$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/735f96b3-047e-360f-bb8a-41e8e0af2ace.roa File: 735f96b3-047e-360f-bb8a-41e8e0af2ace.roa (raw, json) Hash identifier: CKnr9GqD0amyWT/zP2JmRs6YSUTqcV0kKb2d4wo7CPY= Subject key identifier: F6:2F:1B:B2:9B:3C:1E:97:41:C5:6F:9D:8D:76:E4:BA:D2:90:20:E2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CFC8237EB3AA4AE2502F27280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/735f96b3-047e-360f-bb8a-41e8e0af2ace.roa Signing time: Thu 26 Feb 2026 02:00:32 +0000 ROA not before: Thu 26 Feb 2026 02:00:32 +0000 ROA not after: Wed 27 May 2026 01:00:32 +0000 asID: 8069 IP address blocks: 20.33.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fc:82:37:eb:3a:a4:ae:25:02:f2:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 26 02:00:32 2026 GMT Not After : May 27 01:00:32 2026 GMT Subject: CN=bebc2e53-d8f8-43b2-94e9-6068aeb2842f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d3:b0:89:b4:1e:c3:2c:0e:12:c1:5e:ec:a9: 20:a1:e2:a2:da:76:1c:34:8e:03:2d:2e:b1:6e:37: 8e:82:7f:8d:19:f4:ea:39:00:5f:31:f9:1c:fc:44: ac:6d:96:b3:d3:fd:76:28:8c:31:dc:e0:8b:ca:91: d4:4a:ed:b1:7b:9f:10:d7:67:0e:90:e4:4a:96:8d: 3d:5a:e6:7e:f8:fa:89:ab:80:35:ab:18:85:d0:ed: f5:09:6f:2e:40:5d:05:07:71:a8:55:9e:6f:2a:2a: 0a:dc:4d:48:23:a7:01:31:cf:ed:61:ed:da:81:46: f6:ef:ed:6f:1b:f5:34:f2:52:03:29:6d:5f:42:1b: 36:ae:35:83:50:c7:0b:3a:bf:27:2f:15:5a:39:93: 0e:d4:fa:f5:db:ca:50:1e:d0:d0:a8:9d:ce:4f:0e: f7:df:31:3c:82:80:c4:9b:4f:c8:6c:6d:3c:27:d8: 07:16:c3:1a:30:46:d0:ea:7f:ee:7e:12:fc:5c:b3: 10:90:a5:34:62:89:5e:4e:8d:c9:78:2b:5c:de:f7: 01:b6:4c:3a:bc:e5:24:8a:f0:87:cc:3c:2b:12:7e: 6e:c9:13:58:30:57:bf:aa:fa:c7:82:b0:46:aa:02: 61:b6:f0:88:65:32:98:43:11:c2:f3:6c:cb:cc:16: b9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2F:1B:B2:9B:3C:1E:97:41:C5:6F:9D:8D:76:E4:BA:D2:90:20:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/735f96b3-047e-360f-bb8a-41e8e0af2ace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:e4:55:f7:16:03:83:93:30:38:92:13:9c:fd:44:50:9c:b8: 8b:b7:d9:5b:ae:cd:fc:9c:7b:71:99:69:ab:c8:6f:b5:22:56: 8c:d0:4b:56:36:02:d9:2a:62:5e:05:f9:2f:76:e4:12:3a:aa: 6f:42:fc:b0:60:c7:0e:58:46:c5:7b:ca:c3:c3:3f:d1:eb:3b: 1a:3d:bb:4d:be:5e:dd:46:f5:57:82:61:d7:03:ba:f9:d0:4c: 08:e7:b5:32:9c:05:43:64:9f:4c:94:4f:7c:cc:97:e0:fb:51: dd:d7:1e:60:fd:01:e7:52:05:3c:02:b2:12:f7:53:76:a0:6d: 8e:34:7d:be:66:0e:82:db:d4:d4:6e:75:83:42:06:04:45:a1: 9b:fd:c6:26:b9:0f:42:ae:09:90:83:1f:a4:de:9b:56:28:77: ae:79:3a:6b:d1:88:7a:5e:d5:ed:43:bc:8a:32:eb:e3:db:72: a6:16:bb:f3:35:b6:bc:99:82:1f:99:1b:79:ed:ba:40:81:9c: 17:8b:51:ae:4a:39:a0:0a:14:d4:b7:32:38:54:1a:9e:bf:cd: bf:c6:d0:f5:d6:6c:3e:42:16:d2:9b:c1:40:79:ce:d5:4b:f8: 27:af:c1:f3:bb:3f:67:06:66:6c:e7:76:ce:bd:e0:90:a5:51: 61:ac:92:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz8gjfrOqSuJQLycoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIyNjAyMDAzMloXDTI2MDUyNzAxMDAzMlowLzEtMCsGA1UEAxMk YmViYzJlNTMtZDhmOC00M2IyLTk0ZTktNjA2OGFlYjI4NDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtOwibQewywOEsFe7KkgoeKi2nYcNI4DLS6x bjeOgn+NGfTqOQBfMfkc/ESsbZaz0/12KIwx3OCLypHUSu2xe58Q12cOkORKlo09 WuZ++PqJq4A1qxiF0O31CW8uQF0FB3GoVZ5vKioK3E1II6cBMc/tYe3agUb27+1v G/U08lIDKW1fQhs2rjWDUMcLOr8nLxVaOZMO1Pr128pQHtDQqJ3OTw733zE8goDE m0/IbG08J9gHFsMaMEbQ6n/ufhL8XLMQkKU0YoleTo3JeCtc3vcBtkw6vOUkivCH zDwrEn5uyRNYMFe/qvrHgrBGqgJhtvCIZTKYQxHC82zLzBa5rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYvG7KbPB6XQcVvnY125LrSkCDiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzM1Zjk2YjMtMDQ3ZS0z NjBmLWJiOGEtNDFlOGUwYWYyYWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbkVfcWA4OTMDiSE5z9RFCcuIu32Vuuzfyce3GZaavIb7UiVozQS1Y2 AtkqYl4F+S925BI6qm9C/LBgxw5YRsV7ysPDP9HrOxo9u02+Xt1G9VeCYdcDuvnQ TAjntTKcBUNkn0yUT3zMl+D7Ud3XHmD9AedSBTwCshL3U3agbY40fb5mDoLb1NRu dYNCBgRFoZv9xia5D0KuCZCDH6Tem1Yod655OmvRiHpe1e1DvIoy6+PbcqYWu/M1 tryZgh+ZG3ntukCBnBeLUa5KOaAKFNS3MjhUGp6/zb/G0PXWbD5CFtKbwUB5ztVL +CevwfO7P2cGZmznds694JClUWGsko0= -----END CERTIFICATE-----Generated at Mon Mar 2 16:28:59 2026 by rpki-client