$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9e18dbd4-209d-35dd-82a3-839e83821d7c.roa File: 9e18dbd4-209d-35dd-82a3-839e83821d7c.roa (raw, json) Hash identifier: eCr43eh+R+XnALWAM2negzaWKBvaj5/d/ZCkSQV8dS4= Subject key identifier: 20:1E:47:64:0E:E5:05:E2:C5:7C:A8:89:92:04:92:9A:8D:59:0F:87 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CC6120ADDA171E5B04ECB7080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9e18dbd4-209d-35dd-82a3-839e83821d7c.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.33.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:12:0a:dd:a1:71:e5:b0:4e:cb:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=7247a1bb-9b26-4bee-82fe-12d8e79ed5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8f:d8:e8:70:53:cf:16:e6:ec:f7:bb:a9:13: 21:10:ad:e1:05:32:20:34:a3:d4:12:ab:a8:68:3b: ae:f5:f3:b5:7e:95:4e:82:77:dd:11:20:fb:64:9f: 63:81:17:b9:a4:f0:84:6c:47:90:5a:2f:34:5f:19: dd:4b:6e:eb:81:21:41:32:88:67:72:ff:49:fe:2e: cc:9e:5f:16:fb:47:0e:d2:ad:5f:4e:9d:aa:74:fc: 4c:63:46:74:7f:5e:97:02:85:de:c2:dd:af:27:29: 51:a5:ed:ea:50:0c:a2:f0:d7:cb:a6:67:2a:aa:61: 6b:44:91:d0:d7:6e:3a:2a:e8:3e:48:9e:aa:ea:f2: fc:e9:99:71:69:13:d4:f2:ca:2b:5b:3c:8e:ff:82: 07:c4:4f:01:c5:6f:b1:69:62:ed:ee:53:68:a9:e8: bb:46:6b:89:fb:d0:a1:a9:ea:ad:8d:a0:5d:56:33: f0:ee:84:58:3e:86:b1:b1:24:3a:10:9e:52:95:a8: 4f:6a:6f:37:a9:3b:e3:6c:71:8b:40:06:ed:9c:6a: 4b:4f:14:ef:e2:07:22:50:74:1e:40:ea:5b:12:51: 8f:bd:c7:f4:ff:6a:84:26:2e:c8:2a:8d:b9:b2:f0: 58:0c:c5:6d:95:69:b2:e6:f0:0c:94:69:f0:83:7b: dd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1E:47:64:0E:E5:05:E2:C5:7C:A8:89:92:04:92:9A:8D:59:0F:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9e18dbd4-209d-35dd-82a3-839e83821d7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:fe:65:74:c5:c3:f8:75:96:eb:2e:72:5a:a1:50:a0:46:60: b7:cc:de:6f:8c:aa:1c:97:bf:65:ff:57:e9:f3:13:03:a1:0c: 6c:71:b8:d7:25:d2:ff:79:11:c6:a8:65:9b:e6:6c:b4:a1:3b: 5e:43:ca:76:8e:26:a4:0c:c3:94:34:22:59:0a:be:9d:7c:63: 17:63:91:bc:20:f7:b8:98:47:b4:e8:dc:b1:33:76:ac:22:db: 06:3f:ba:b5:21:4c:1d:bc:a4:f3:c3:3c:66:26:9e:3d:ab:32: 24:46:66:04:23:f8:f7:c7:90:48:42:a1:90:99:b1:3b:6b:23: 17:ac:d6:f3:9f:24:74:58:eb:33:d4:15:e5:9b:79:0d:c6:e0: 77:7c:9c:a5:3a:43:4c:f5:92:b6:a3:db:6a:b5:15:79:b4:6f: cc:93:55:10:7f:32:fe:aa:42:af:c2:9e:bb:5e:77:f6:3e:e3: 59:7c:77:6a:f1:64:fe:6c:66:3c:95:0d:a9:30:56:d9:ac:e8: 95:39:1e:76:40:77:9d:7f:42:fe:2b:e8:20:5c:9f:3a:63:9e: 02:c0:c7:67:47:68:5b:1c:05:25:6d:0b:e1:2e:a2:34:b4:06: d5:97:85:ff:02:40:f6:25:a5:22:55:03:d6:24:6b:55:e1:58: ae:ee:ff:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEgrdoXHlsE7LcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk NzI0N2ExYmItOWIyNi00YmVlLTgyZmUtMTJkOGU3OWVkNWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY/Y6HBTzxbm7Pe7qRMhEK3hBTIgNKPUEquo aDuu9fO1fpVOgnfdESD7ZJ9jgRe5pPCEbEeQWi80XxndS27rgSFBMohncv9J/i7M nl8W+0cO0q1fTp2qdPxMY0Z0f16XAoXewt2vJylRpe3qUAyi8NfLpmcqqmFrRJHQ 1246Kug+SJ6q6vL86ZlxaRPU8sorWzyO/4IHxE8BxW+xaWLt7lNoqei7RmuJ+9Ch qeqtjaBdVjPw7oRYPoaxsSQ6EJ5SlahPam83qTvjbHGLQAbtnGpLTxTv4gciUHQe QOpbElGPvcf0/2qEJi7IKo25svBYDMVtlWmy5vAMlGnwg3vdLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAeR2QO5QXixXyoiZIEkpqNWQ+HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOWUxOGRiZDQtMjA5ZC0z NWRkLTgyYTMtODM5ZTgzODIxZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKP+ZXTFw/h1lusuclqhUKBGYLfM3m+MqhyXv2X/V+nzEwOhDGxxuNcl 0v95EcaoZZvmbLShO15DynaOJqQMw5Q0IlkKvp18Yxdjkbwg97iYR7To3LEzdqwi 2wY/urUhTB28pPPDPGYmnj2rMiRGZgQj+PfHkEhCoZCZsTtrIxes1vOfJHRY6zPU FeWbeQ3G4Hd8nKU6Q0z1kraj22q1FXm0b8yTVRB/Mv6qQq/Cnrted/Y+41l8d2rx ZP5sZjyVDakwVtms6JU5HnZAd51/Qv4r6CBcnzpjngLAx2dHaFscBSVtC+EuojS0 BtWXhf8CQPYlpSJVA9Yka1XhWK7u/xg= -----END CERTIFICATE-----Generated at Mon Mar 2 16:29:13 2026 by rpki-client