$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72d9f07c-a11c-33df-ab2e-319967d0580d.roa File: 72d9f07c-a11c-33df-ab2e-319967d0580d.roa (raw, json) Hash identifier: BE9z5KFXB3XUpUChVBrBwO4rKrNqNYLoL7qM90Vy6sY= Subject key identifier: F3:A8:56:DE:1E:C6:F6:CD:A6:C2:11:56:2E:AD:BA:7C:20:96:D3:47 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CCD0CA98902E6317270FDB6F0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72d9f07c-a11c-33df-ab2e-319967d0580d.roa Signing time: Mon 09 Feb 2026 02:00:31 +0000 ROA not before: Mon 09 Feb 2026 02:00:31 +0000 ROA not after: Sun 10 May 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.33.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cd:0c:a9:89:02:e6:31:72:70:fd:b6:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 9 02:00:31 2026 GMT Not After : May 10 01:00:31 2026 GMT Subject: CN=da043eb8-341d-4a13-863a-e0b88e2d3b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8a:7c:fd:79:38:cf:3c:db:4b:c6:b2:45:19: 02:e5:29:2c:0e:dd:d7:ea:6b:40:c7:36:d1:e6:96: 64:f8:02:0f:61:94:9f:86:91:19:f8:1c:8b:d4:6e: 09:2b:c5:26:f9:b9:ae:76:d0:c7:57:2c:d0:0c:17: 64:28:ea:11:cf:9d:bc:ad:03:55:40:66:22:86:cd: a1:e4:c3:b7:fb:66:4d:9f:e3:6f:05:94:73:f9:8b: a4:7b:ff:de:14:f6:fd:49:85:0b:89:8e:83:3a:48: 30:88:a7:8e:c8:ba:73:1b:ce:78:63:07:a6:ae:b8: 31:61:5b:89:41:01:f2:6e:71:d4:6b:b2:06:95:0f: 25:d7:a0:a8:29:ab:15:7a:e4:27:44:b9:59:c2:0c: 98:f3:83:41:89:30:1f:d4:e0:86:18:d6:d2:80:09: 9e:5f:af:59:c7:16:83:42:4e:74:16:98:16:b1:ad: ba:78:e9:f1:c8:b1:98:c6:89:14:50:78:39:a3:f4: 1d:13:3b:d6:4c:a5:ae:c6:ac:9b:31:36:fa:9b:a5: db:c3:8c:99:13:5e:3d:4d:1e:5f:61:56:c9:2f:a8: 1a:25:79:a0:c6:9a:fa:36:57:c3:7b:50:1f:6d:d8: e0:64:eb:26:d7:2b:3f:3e:3d:80:4c:34:a5:c7:b7: 2f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A8:56:DE:1E:C6:F6:CD:A6:C2:11:56:2E:AD:BA:7C:20:96:D3:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72d9f07c-a11c-33df-ab2e-319967d0580d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:aa:74:b8:91:ac:80:fb:4c:be:0d:88:2c:2f:08:4b:7d:70: 70:f4:2f:42:18:68:cc:da:7e:79:8b:d5:5b:52:d6:8a:ff:a2: f0:63:ba:d7:b3:f4:fe:28:09:82:b5:e2:01:5e:0a:3f:46:96: 7d:aa:fd:72:14:4c:2d:eb:56:cd:98:4b:3e:3e:4d:4e:62:02: f7:cd:b0:ba:8a:7e:0f:37:89:8f:88:20:b3:5a:22:2d:d1:e4: 0c:a4:9b:17:b3:8f:ba:7f:82:21:a7:ad:c4:1a:ef:cb:d1:5c: 7b:a8:37:8f:95:ec:9a:0a:b4:03:2c:50:02:a8:4a:36:38:60: 2c:e5:81:46:98:94:b4:e5:93:63:b3:e4:81:ea:51:ae:e4:f5: ab:b2:8f:91:a4:55:f2:ad:e6:20:45:8f:eb:77:4d:ef:0c:8c: 2b:0b:a1:2f:08:ba:43:6d:53:7f:d8:ea:8e:e2:bf:b2:e5:aa: 79:68:73:3a:41:b4:25:47:e9:5d:40:ad:69:b5:54:9c:9a:c5: 4c:33:f3:4b:47:ad:8f:2e:71:be:59:bc:e2:e1:e4:cb:7c:10: 18:0b:18:de:5e:36:6c:6e:f6:6b:a2:17:69:3d:56:01:13:2c: 12:53:8a:0c:d5:7c:d1:ad:35:78:96:f8:80:f4:c8:b7:07:d6: b9:f7:7c:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzNDKmJAuYxcnD9tvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk ZGEwNDNlYjgtMzQxZC00YTEzLTg2M2EtZTBiODhlMmQzYjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvop8/Xk4zzzbS8ayRRkC5SksDt3X6mtAxzbR 5pZk+AIPYZSfhpEZ+ByL1G4JK8Um+bmudtDHVyzQDBdkKOoRz528rQNVQGYihs2h 5MO3+2ZNn+NvBZRz+Yuke//eFPb9SYULiY6DOkgwiKeOyLpzG854YwemrrgxYVuJ QQHybnHUa7IGlQ8l16CoKasVeuQnRLlZwgyY84NBiTAf1OCGGNbSgAmeX69ZxxaD Qk50FpgWsa26eOnxyLGYxokUUHg5o/QdEzvWTKWuxqybMTb6m6Xbw4yZE149TR5f YVbJL6gaJXmgxpr6NlfDe1AfbdjgZOsm1ys/Pj2ATDSlx7cvJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOoVt4exvbNpsIRVi6tunwgltNHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzJkOWYwN2MtYTExYy0z M2RmLWFiMmUtMzE5OTY3ZDA1ODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCETMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGqdLiRrID7TL4NiCwvCEt9cHD0L0IYaMzafnmL1VtS1or/ovBjutez 9P4oCYK14gFeCj9Gln2q/XIUTC3rVs2YSz4+TU5iAvfNsLqKfg83iY+IILNaIi3R 5Aykmxezj7p/giGnrcQa78vRXHuoN4+V7JoKtAMsUAKoSjY4YCzlgUaYlLTlk2Oz 5IHqUa7k9auyj5GkVfKt5iBFj+t3Te8MjCsLoS8IukNtU3/Y6o7iv7LlqnloczpB tCVH6V1ArWm1VJyaxUwz80tHrY8ucb5ZvOLh5Mt8EBgLGN5eNmxu9muiF2k9VgET LBJTigzVfNGtNXiW+ID0yLcH1rn3fBI= -----END CERTIFICATE-----Generated at Mon Mar 2 16:30:23 2026 by rpki-client