$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7b5ac41d-84f9-3c65-bed3-c388701dbf1d.roa File: 7b5ac41d-84f9-3c65-bed3-c388701dbf1d.roa (raw, json) Hash identifier: 4NSeBwxUxm3Zo9OdOL1W/I5+k354MUjWT02Rz4APR4Q= Subject key identifier: 11:0A:4C:F4:73:B9:73:F3:9F:F4:44:4D:61:B3:2A:A4:63:BB:19:5C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CC7774E562E13E8CB41772B00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7b5ac41d-84f9-3c65-bed3-c388701dbf1d.roa Signing time: Sat 07 Feb 2026 02:00:31 +0000 ROA not before: Sat 07 Feb 2026 02:00:31 +0000 ROA not after: Fri 08 May 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.33.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c7:77:4e:56:2e:13:e8:cb:41:77:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 7 02:00:31 2026 GMT Not After : May 8 01:00:31 2026 GMT Subject: CN=3d058f5a-90a9-44dc-85bd-ffb48913390c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c9:7a:46:4e:65:57:40:4d:71:ab:a6:8f:c8: 49:f9:cf:a7:e2:69:3c:e4:87:3d:78:15:83:26:46: fb:ba:bd:96:7b:73:c5:2c:68:72:68:a8:aa:e4:66: f4:59:88:51:bb:cf:8d:41:a5:64:d4:70:1b:5e:2a: 5c:7e:67:0f:ff:c9:bd:2b:12:c6:fd:45:2e:60:13: 9a:5f:08:a2:a5:55:a6:a6:8e:a0:ff:8b:97:c3:da: 5e:34:e0:b0:61:9f:c6:04:a4:da:19:f1:aa:6a:a4: 59:b0:43:05:f8:af:34:e0:0c:aa:55:22:18:44:04: 23:55:9a:95:35:19:6b:43:dc:16:ed:a9:79:58:cd: a0:ae:a2:e9:2b:21:8b:53:b7:cd:0a:a5:bd:76:f6: 35:af:ce:47:8b:c6:e4:1b:f5:b1:4d:44:bb:54:5a: bd:7c:55:ff:f9:fe:88:0e:44:4a:58:ef:62:08:27: 37:37:b0:72:87:b2:41:2c:31:ef:bf:28:67:9b:86: 50:44:6b:fb:7f:21:83:b8:cb:64:2d:f9:f8:d2:a7: c6:67:ec:e1:fa:7c:21:ab:f9:13:d4:6a:dc:0f:47: b0:21:32:69:1a:e9:8b:ee:a5:62:75:07:73:e8:6b: 96:0f:c3:4e:d0:a6:ef:d8:a0:db:d6:28:3e:d7:48: 5f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0A:4C:F4:73:B9:73:F3:9F:F4:44:4D:61:B3:2A:A4:63:BB:19:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7b5ac41d-84f9-3c65-bed3-c388701dbf1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:69:4e:fa:ef:ab:5b:47:9d:82:f8:d5:ed:85:56:76:19:83: 5b:b8:00:6d:3b:1e:a8:0d:ad:9f:75:08:0e:11:89:3b:f0:7a: 13:c5:f8:f1:84:89:d9:44:0f:d9:ae:e4:99:c6:d0:21:be:0c: 6e:de:32:f0:9d:21:89:e1:63:a3:df:68:3c:05:e0:b1:bb:65: 65:ed:a0:b9:e5:ae:82:98:18:f1:ba:9a:dd:ab:e0:d4:28:07: 30:af:f6:bd:3c:73:6c:1e:95:38:bd:33:ab:a4:71:17:60:60: 6b:6d:e5:44:ca:8d:2c:fb:18:7f:1a:db:35:20:06:9e:ff:8d: 93:df:a4:91:a7:22:46:ef:3e:e4:b9:f8:76:56:ce:a5:7d:b5: 5e:21:70:ff:43:39:12:b4:48:ff:d9:f6:2f:5d:d6:ac:50:bd: 7c:98:20:29:8e:52:20:19:08:8e:5e:e7:ac:9b:46:8f:6b:c3: 8d:92:cd:55:3e:34:1f:98:97:5f:fc:db:62:d0:5f:97:ae:b8: b5:c8:b5:24:8c:af:0d:4f:bc:c2:97:e8:e1:c7:23:bd:e5:c1: 7f:43:b6:b0:8c:fe:8d:c2:ae:fa:8e:22:de:72:37:3b:c5:68: b2:fd:24:b4:b2:5b:9f:0a:88:ec:04:71:7c:ab:d7:44:d3:9b: 8b:63:19:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzHd05WLhPoy0F3KwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwNzAyMDAzMVoXDTI2MDUwODAxMDAzMVowLzEtMCsGA1UEAxMk M2QwNThmNWEtOTBhOS00NGRjLTg1YmQtZmZiNDg5MTMzOTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcl6Rk5lV0BNcaumj8hJ+c+n4mk85Ic9eBWD Jkb7ur2We3PFLGhyaKiq5Gb0WYhRu8+NQaVk1HAbXipcfmcP/8m9KxLG/UUuYBOa XwiipVWmpo6g/4uXw9peNOCwYZ/GBKTaGfGqaqRZsEMF+K804AyqVSIYRAQjVZqV NRlrQ9wW7al5WM2grqLpKyGLU7fNCqW9dvY1r85Hi8bkG/WxTUS7VFq9fFX/+f6I DkRKWO9iCCc3N7Byh7JBLDHvvyhnm4ZQRGv7fyGDuMtkLfn40qfGZ+zh+nwhq/kT 1GrcD0ewITJpGumL7qVidQdz6GuWD8NO0Kbv2KDb1ig+10hfOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBEKTPRzuXPzn/RETWGzKqRjuxlcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2I1YWM0MWQtODRmOS0z YzY1LWJlZDMtYzM4ODcwMWRiZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdpTvrvq1tHnYL41e2FVnYZg1u4AG07HqgNrZ91CA4RiTvwehPF+PGE idlED9mu5JnG0CG+DG7eMvCdIYnhY6PfaDwF4LG7ZWXtoLnlroKYGPG6mt2r4NQo BzCv9r08c2welTi9M6ukcRdgYGtt5UTKjSz7GH8a2zUgBp7/jZPfpJGnIkbvPuS5 +HZWzqV9tV4hcP9DORK0SP/Z9i9d1qxQvXyYICmOUiAZCI5e56ybRo9rw42SzVU+ NB+Yl1/822LQX5euuLXItSSMrw1PvMKX6OHHI73lwX9DtrCM/o3CrvqOIt5yNzvF aLL9JLSyW58KiOwEcXyr10TTm4tjGVM= -----END CERTIFICATE-----Generated at Mon Mar 2 16:29:35 2026 by rpki-client