$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b8dfed92-9681-3c25-8cdc-e320f158c88a.roa File: b8dfed92-9681-3c25-8cdc-e320f158c88a.roa (raw, json) Hash identifier: HMZO2gehWFzvPJGYjTqwXn6jkl1b1HiyRk9q214vVSs= Subject key identifier: 68:78:3B:FF:20:27:AC:75:53:FD:ED:88:4D:4D:2F:AC:09:1B:21:B8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CEA5CF49FEE5870B6D1A25880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b8dfed92-9681-3c25-8cdc-e320f158c88a.roa Signing time: Thu 19 Feb 2026 14:00:40 +0000 ROA not before: Thu 19 Feb 2026 14:00:40 +0000 ROA not after: Wed 20 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.33.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ea:5c:f4:9f:ee:58:70:b6:d1:a2:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 19 14:00:40 2026 GMT Not After : May 20 13:00:40 2026 GMT Subject: CN=e5566729-2fd4-4eee-aa51-36696ca3ced8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7a:83:b4:25:3a:6d:13:96:0a:97:0c:3a:26: 0f:c5:14:2c:7b:2c:b8:1c:a3:68:9e:43:0b:59:40: fc:c3:fb:8c:e4:7d:10:0d:ca:2c:7c:32:2d:2a:be: b3:6d:70:a6:d8:d5:a4:b0:20:a9:04:d7:2b:cc:8b: 40:69:8e:0e:b3:1a:c2:dd:c9:e0:8e:ce:94:76:73: d4:ac:20:5d:46:89:82:d1:ba:f0:b5:6d:c6:15:dc: 80:7b:98:72:90:7b:d3:82:3c:ca:11:3c:0b:5a:d1: d5:15:80:10:1e:73:0b:53:16:d5:42:02:fb:c8:03: 5e:be:7b:5b:83:4d:96:4e:7a:f4:f2:b3:a6:17:6b: 20:6f:00:b6:92:3d:32:69:3a:35:da:af:7e:38:9d: c4:fc:bb:06:6a:ba:43:a4:d9:65:27:89:af:b9:62: f0:df:a1:ca:de:08:14:4f:95:da:fb:56:13:0f:27: e0:8e:46:ac:6a:ec:30:55:b7:e4:f3:fa:95:b3:bf: fd:25:95:ea:54:9d:84:ed:f3:cd:d4:f5:c8:89:6b: 99:85:6b:36:17:d3:c1:3b:7c:5a:fa:97:f5:f2:b2: 96:b7:45:ab:c5:82:44:33:83:20:c3:6e:2e:d2:19: 0c:4e:80:f9:1d:8c:97:1e:71:1b:f7:4f:45:12:8e: 4b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:78:3B:FF:20:27:AC:75:53:FD:ED:88:4D:4D:2F:AC:09:1B:21:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b8dfed92-9681-3c25-8cdc-e320f158c88a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:10:d3:67:08:31:5c:57:65:a7:47:4b:b1:ef:56:7d:d7:ab: f8:71:ed:9f:3b:eb:74:55:da:80:9a:72:8e:bf:57:73:9e:96: 3f:0c:90:d4:88:13:5a:52:fe:e3:14:8b:ff:51:d0:c5:a4:ef: f9:5b:8c:db:8b:cc:47:64:e5:8e:af:87:f4:7a:ad:2c:0e:9b: 2b:e1:b5:e9:c2:ae:7c:b2:fc:7f:ba:32:92:c5:cf:f7:7f:76: ad:28:7a:1b:3f:59:03:1a:f3:05:6c:8b:51:a4:b1:66:42:82: 8e:c5:3f:6b:e5:e5:78:8a:de:9c:cd:21:f0:c8:36:fc:a4:33: 74:96:88:59:62:52:09:d4:36:81:9b:a1:41:ec:ab:fd:d8:a8: c9:3c:32:5f:40:19:cf:6f:70:78:bf:5c:a1:4e:73:2c:ab:be: 30:c7:4c:ad:f3:c7:17:eb:3c:b8:62:87:38:8e:e8:4d:20:d0: 79:03:f1:86:dc:08:3f:33:2e:63:4d:3e:a1:84:4d:ce:f4:26: 32:43:5b:6b:79:51:b7:8f:c3:d4:8d:05:85:1b:cc:dd:1d:c3: c1:f9:e9:5f:ce:e9:15:45:c7:90:a5:59:b6:47:5e:78:f9:ae: dc:fc:3d:28:e7:49:95:c7:a1:65:1f:f6:86:9d:cb:45:34:63: 98:9b:21:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzqXPSf7lhwttGiWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk ZTU1NjY3MjktMmZkNC00ZWVlLWFhNTEtMzY2OTZjYTNjZWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3qDtCU6bROWCpcMOiYPxRQseyy4HKNonkML WUD8w/uM5H0QDcosfDItKr6zbXCm2NWksCCpBNcrzItAaY4OsxrC3cngjs6UdnPU rCBdRomC0brwtW3GFdyAe5hykHvTgjzKETwLWtHVFYAQHnMLUxbVQgL7yANevntb g02WTnr08rOmF2sgbwC2kj0yaTo12q9+OJ3E/LsGarpDpNllJ4mvuWLw36HK3ggU T5Xa+1YTDyfgjkasauwwVbfk8/qVs7/9JZXqVJ2E7fPN1PXIiWuZhWs2F9PBO3xa +pf18rKWt0WrxYJEM4Mgw24u0hkMToD5HYyXHnEb909FEo5LJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGh4O/8gJ6x1U/3tiE1NL6wJGyG4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjhkZmVkOTItOTY4MS0z YzI1LThjZGMtZTMyMGYxNThjODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMQ02cIMVxXZadHS7HvVn3Xq/hx7Z8763RV2oCaco6/V3Oelj8MkNSI E1pS/uMUi/9R0MWk7/lbjNuLzEdk5Y6vh/R6rSwOmyvhtenCrnyy/H+6MpLFz/d/ dq0oehs/WQMa8wVsi1GksWZCgo7FP2vl5XiK3pzNIfDINvykM3SWiFliUgnUNoGb oUHsq/3YqMk8Ml9AGc9vcHi/XKFOcyyrvjDHTK3zxxfrPLhihziO6E0g0HkD8Ybc CD8zLmNNPqGETc70JjJDW2t5UbePw9SNBYUbzN0dw8H56V/O6RVFx5ClWbZHXnj5 rtz8PSjnSZXHoWUf9oady0U0Y5ibIT8= -----END CERTIFICATE-----Generated at Mon Mar 2 16:28:59 2026 by rpki-client