$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a224f8e7-d8e5-3c2c-8b2f-55a68efb823b.roa File: a224f8e7-d8e5-3c2c-8b2f-55a68efb823b.roa (raw, json) Hash identifier: Btk6eL3g0rY7vg7VWwlt7CsldsMCDmEy+R63jhYDTTw= Subject key identifier: CE:85:D8:CA:B9:97:72:32:82:85:20:F5:BD:35:01:AD:B8:1C:74:36 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CFC823799F104B7F653ACE080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a224f8e7-d8e5-3c2c-8b2f-55a68efb823b.roa Signing time: Thu 26 Feb 2026 02:00:32 +0000 ROA not before: Thu 26 Feb 2026 02:00:32 +0000 ROA not after: Wed 27 May 2026 01:00:32 +0000 asID: 8069 IP address blocks: 20.33.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fc:82:37:99:f1:04:b7:f6:53:ac:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 26 02:00:32 2026 GMT Not After : May 27 01:00:32 2026 GMT Subject: CN=ad003945-6677-46f3-9a31-27478b074230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:3b:54:b2:ea:2d:fc:37:78:c8:49:24:6f:37: cd:b2:7e:fb:9e:34:7c:00:ec:77:e4:a0:4d:ef:c7: d0:71:c9:52:c5:3d:fb:c4:f4:b2:f7:7e:e7:86:17: d0:45:87:4d:df:fc:e3:f1:78:99:e0:12:13:81:80: 7b:ae:cf:f4:c8:b8:6a:f2:48:21:7f:32:42:c4:b7: 8e:ec:11:f5:63:71:c0:b3:58:1e:9b:c3:d2:2d:12: 2a:40:6c:ea:07:c7:34:b7:cb:6a:df:12:0d:5f:d5: a9:a1:8f:69:14:5b:0a:a5:23:99:4b:97:e6:67:0f: 48:34:96:2a:db:cd:bd:7f:fc:e0:fa:ec:32:bb:57: f6:ad:80:c3:71:10:19:f2:a2:88:c9:fb:e5:8a:11: db:54:d6:7b:34:c6:66:5f:ca:13:6f:58:d1:b3:9a: 58:75:d7:a3:79:90:2f:d8:21:02:a6:60:7b:82:11: e3:84:37:a2:49:36:77:ba:2a:b2:e0:88:64:f1:4b: 12:f9:6b:ba:16:94:82:56:4c:34:f5:b7:fa:94:61: 25:e5:1d:15:ec:5e:32:b8:d7:26:5d:01:fe:eb:1f: 8b:b9:36:b1:f9:d2:02:10:81:8c:15:f8:9f:55:4e: 6c:c8:e6:9c:a8:7c:cd:28:85:85:af:b4:d2:23:ec: ad:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:85:D8:CA:B9:97:72:32:82:85:20:F5:BD:35:01:AD:B8:1C:74:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a224f8e7-d8e5-3c2c-8b2f-55a68efb823b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:81:54:04:2c:2c:18:8a:ed:60:77:fb:45:af:d1:9e:84:07: 11:08:8b:5a:b6:a5:45:95:44:84:9f:57:82:a1:55:7d:8b:65: 94:a0:e0:a7:26:3b:ab:4a:99:cf:db:74:cd:5a:d4:96:30:b8: 8e:0f:16:e2:70:a3:d2:e0:f7:93:b9:59:b7:06:91:cc:90:45: e3:d6:a4:25:7d:cd:37:6b:c5:02:ce:3d:df:fb:ce:91:20:91: 01:9e:86:dc:46:b1:51:b0:d5:cc:fd:82:a2:2f:2d:f8:19:54: 43:2d:4d:35:06:01:13:54:d4:1f:fb:b2:f6:22:8b:ad:24:8a: e3:97:e4:51:4f:cd:ba:10:ae:32:88:cf:ee:f1:75:b4:85:70: 5f:0e:fa:59:96:b1:42:8a:8d:69:e4:cc:8f:b8:b2:38:bb:02: 2b:80:87:7a:36:fe:19:b8:e4:fc:dd:ee:09:00:b6:f8:69:61: 06:96:73:72:3c:a0:03:63:68:62:0e:6b:60:2d:99:a8:31:43: 67:5a:da:0d:3b:80:34:6a:e2:b3:a6:89:38:b4:95:67:3c:e5: 5d:1c:6a:ec:ad:d2:a0:63:6d:75:14:aa:71:17:80:5a:60:18: 95:47:ef:7e:e9:b3:f9:50:08:e7:94:25:f6:fe:50:c0:a2:78: bf:6e:6b:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz8gjeZ8QS39lOs4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIyNjAyMDAzMloXDTI2MDUyNzAxMDAzMlowLzEtMCsGA1UEAxMk YWQwMDM5NDUtNjY3Ny00NmYzLTlhMzEtMjc0NzhiMDc0MjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+jtUsuot/Dd4yEkkbzfNsn77njR8AOx35KBN 78fQcclSxT37xPSy937nhhfQRYdN3/zj8XiZ4BITgYB7rs/0yLhq8kghfzJCxLeO 7BH1Y3HAs1gem8PSLRIqQGzqB8c0t8tq3xINX9WpoY9pFFsKpSOZS5fmZw9INJYq 2829f/zg+uwyu1f2rYDDcRAZ8qKIyfvlihHbVNZ7NMZmX8oTb1jRs5pYddejeZAv 2CECpmB7ghHjhDeiSTZ3uiqy4Ihk8UsS+Wu6FpSCVkw09bf6lGEl5R0V7F4yuNcm XQH+6x+LuTax+dICEIGMFfifVU5syOacqHzNKIWFr7TSI+ytUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6F2Mq5l3IygoUg9b01Aa24HHQ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTIyNGY4ZTctZDhlNS0z YzJjLThiMmYtNTVhNjhlZmI4MjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeBVAQsLBiK7WB3+0Wv0Z6EBxEIi1q2pUWVRISfV4KhVX2LZZSg4Kcm O6tKmc/bdM1a1JYwuI4PFuJwo9Lg95O5WbcGkcyQRePWpCV9zTdrxQLOPd/7zpEg kQGehtxGsVGw1cz9gqIvLfgZVEMtTTUGARNU1B/7svYii60kiuOX5FFPzboQrjKI z+7xdbSFcF8O+lmWsUKKjWnkzI+4sji7AiuAh3o2/hm45Pzd7gkAtvhpYQaWc3I8 oANjaGIOa2AtmagxQ2da2g07gDRq4rOmiTi0lWc85V0cauyt0qBjbXUUqnEXgFpg GJVH737ps/lQCOeUJfb+UMCieL9ua5U= -----END CERTIFICATE-----Generated at Mon Mar 2 20:02:07 2026 by rpki-client