$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c4e4c71-53ce-3cdd-bc80-7a4bbfd9a4f4.roa File: 7c4e4c71-53ce-3cdd-bc80-7a4bbfd9a4f4.roa (raw, json) Hash identifier: xC92itUfjVsMj+uKZzDDYMu+7OcUBrvZjrDsE1iETSk= Subject key identifier: 4C:F6:AE:39:4C:37:8C:3F:B6:8A:87:E3:CA:3D:B1:FC:30:F3:73:77 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D0912702B4F2C6F9575900B00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c4e4c71-53ce-3cdd-bc80-7a4bbfd9a4f4.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 8069 IP address blocks: 20.33.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:70:2b:4f:2c:6f:95:75:90:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=af7b157e-0962-48e5-9805-41c024711a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:db:3d:ac:a7:ad:63:43:70:fe:22:7e:73:33: 06:fc:43:40:b8:67:b0:6d:41:b6:88:b8:53:fe:03: d0:00:1f:44:9f:9b:72:ff:83:c2:55:07:b0:86:b7: 6d:a4:b1:4f:7c:ba:70:df:af:92:21:66:37:03:cd: c3:2c:ff:2e:3f:c4:4e:d9:fc:41:ad:2f:ae:ea:6a: 46:d0:55:91:55:0e:60:95:21:ae:ed:18:17:99:4f: 11:e9:56:4f:d2:49:41:ac:33:da:bb:b5:53:a5:04: ec:32:05:85:e5:06:37:ad:fd:6a:6f:43:08:51:39: b1:fe:89:36:cf:ca:4f:1b:4e:19:b5:be:43:8b:e5: f8:84:92:d6:4d:0e:41:df:ab:91:f4:56:8a:8c:e8: 13:96:7d:cb:e8:1a:50:e6:77:7c:a8:d5:42:c5:ec: ca:c4:5c:57:15:0c:24:c3:a1:e4:1e:59:fe:98:6a: 5a:e2:39:5d:fd:09:df:de:82:79:6d:4e:8e:93:fd: 87:1e:6a:30:7e:d3:1a:6c:15:a1:48:e0:c1:c8:78: af:0b:b9:d7:70:f5:12:6b:25:f7:7e:3f:a3:ee:be: b2:1d:f8:ce:0d:90:a1:45:1a:af:5d:c0:dd:31:16: ef:22:ef:28:e6:5d:e1:b3:1b:30:26:cf:5b:be:5f: de:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F6:AE:39:4C:37:8C:3F:B6:8A:87:E3:CA:3D:B1:FC:30:F3:73:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c4e4c71-53ce-3cdd-bc80-7a4bbfd9a4f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:22:bd:eb:37:53:9f:47:6d:8c:31:20:a3:96:39:48:1e:e1: a2:82:89:fe:a7:15:98:33:3e:43:7d:b0:a6:08:ce:70:a5:f3: 1c:0f:9e:9a:de:14:7b:f9:d7:8c:f0:6e:19:d1:ac:c6:9a:5a: 1b:a5:38:d0:d1:fa:61:9c:2d:ac:d1:36:f4:cd:86:59:43:30: c5:2a:d9:42:b5:22:4a:56:69:06:a0:24:99:38:41:98:03:e6: e1:67:44:fc:91:17:24:ab:b6:e0:e7:b4:62:9d:f5:1c:44:04: 36:59:7c:83:8c:d9:1c:29:97:4f:81:ed:dc:2f:cd:21:4c:00: aa:aa:f4:ff:c3:f2:0e:13:72:37:48:66:b9:9a:cd:9e:fb:3c: 53:75:02:ba:db:79:70:dc:f6:21:2a:8d:54:8e:a3:1b:a8:57: 1d:36:f8:c6:d0:39:ef:06:91:f4:be:99:f0:ab:9c:1e:4e:81: 12:b5:c6:3f:06:62:a7:e1:80:08:fc:ab:9c:11:7d:fe:6f:87: 1a:8b:aa:8d:7c:b3:35:5f:fb:26:43:9d:9d:ad:bc:c7:ba:1b: e5:0f:54:4f:28:79:e5:64:f3:ba:3b:85:86:22:18:77:80:15: 4c:72:08:8e:f4:e4:4c:03:6a:10:b8:08:ea:41:b9:4f:a2:32: 5a:74:c3:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEnArTyxvlXWQCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk YWY3YjE1N2UtMDk2Mi00OGU1LTk4MDUtNDFjMDI0NzExYTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNs9rKetY0Nw/iJ+czMG/ENAuGewbUG2iLhT /gPQAB9En5ty/4PCVQewhrdtpLFPfLpw36+SIWY3A83DLP8uP8RO2fxBrS+u6mpG 0FWRVQ5glSGu7RgXmU8R6VZP0klBrDPau7VTpQTsMgWF5QY3rf1qb0MIUTmx/ok2 z8pPG04Ztb5Di+X4hJLWTQ5B36uR9FaKjOgTln3L6BpQ5nd8qNVCxezKxFxXFQwk w6HkHln+mGpa4jld/Qnf3oJ5bU6Ok/2HHmowftMabBWhSODByHivC7nXcPUSayX3 fj+j7r6yHfjODZChRRqvXcDdMRbvIu8o5l3hsxswJs9bvl/edQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEz2rjlMN4w/toqH48o9sfww83N3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2M0ZTRjNzEtNTNjZS0z Y2RkLWJjODAtN2E0YmJmZDlhNGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQives3U59HbYwxIKOWOUge4aKCif6nFZgzPkN9sKYIznCl8xwPnpre FHv514zwbhnRrMaaWhulONDR+mGcLazRNvTNhllDMMUq2UK1IkpWaQagJJk4QZgD 5uFnRPyRFySrtuDntGKd9RxEBDZZfIOM2Rwpl0+B7dwvzSFMAKqq9P/D8g4TcjdI ZrmazZ77PFN1ArrbeXDc9iEqjVSOoxuoVx02+MbQOe8GkfS+mfCrnB5OgRK1xj8G YqfhgAj8q5wRff5vhxqLqo18szVf+yZDnZ2tvMe6G+UPVE8oeeVk87o7hYYiGHeA FUxyCI705EwDahC4COpBuU+iMlp0w70= -----END CERTIFICATE-----Generated at Mon Mar 2 18:07:37 2026 by rpki-client