$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/871537b1-1a3c-3d03-9ef9-2a8e3f5aa9e9.roa File: 871537b1-1a3c-3d03-9ef9-2a8e3f5aa9e9.roa (raw, json) Hash identifier: r6kxQwJCBQogVOG0xnJKlItG/9GoaLPxwao5+8vl5p8= Subject key identifier: 0E:34:67:47:88:06:64:86:21:EC:0E:FE:1D:73:E4:34:19:99:08:F3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CEA5CF486FF4ABFE361CC2100 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/871537b1-1a3c-3d03-9ef9-2a8e3f5aa9e9.roa Signing time: Thu 19 Feb 2026 14:00:40 +0000 ROA not before: Thu 19 Feb 2026 14:00:40 +0000 ROA not after: Wed 20 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.33.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ea:5c:f4:86:ff:4a:bf:e3:61:cc:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 19 14:00:40 2026 GMT Not After : May 20 13:00:40 2026 GMT Subject: CN=8a6f13e0-3406-44d7-a0eb-a2fe5ee34917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:66:bc:48:12:f4:0e:df:a8:65:ee:40:a8:21: 3c:17:35:c7:33:b0:2d:a2:65:de:ad:df:42:59:c3: 8c:c8:50:7d:7f:f2:e6:7f:c8:bf:17:10:b1:3c:6c: 49:79:f4:e6:e5:38:ce:7b:55:a1:58:60:9d:31:3a: e9:3f:13:4d:bc:21:fe:bd:a1:73:66:b5:21:f4:7a: 30:49:b0:73:61:60:e7:cb:ee:3e:ec:40:c6:76:f7: ae:ff:f3:0e:91:cf:b4:99:9f:f1:9c:bd:84:69:f0: 4f:80:6f:a0:82:b0:33:1b:78:4b:a1:6b:62:20:74: 82:a9:9d:44:a3:8e:7e:03:97:a7:a4:5f:6e:b9:61: 15:3d:60:99:f1:14:1b:d6:71:b8:bb:b9:e0:d5:c1: aa:df:9e:ca:7c:f7:76:69:2a:09:7f:71:44:3c:89: e7:d0:4d:87:be:75:b6:3f:57:ea:98:1c:fc:29:8d: 7f:98:30:53:d1:b0:0d:c4:19:4a:e7:62:5d:34:ec: f9:66:d4:3a:88:22:da:8d:02:8e:27:77:a1:66:46: e7:5b:43:6d:e5:2d:e2:ad:ac:a4:38:7f:61:bb:2b: ba:9d:a1:7f:98:6b:1b:c9:a6:bf:fa:c9:e3:e2:22: c2:ed:0a:c9:22:be:9c:bf:fc:60:90:e7:dd:0f:ae: 03:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:34:67:47:88:06:64:86:21:EC:0E:FE:1D:73:E4:34:19:99:08:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/871537b1-1a3c-3d03-9ef9-2a8e3f5aa9e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:84:22:c2:de:d5:0d:64:a3:84:ac:92:77:21:dd:48:6b:10: ef:1a:be:bf:d3:89:03:3f:25:c9:3d:15:e2:70:ab:bd:80:01: 0a:2c:b5:73:e8:8f:56:c1:55:da:b2:5b:c4:3c:fa:d9:b9:3c: 98:a3:4c:48:97:79:c8:9d:f9:29:aa:5f:c8:21:b8:95:96:66: ae:1c:7c:03:42:25:e1:0a:a8:6a:b1:5a:5a:3a:f8:4c:3b:b1: df:56:6b:34:42:4d:88:b7:8a:62:b6:c6:fb:2c:1d:8c:9d:f0: ce:76:09:dd:9c:5c:47:84:ea:92:c9:d0:6a:e4:cd:d0:c1:1f: 9f:53:9c:70:5c:e0:20:7b:99:09:d6:a5:27:a4:b5:a2:83:cd: 8d:5c:98:88:31:5c:a8:a7:40:fd:74:7a:b8:e7:e6:6c:c7:07: a1:70:f6:f9:37:26:51:7e:46:22:55:90:df:53:2e:43:9a:7b: fc:34:fd:e6:74:76:01:db:fa:e4:98:35:e4:c7:2d:f6:19:5a: b8:4d:4c:d2:b7:61:a3:85:a7:77:cb:15:41:7f:90:d6:01:c2: 7a:ec:22:36:a3:fb:da:a4:f4:5e:5f:91:6c:aa:a7:cf:b3:50: 17:d7:79:39:31:10:82:63:72:a4:32:d9:4f:29:4b:93:70:62: 8c:70:78:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzqXPSG/0q/42HMIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk OGE2ZjEzZTAtMzQwNi00NGQ3LWEwZWItYTJmZTVlZTM0OTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWa8SBL0Dt+oZe5AqCE8FzXHM7AtomXerd9C WcOMyFB9f/Lmf8i/FxCxPGxJefTm5TjOe1WhWGCdMTrpPxNNvCH+vaFzZrUh9How SbBzYWDny+4+7EDGdveu//MOkc+0mZ/xnL2EafBPgG+ggrAzG3hLoWtiIHSCqZ1E o45+A5enpF9uuWEVPWCZ8RQb1nG4u7ng1cGq357KfPd2aSoJf3FEPInn0E2HvnW2 P1fqmBz8KY1/mDBT0bANxBlK52JdNOz5ZtQ6iCLajQKOJ3ehZkbnW0Nt5S3irayk OH9huyu6naF/mGsbyaa/+snj4iLC7QrJIr6cv/xgkOfdD64DZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA40Z0eIBmSGIewO/h1z5DQZmQjzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODcxNTM3YjEtMWEzYy0z ZDAzLTllZjktMmE4ZTNmNWFhOWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmEIsLe1Q1ko4Ssknch3UhrEO8avr/TiQM/Jck9FeJwq72AAQostXPo j1bBVdqyW8Q8+tm5PJijTEiXecid+SmqX8ghuJWWZq4cfANCJeEKqGqxWlo6+Ew7 sd9WazRCTYi3imK2xvssHYyd8M52Cd2cXEeE6pLJ0GrkzdDBH59TnHBc4CB7mQnW pSektaKDzY1cmIgxXKinQP10erjn5mzHB6Fw9vk3JlF+RiJVkN9TLkOae/w0/eZ0 dgHb+uSYNeTHLfYZWrhNTNK3YaOFp3fLFUF/kNYBwnrsIjaj+9qk9F5fkWyqp8+z UBfXeTkxEIJjcqQy2U8pS5NwYoxweJQ= -----END CERTIFICATE-----Generated at Mon Mar 2 16:30:14 2026 by rpki-client