$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6bd5db9a-f36f-3176-9d56-0cd93acf873e.roa File: 6bd5db9a-f36f-3176-9d56-0cd93acf873e.roa (raw, json) Hash identifier: MU3/9ySyxtPoTq1nAtYomXWSkVQ7H2yLeRvdtBFTNO0= Subject key identifier: D6:A9:BD:A0:30:CF:9C:E1:D9:B4:70:D1:16:B3:B6:02:2D:B8:DF:F3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CCD0CA99EB441110BFB1C7CA0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6bd5db9a-f36f-3176-9d56-0cd93acf873e.roa Signing time: Mon 09 Feb 2026 02:00:31 +0000 ROA not before: Mon 09 Feb 2026 02:00:31 +0000 ROA not after: Sun 10 May 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.33.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cd:0c:a9:9e:b4:41:11:0b:fb:1c:7c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 9 02:00:31 2026 GMT Not After : May 10 01:00:31 2026 GMT Subject: CN=37526031-9747-477c-9c2f-cd40d1bb68fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:35:2c:da:a9:42:11:7b:3a:75:a3:d5:51:0a: 7e:6a:5b:3c:0b:5f:8c:26:b5:bb:f1:24:97:67:9e: e5:f3:5d:da:04:90:8a:96:b6:f4:53:10:c2:74:7a: c2:2b:42:73:ed:3b:9c:84:3f:9e:7c:60:4e:23:bb: 5b:0e:34:03:30:3d:ff:36:7a:cd:47:bd:32:01:d4: 1b:de:be:b6:3c:b5:d1:51:c5:a6:e3:20:36:97:6b: 6d:22:ad:d8:45:03:a1:8a:9d:44:fc:4b:41:01:2b: 8c:11:b7:a0:ba:a9:5d:10:cf:c6:31:41:c4:42:23: f2:41:89:48:ac:d3:5e:d2:a6:34:55:c7:f5:f9:25: 1b:98:ae:04:09:69:5c:10:1e:89:51:0a:f7:ac:69: 95:1d:99:e1:8b:a5:1c:0c:98:0e:ba:95:5e:ad:57: 5b:cd:35:d1:18:87:03:de:05:a9:f7:ff:24:b6:0e: 44:5e:88:28:7d:68:f2:49:a4:f7:b5:13:e5:1d:69: 01:01:29:0d:f3:d5:4b:90:04:6e:86:bc:22:a8:88: 9f:da:43:1d:41:83:df:93:b6:fb:63:d8:cc:21:cf: a5:d2:01:a2:42:4a:b1:e3:13:5c:29:ae:e4:8e:d0: e9:e7:99:ff:26:dc:4b:e6:d2:32:72:9e:fa:2d:49: 3b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A9:BD:A0:30:CF:9C:E1:D9:B4:70:D1:16:B3:B6:02:2D:B8:DF:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6bd5db9a-f36f-3176-9d56-0cd93acf873e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:29:99:c0:64:76:1c:76:45:e2:39:7a:7b:de:20:5f:b8:00: 7b:02:da:9b:f7:d0:70:5e:0c:c8:ed:9c:88:45:dd:c5:fe:ae: 3b:17:4b:30:7d:f4:c5:6b:3a:05:f4:a1:6d:20:23:95:c3:da: 51:f9:55:7d:44:27:49:73:63:f6:9c:13:d1:03:cf:07:91:8b: eb:4b:ff:f8:b6:69:ff:70:a3:c0:3b:27:03:cc:61:a6:25:ff: 19:de:ad:19:e4:da:7c:76:a7:8b:4e:8a:a2:f2:20:5d:0d:b5: 21:04:97:9e:72:94:82:14:13:99:5f:d3:19:8d:b3:00:b8:3e: a9:5b:2a:79:ff:50:61:60:81:7e:ee:36:cb:0b:a0:c9:9b:64: 76:98:ab:0f:be:4a:42:d5:2e:71:8f:6b:80:72:06:d4:4d:d9: 4a:c1:65:c8:de:61:a5:c3:fe:eb:0f:87:0f:ad:ae:a8:ae:50: 32:60:d6:99:e9:1d:4a:2f:ac:62:0b:dc:83:5f:9a:b8:ca:c1: 2e:4d:14:67:a4:c6:91:e2:f8:c4:38:e2:12:c6:11:6e:bd:5a: 2c:8c:ce:fb:46:4a:f3:ef:b7:2f:95:aa:75:64:c4:75:f2:9f: a2:9f:b2:d4:51:d6:bc:bc:f7:f6:e6:6b:88:5c:1c:d2:fe:72: 76:af:90:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzNDKmetEERC/scfKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk Mzc1MjYwMzEtOTc0Ny00NzdjLTljMmYtY2Q0MGQxYmI2OGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjUs2qlCEXs6daPVUQp+als8C1+MJrW78SSX Z57l813aBJCKlrb0UxDCdHrCK0Jz7TuchD+efGBOI7tbDjQDMD3/NnrNR70yAdQb 3r62PLXRUcWm4yA2l2ttIq3YRQOhip1E/EtBASuMEbeguqldEM/GMUHEQiPyQYlI rNNe0qY0Vcf1+SUbmK4ECWlcEB6JUQr3rGmVHZnhi6UcDJgOupVerVdbzTXRGIcD 3gWp9/8ktg5EXogofWjySaT3tRPlHWkBASkN89VLkARuhrwiqIif2kMdQYPfk7b7 Y9jMIc+l0gGiQkqx4xNcKa7kjtDp55n/JtxL5tIycp76LUk7SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNapvaAwz5zh2bRw0RaztgItuN/zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmJkNWRiOWEtZjM2Zi0z MTc2LTlkNTYtMGNkOTNhY2Y4NzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYpmcBkdhx2ReI5enveIF+4AHsC2pv30HBeDMjtnIhF3cX+rjsXSzB9 9MVrOgX0oW0gI5XD2lH5VX1EJ0lzY/acE9EDzweRi+tL//i2af9wo8A7JwPMYaYl /xnerRnk2nx2p4tOiqLyIF0NtSEEl55ylIIUE5lf0xmNswC4PqlbKnn/UGFggX7u NssLoMmbZHaYqw++SkLVLnGPa4ByBtRN2UrBZcjeYaXD/usPhw+trqiuUDJg1pnp HUovrGIL3INfmrjKwS5NFGekxpHi+MQ44hLGEW69WiyMzvtGSvPvty+VqnVkxHXy n6KfstRR1ry89/bma4hcHNL+cnavkNQ= -----END CERTIFICATE-----Generated at Mon Mar 2 20:16:17 2026 by rpki-client