$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/989bb846-baa3-3143-83bd-8768ef87ff43.roa File: 989bb846-baa3-3143-83bd-8768ef87ff43.roa (raw, json) Hash identifier: OBS07+MEyQggV/cEp0IdQoEJZ97aZfpS6D/FEwuBVWw= Subject key identifier: 59:51:C6:EB:B1:6B:79:A1:D4:D0:5B:8B:2D:07:8E:D3:71:05:75:60 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D091270AC4B80C3C7B2830CE0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/989bb846-baa3-3143-83bd-8768ef87ff43.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 8069 IP address blocks: 20.33.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:70:ac:4b:80:c3:c7:b2:83:0c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=a5b1d1d8-cdce-4a07-aee3-dea88854910f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0d:7a:6b:4d:a3:d3:4e:cf:a9:d0:ca:dd:0c: 6e:fa:ff:fb:4d:f7:e7:8f:b8:d5:39:2d:f5:c6:6d: 87:b4:7e:7f:05:81:40:93:da:25:bd:c9:72:4a:66: 7d:33:5f:03:91:19:b6:24:f9:cc:9f:7d:50:b5:3c: 1e:55:9e:1c:00:7d:9b:3c:cb:2b:88:eb:6b:9f:d3: d8:02:cb:10:d3:e9:76:a0:20:5d:93:1c:f7:44:dd: 9b:8d:24:0e:f3:bd:14:ea:cd:80:b5:27:e1:59:5c: f4:ba:17:81:01:ed:c3:46:c0:41:c7:bf:54:92:78: 8a:4b:38:44:5c:e3:4f:f7:1b:69:06:72:51:0a:91: ac:74:1f:28:d4:9f:40:c9:7b:1c:41:f0:14:af:47: 18:b6:33:ef:81:a9:36:85:fb:0e:be:39:95:81:40: 1a:d5:39:20:da:61:58:21:36:cd:75:c8:81:97:31: 07:42:e7:c2:c4:4e:22:eb:30:bb:54:d8:b0:f5:05: 72:94:a9:8d:5c:dd:78:79:04:38:9a:27:28:2e:8b: a3:ec:a2:37:d3:74:e6:fb:d0:02:56:e6:2c:32:96: e5:81:5e:7c:e0:2e:ee:57:9a:94:f8:c0:ac:1e:b7: 01:21:33:5b:30:42:de:93:13:98:09:ba:4b:b3:84: c5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:51:C6:EB:B1:6B:79:A1:D4:D0:5B:8B:2D:07:8E:D3:71:05:75:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/989bb846-baa3-3143-83bd-8768ef87ff43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:fa:f7:68:e5:6c:92:6b:dd:26:5b:43:13:99:44:35:d5:72: 39:66:60:26:59:07:01:13:34:8d:c1:40:ed:34:41:d8:96:7c: a4:d9:05:d7:6f:cd:f5:7a:00:a7:a7:31:01:1f:30:2a:f8:dd: ca:52:dd:70:fc:fd:82:c6:57:17:2e:83:fb:43:f6:a6:ee:61: d6:76:a2:89:34:6f:65:ac:2a:6e:f5:69:e0:4f:12:bd:06:29: 86:84:9f:d8:5e:78:6c:02:19:8e:9d:78:36:a9:e0:e7:51:fb: 3c:3c:8f:1b:dc:75:aa:57:dc:2f:fe:2f:4e:7f:bb:cb:69:0f: 52:75:31:d4:4a:0b:55:ba:a1:1e:91:84:7b:1d:f9:08:d6:d1: 1f:b2:33:23:0d:09:c3:10:f1:77:05:d3:4d:5b:d8:30:86:15: c7:42:bd:d3:b2:e9:c2:2f:32:c5:3e:99:d0:93:8f:86:29:17: 76:80:31:10:a5:15:f2:78:58:79:1c:87:47:bd:35:6d:14:38: db:d3:52:3d:da:94:12:10:a1:6d:d3:2b:f0:f5:c2:0d:7d:2e: 0d:67:81:99:19:09:6d:36:59:ac:28:37:81:6a:5d:e8:c9:e9: 36:73:04:47:f6:71:6b:f6:98:7b:e5:27:24:73:df:be:1c:25: 11:3e:89:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEnCsS4DDx7KDDOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk YTViMWQxZDgtY2RjZS00YTA3LWFlZTMtZGVhODg4NTQ5MTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0g16a02j007PqdDK3Qxu+v/7Tffnj7jVOS31 xm2HtH5/BYFAk9olvclySmZ9M18DkRm2JPnMn31QtTweVZ4cAH2bPMsriOtrn9PY AssQ0+l2oCBdkxz3RN2bjSQO870U6s2AtSfhWVz0uheBAe3DRsBBx79UkniKSzhE XONP9xtpBnJRCpGsdB8o1J9AyXscQfAUr0cYtjPvgak2hfsOvjmVgUAa1Tkg2mFY ITbNdciBlzEHQufCxE4i6zC7VNiw9QVylKmNXN14eQQ4micoLouj7KI303Tm+9AC VuYsMpblgV584C7uV5qU+MCsHrcBITNbMELekxOYCbpLs4TF5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlRxuuxa3mh1NBbiy0HjtNxBXVgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTg5YmI4NDYtYmFhMy0z MTQzLTgzYmQtODc2OGVmODdmZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACz692jlbJJr3SZbQxOZRDXVcjlmYCZZBwETNI3BQO00QdiWfKTZBddv zfV6AKenMQEfMCr43cpS3XD8/YLGVxcug/tD9qbuYdZ2ook0b2WsKm71aeBPEr0G KYaEn9heeGwCGY6deDap4OdR+zw8jxvcdapX3C/+L05/u8tpD1J1MdRKC1W6oR6R hHsd+QjW0R+yMyMNCcMQ8XcF001b2DCGFcdCvdOy6cIvMsU+mdCTj4YpF3aAMRCl FfJ4WHkch0e9NW0UONvTUj3alBIQoW3TK/D1wg19Lg1ngZkZCW02WawoN4FqXejJ 6TZzBEf2cWv2mHvlJyRz374cJRE+iUs= -----END CERTIFICATE-----Generated at Mon Mar 2 18:24:16 2026 by rpki-client