3GPFcZCk +ppdx2jiRFtowBtWoyhvctIkfT4zUVvhujeLpOW2ho3e81XZX1/BG1VbTqtgvRdo lr4nQhFpSsQjkS26l2OjC7GEEGP/3pQ= -----END CERTIFICATE-----Generated at Mon Mar 2 16:29:08 2026 by rpki-client