$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c998ab9-7b2e-30d5-97fd-aa4335abb614.roa File: 5c998ab9-7b2e-30d5-97fd-aa4335abb614.roa (raw, json) Hash identifier: bfQEk9BsV9/upDwlFu+RT1MnlF3N4vSDlqOWnrpvXxA= Subject key identifier: 9A:50:BF:59:97:4A:D7:AF:6E:13:D3:26:4B:AA:48:0B:BB:A5:85:CB Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CCD0CAA5BE5A0A91401481A00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c998ab9-7b2e-30d5-97fd-aa4335abb614.roa Signing time: Mon 09 Feb 2026 02:00:31 +0000 ROA not before: Mon 09 Feb 2026 02:00:31 +0000 ROA not after: Sun 10 May 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.33.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cd:0c:aa:5b:e5:a0:a9:14:01:48:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 9 02:00:31 2026 GMT Not After : May 10 01:00:31 2026 GMT Subject: CN=a8afd5fb-4ccd-451b-b124-b007fa7cc93a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:36:6e:cd:1c:54:d9:7f:61:67:1f:4d:1a:3c: e2:11:0e:98:02:e2:29:49:7e:6c:36:67:c5:f1:dc: d8:b3:cb:a7:1d:ad:c6:85:53:78:51:77:ef:4b:58: 70:69:7e:9c:dd:22:23:ef:9e:45:32:56:61:91:f2: 69:c5:bc:93:01:92:4f:0a:c0:e8:79:5e:a3:e4:98: 4f:32:b5:d2:af:b3:07:b9:b7:e0:88:6d:7c:07:72: 43:c6:f8:59:35:e9:d8:f5:70:8e:9c:94:06:b4:ef: f1:87:5f:ab:f8:cc:5b:27:f8:e8:50:2d:5b:a6:be: 46:88:3e:d5:14:de:ab:f5:eb:da:bf:0c:cc:ea:cb: 5f:94:3d:09:30:c1:7d:71:74:38:88:51:c8:59:f6: f0:e5:e4:97:11:63:b6:6d:87:40:d0:9a:e0:4f:2f: db:b7:36:10:cd:c3:58:01:69:6a:bb:5d:17:b3:01: 4c:23:54:9b:d9:47:b0:7c:bb:c3:a3:44:d7:f5:f5: 1c:e1:f3:40:c3:c6:df:38:00:e4:02:79:cf:c7:b0: dc:c3:44:1f:9b:08:57:ab:65:78:1d:32:60:5d:19: 12:33:5c:f6:2e:01:a6:32:57:d3:29:65:a2:e2:73: dc:b7:11:8e:83:cf:32:2d:95:14:70:68:91:a4:dc: 95:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:50:BF:59:97:4A:D7:AF:6E:13:D3:26:4B:AA:48:0B:BB:A5:85:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c998ab9-7b2e-30d5-97fd-aa4335abb614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:c1:d9:a9:34:9c:f2:5b:8b:42:b8:7d:f7:e8:50:6c:a0:29: 18:41:51:73:6c:41:6b:30:1e:d4:c8:74:b4:87:b5:01:08:e3: 87:c5:3e:e0:3e:04:95:7c:24:49:4f:56:7b:1a:02:b3:72:d6: 32:b4:73:03:b7:a5:33:3f:26:42:c3:a1:dc:66:73:1c:f6:9d: 1f:ec:da:bc:2a:e7:af:a9:96:5e:02:1f:bc:a8:ac:d0:68:79: 7b:40:83:f1:50:98:ac:7a:e0:13:26:07:95:fb:40:56:59:3a: cc:15:11:df:e4:9e:33:9e:5b:82:77:14:0f:de:61:9f:e0:23: c9:2a:df:8d:e3:c0:a3:bf:10:27:29:78:2c:a2:e8:50:a7:99: 33:af:dd:8b:d5:7f:f8:93:d2:78:58:2e:7f:5b:08:30:d1:11: e2:bb:c5:16:5d:b2:b5:db:4a:1f:28:64:b0:7b:92:aa:af:4f: 94:d0:8d:c3:e5:6f:3b:9f:3f:02:fd:5b:b2:96:e4:27:90:5f: d7:00:f9:38:96:26:59:51:45:f9:7c:76:4e:03:0e:e2:b9:7c: 2e:e4:10:6d:af:3b:f9:b1:3f:f2:2f:3f:da:33:2e:02:9a:db: 59:70:d7:4c:61:a9:e9:77:31:f0:da:35:8b:b9:cb:96:6c:af: 4a:38:52:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzNDKpb5aCpFAFIGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk YThhZmQ1ZmItNGNjZC00NTFiLWIxMjQtYjAwN2ZhN2NjOTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjZuzRxU2X9hZx9NGjziEQ6YAuIpSX5sNmfF 8dzYs8unHa3GhVN4UXfvS1hwaX6c3SIj755FMlZhkfJpxbyTAZJPCsDoeV6j5JhP MrXSr7MHubfgiG18B3JDxvhZNenY9XCOnJQGtO/xh1+r+MxbJ/joUC1bpr5GiD7V FN6r9evavwzM6stflD0JMMF9cXQ4iFHIWfbw5eSXEWO2bYdA0JrgTy/btzYQzcNY AWlqu10XswFMI1Sb2UewfLvDo0TX9fUc4fNAw8bfOADkAnnPx7Dcw0QfmwhXq2V4 HTJgXRkSM1z2LgGmMlfTKWWi4nPctxGOg88yLZUUcGiRpNyVrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpQv1mXStevbhPTJkuqSAu7pYXLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWM5OThhYjktN2IyZS0z MGQ1LTk3ZmQtYWE0MzM1YWJiNjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvB2ak0nPJbi0K4fffoUGygKRhBUXNsQWswHtTIdLSHtQEI44fFPuA+ BJV8JElPVnsaArNy1jK0cwO3pTM/JkLDodxmcxz2nR/s2rwq56+pll4CH7yorNBo eXtAg/FQmKx64BMmB5X7QFZZOswVEd/knjOeW4J3FA/eYZ/gI8kq343jwKO/ECcp eCyi6FCnmTOv3YvVf/iT0nhYLn9bCDDREeK7xRZdsrXbSh8oZLB7kqqvT5TQjcPl bzufPwL9W7KW5CeQX9cA+TiWJllRRfl8dk4DDuK5fC7kEG2vO/mxP/IvP9ozLgKa 21lw10xhqel3MfDaNYu5y5Zsr0o4Ugs= -----END CERTIFICATE-----Generated at Mon Mar 2 16:29:12 2026 by rpki-client