$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9256e928-9e7a-395f-a0ec-b2e0c6ac0b84.roa File: 9256e928-9e7a-395f-a0ec-b2e0c6ac0b84.roa (raw, json) Hash identifier: oqlYIn9GZ/thdoz/3o2MBPmM6aXGFO5fLjjflpD/m5I= Subject key identifier: D4:96:9E:19:10:F4:94:84:CC:B9:E3:51:14:9D:37:64:77:AF:56:00 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CB28747632DF476DD3FB6C980 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9256e928-9e7a-395f-a0ec-b2e0c6ac0b84.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.33.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:47:63:2d:f4:76:dd:3f:b6:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=423c7030-0385-4be9-b266-e581a351aa43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:96:cb:ea:cf:f6:d4:91:cb:ac:3b:3f:4d:c3: 05:44:43:de:36:d6:21:37:81:e1:c0:25:9b:ec:e6: 21:de:73:12:3d:a5:f4:8f:e5:46:91:81:d6:7a:a4: fe:f5:c4:57:04:f6:fa:46:17:87:7d:98:e0:44:2b: a7:85:35:94:c4:51:98:f9:84:0c:a5:42:04:d6:4b: 0e:78:3f:84:0b:ca:5e:46:76:e9:b7:42:a4:16:f3: a9:3c:cd:3d:96:f0:1f:dc:3b:c8:9a:85:22:ef:21: f8:d0:aa:a5:53:5a:13:0c:32:ea:8a:ae:f8:4d:bc: e8:47:52:17:08:fe:f2:92:85:2a:ee:b6:6e:70:85: 29:f9:d2:ae:47:5f:1d:42:44:ad:a7:12:63:ab:23: d5:58:a1:10:b3:f4:26:1d:4c:7f:9f:9c:a9:f9:cd: 44:32:7d:0d:dc:08:ab:5b:e0:d6:4c:92:98:3a:7d: 95:5f:e1:f3:30:3b:72:38:25:9f:f1:cc:b4:b3:07: 46:4d:e1:2d:4d:4f:d7:e4:91:f8:2f:a1:83:f0:62: 10:f4:86:40:8e:f1:68:36:9f:8b:26:69:02:b1:35: 8c:a7:df:3e:24:95:6c:44:9e:f5:90:19:01:4d:63: 1c:eb:f7:78:75:06:aa:57:97:5b:4e:5f:e6:11:39: a4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:96:9E:19:10:F4:94:84:CC:B9:E3:51:14:9D:37:64:77:AF:56:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9256e928-9e7a-395f-a0ec-b2e0c6ac0b84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:4d:f6:81:01:31:6e:f3:d5:54:a5:4a:0e:59:13:3d:3f:2f: 47:6c:b5:69:78:93:c3:62:57:94:5e:c0:ad:25:56:46:0f:f9: c0:99:9c:9d:91:69:dc:87:f0:05:0f:86:f1:9b:d7:32:7e:9f: f2:7a:59:96:dd:97:20:1f:98:3c:c6:a9:c2:ca:d3:0b:c3:df: 42:a8:7a:fc:e6:3a:06:7c:94:9b:6f:35:ad:53:31:e9:ef:ba: 8e:b1:7d:20:e7:51:28:41:ec:e1:35:16:f7:f5:0e:77:47:bd: 0d:36:7b:95:08:4f:83:16:d4:b3:33:b3:16:5b:9d:1e:49:46: b2:fc:49:61:64:4c:84:47:05:19:d9:bc:a4:15:f8:f2:7f:bf: 52:52:af:d5:04:41:4c:86:56:a1:8e:97:69:e6:fd:fc:f4:e8: 75:a1:d3:6d:28:95:7a:35:fc:19:bd:f5:35:fd:31:2f:f8:5b: db:34:8b:52:c9:db:cd:04:3d:1c:0b:6c:3d:ac:76:21:4f:95: 00:c7:9f:03:fe:72:05:10:29:1a:f4:1f:3b:43:cf:1c:7d:2e: 6a:13:8a:f6:57:7a:33:e2:63:47:7d:f3:71:dd:20:c2:b2:98: 7b:96:e0:0d:0c:99:d7:da:af:79:c0:ab:ff:88:a5:3a:78:28: 12:2c:4c:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyh0djLfR23T+2yYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk NDIzYzcwMzAtMDM4NS00YmU5LWIyNjYtZTU4MWEzNTFhYTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5bL6s/21JHLrDs/TcMFREPeNtYhN4HhwCWb 7OYh3nMSPaX0j+VGkYHWeqT+9cRXBPb6RheHfZjgRCunhTWUxFGY+YQMpUIE1ksO eD+EC8peRnbpt0KkFvOpPM09lvAf3DvImoUi7yH40KqlU1oTDDLqiq74TbzoR1IX CP7ykoUq7rZucIUp+dKuR18dQkStpxJjqyPVWKEQs/QmHUx/n5yp+c1EMn0N3Air W+DWTJKYOn2VX+HzMDtyOCWf8cy0swdGTeEtTU/X5JH4L6GD8GIQ9IZAjvFoNp+L JmkCsTWMp98+JJVsRJ71kBkBTWMc6/d4dQaqV5dbTl/mETmkxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSWnhkQ9JSEzLnjURSdN2R3r1YAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTI1NmU5MjgtOWU3YS0z OTVmLWEwZWMtYjJlMGM2YWMwYjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCElMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxN9oEBMW7z1VSlSg5ZEz0/L0dstWl4k8NiV5RewK0lVkYP+cCZnJ2R adyH8AUPhvGb1zJ+n/J6WZbdlyAfmDzGqcLK0wvD30KoevzmOgZ8lJtvNa1TMenv uo6xfSDnUShB7OE1Fvf1DndHvQ02e5UIT4MW1LMzsxZbnR5JRrL8SWFkTIRHBRnZ vKQV+PJ/v1JSr9UEQUyGVqGOl2nm/fz06HWh020olXo1/Bm99TX9MS/4W9s0i1LJ 280EPRwLbD2sdiFPlQDHnwP+cgUQKRr0HztDzxx9LmoTivZXejPiY0d983HdIMKy mHuW4A0Mmdfar3nAq/+IpTp4KBIsTPw= -----END CERTIFICATE-----Generated at Mon Mar 2 16:29:41 2026 by rpki-client