$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/67363bc5-afc2-3ebd-99c4-8fe80b1aaef3.roa File: 67363bc5-afc2-3ebd-99c4-8fe80b1aaef3.roa (raw, json) Hash identifier: O2vQ5P1fLecLYUqGm32pK1b9yRKbQU6HLoHWd+faYas= Subject key identifier: D5:FA:04:E2:9E:03:CE:9A:78:10:B3:E2:88:16:1A:F2:9D:19:07:F2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CB6B723CE535BA10CA185A780 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/67363bc5-afc2-3ebd-99c4-8fe80b1aaef3.roa Signing time: Sun 01 Feb 2026 02:00:32 +0000 ROA not before: Sun 01 Feb 2026 02:00:32 +0000 ROA not after: Sat 02 May 2026 01:00:32 +0000 asID: 8069 IP address blocks: 20.33.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b6:b7:23:ce:53:5b:a1:0c:a1:85:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 1 02:00:32 2026 GMT Not After : May 2 01:00:32 2026 GMT Subject: CN=81b9432f-e9df-4498-8b4e-570961dad2e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:79:57:4d:39:50:8a:1b:54:2f:85:57:8f:97: 1b:24:28:23:6a:c8:b1:2e:07:d6:6c:25:f3:06:0e: 71:ef:36:21:d0:77:86:41:1a:d9:5e:0e:75:bc:2e: c6:7f:b6:c5:34:0d:18:ea:4e:b0:55:ef:79:f7:15: b5:1d:ed:b1:1d:54:9a:7e:13:53:bb:7d:05:ea:1a: 21:6b:74:e7:f7:d9:b8:a6:07:2e:30:d8:6a:c8:49: 85:77:18:cf:7a:8f:6b:9e:20:84:25:ee:ca:12:03: 66:81:1b:06:48:78:c1:63:c2:d0:f3:46:b3:e6:3a: eb:93:b3:e0:93:19:8c:0c:4e:5f:9f:bb:0f:cf:92: 28:b9:0e:da:3d:96:4a:51:5c:42:b9:a3:c9:ec:26: 53:cc:2a:0f:b4:47:8c:66:d0:e4:f4:ab:5d:0d:77: 87:0e:1a:5e:27:6a:91:21:28:1e:f5:07:58:ce:10: 0f:cd:45:ff:ea:69:3b:66:bd:7b:e7:a0:e9:75:1f: 57:46:8e:0f:fd:29:dd:0b:1d:a4:d6:1b:6f:26:8e: 04:8b:64:7c:32:a1:ac:f9:33:21:d8:41:ca:af:47: 1f:8b:a1:1f:35:b2:6c:21:b7:57:a6:57:65:5b:57: 01:5f:88:99:c9:53:46:a8:61:c2:61:eb:72:02:ae: 2f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FA:04:E2:9E:03:CE:9A:78:10:B3:E2:88:16:1A:F2:9D:19:07:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/67363bc5-afc2-3ebd-99c4-8fe80b1aaef3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:82:a9:a1:60:62:bb:7a:f0:38:e4:cc:2a:2c:4f:ba:d2:2d: ba:67:cc:48:29:e7:f1:c8:71:02:99:12:a8:f3:fc:22:17:29: fa:2e:c4:50:90:c1:3d:aa:aa:85:39:e8:1c:52:54:12:d9:ee: c6:74:9a:ed:5d:8b:7b:37:92:a5:e2:24:1a:c4:c1:e6:4f:03: db:86:03:ec:15:d5:e6:d2:f2:bb:d3:12:8b:1e:29:60:97:72: ba:ff:55:d2:d0:fa:fc:bc:e5:51:7c:1d:e1:19:72:e8:4f:5b: f9:1a:28:5b:90:9f:1d:30:75:fb:a4:41:93:2c:ba:65:24:24: 04:e8:f9:1a:15:60:40:6f:ac:f4:42:b6:99:75:74:0d:cd:44: e6:84:03:af:74:b1:c4:35:a6:c8:58:82:2a:85:82:6c:3d:e5: 12:2c:e5:c8:96:6a:92:a7:2f:f2:f8:28:46:71:2b:b3:6d:d1: e1:76:4a:a9:aa:1c:a0:be:56:95:69:17:a0:f0:82:86:43:8e: bf:fd:55:7a:cd:26:4c:1d:dd:63:96:8b:d0:c2:80:96:33:9a: 54:bd:a3:27:2d:49:dd:a0:25:9c:3e:28:1d:00:34:80:62:dd: 0d:ba:d0:dd:4f:9e:d8:af:5f:18:45:7e:71:a5:4b:88:0a:de: ed:36:73:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy2tyPOU1uhDKGFp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk ODFiOTQzMmYtZTlkZi00NDk4LThiNGUtNTcwOTYxZGFkMmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnlXTTlQihtUL4VXj5cbJCgjasixLgfWbCXz Bg5x7zYh0HeGQRrZXg51vC7Gf7bFNA0Y6k6wVe959xW1He2xHVSafhNTu30F6hoh a3Tn99m4pgcuMNhqyEmFdxjPeo9rniCEJe7KEgNmgRsGSHjBY8LQ80az5jrrk7Pg kxmMDE5fn7sPz5IouQ7aPZZKUVxCuaPJ7CZTzCoPtEeMZtDk9KtdDXeHDhpeJ2qR ISge9QdYzhAPzUX/6mk7Zr1756DpdR9XRo4P/SndCx2k1htvJo4Ei2R8MqGs+TMh 2EHKr0cfi6EfNbJsIbdXpldlW1cBX4iZyVNGqGHCYetyAq4vIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNX6BOKeA86aeBCz4ogWGvKdGQfyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjczNjNiYzUtYWZjMi0z ZWJkLTk5YzQtOGZlODBiMWFhZWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCF1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyCqaFgYrt68DjkzCosT7rSLbpnzEgp5/HIcQKZEqjz/CIXKfouxFCQ wT2qqoU56BxSVBLZ7sZ0mu1di3s3kqXiJBrEweZPA9uGA+wV1ebS8rvTEoseKWCX crr/VdLQ+vy85VF8HeEZcuhPW/kaKFuQnx0wdfukQZMsumUkJATo+RoVYEBvrPRC tpl1dA3NROaEA690scQ1pshYgiqFgmw95RIs5ciWapKnL/L4KEZxK7Nt0eF2Sqmq HKC+VpVpF6DwgoZDjr/9VXrNJkwd3WOWi9DCgJYzmlS9oyctSd2gJZw+KB0ANIBi 3Q260N1PntivXxhFfnGlS4gK3u02cxE= -----END CERTIFICATE-----Generated at Mon Mar 2 16:29:04 2026 by rpki-client