$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c3371c2b-7822-371d-9068-6b89615d8f28.roa File: c3371c2b-7822-371d-9068-6b89615d8f28.roa (raw, json) Hash identifier: ly2Ru1NZ3vjkv8eDPDTTdg0eciulECSnv/U4ddwA7HI= Subject key identifier: 44:C7:F5:D6:2A:F0:99:60:A7:C7:23:C5:85:41:8E:A5:BD:5F:E2:2C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CEA5CF5839A7BB5F31D156140 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c3371c2b-7822-371d-9068-6b89615d8f28.roa Signing time: Thu 19 Feb 2026 14:00:40 +0000 ROA not before: Thu 19 Feb 2026 14:00:40 +0000 ROA not after: Wed 20 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.33.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ea:5c:f5:83:9a:7b:b5:f3:1d:15:61:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 19 14:00:40 2026 GMT Not After : May 20 13:00:40 2026 GMT Subject: CN=0099daa8-6049-401a-9c72-e697ac8824ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ae:71:73:34:af:b3:81:24:1f:25:a7:a2:01: 55:e7:e1:ff:4b:bb:1c:14:2a:40:e2:cb:b8:c7:9c: da:93:85:2e:1b:a0:56:8b:dd:82:c8:96:52:49:a2: b3:9c:30:31:b7:9b:5f:a4:f8:47:da:1b:6d:8b:4d: eb:17:2c:ae:ea:66:24:8f:ab:0f:24:69:ee:2e:cd: d2:9a:fe:d5:f5:b6:8f:87:1f:38:d7:06:53:15:4e: 90:23:94:65:f3:5e:6c:ac:c8:86:4a:e1:74:20:5a: 6d:80:ad:b5:27:99:41:c4:f5:79:be:de:fa:2d:a5: 3a:5d:50:4f:13:72:68:9b:b1:a8:18:80:04:9d:d6: 59:45:2e:9c:bb:74:21:97:cf:c4:ca:49:8d:8c:3d: 78:4a:62:4a:46:04:64:e5:0d:c4:e8:c8:b8:d6:2a: dc:b1:49:06:b5:fa:13:46:42:56:80:74:5f:61:a3: e1:88:ca:c8:28:66:f5:90:c8:0b:29:a7:f2:75:f7: cc:6a:17:7a:fd:44:78:f0:96:5f:2f:a1:6a:1f:23: 5d:d7:1b:78:4d:db:f8:88:ef:1d:2d:09:a4:6d:2e: 92:70:40:e1:ea:85:1a:e1:9d:fc:fd:93:55:96:c3: 0e:25:4b:68:1c:22:11:c4:ea:af:3b:5b:ee:c5:43: bf:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C7:F5:D6:2A:F0:99:60:A7:C7:23:C5:85:41:8E:A5:BD:5F:E2:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c3371c2b-7822-371d-9068-6b89615d8f28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:e5:cf:3f:ac:3d:bc:36:aa:70:99:9f:5a:bc:d9:e4:7a:4b: 02:22:9d:44:9e:3c:92:0f:27:b1:42:08:5e:f3:b5:d6:22:42: ff:f2:58:0d:54:3e:6e:9e:ae:bd:a7:e0:a5:0c:4e:35:87:b7: f3:53:9c:5e:f4:74:00:e0:e5:09:c1:bd:32:d9:0d:f0:f5:5d: 5d:04:5d:7f:13:d7:9f:d1:98:04:47:ab:94:b8:3f:61:82:c3: 55:0f:22:c3:4f:07:87:0a:fe:96:c9:81:d6:26:e6:e3:4e:c4: 1d:16:27:76:fc:93:43:84:3a:2a:e8:23:1f:54:c0:e1:36:37: 42:b2:1e:cc:b7:8b:1a:85:e0:e8:b7:be:5b:64:03:5e:68:4e: 0c:52:3e:6f:e6:ea:e2:d5:20:e8:6f:5a:d6:f8:74:93:24:28: 38:ee:fd:a8:23:ef:2d:df:6c:01:56:e5:c1:19:c6:90:7f:46: 64:c5:b3:dd:ff:be:f9:35:ef:c8:30:e1:06:b3:87:c5:e2:9d: f1:e4:9f:e9:36:76:5c:44:34:3f:68:c5:63:f6:0c:93:b9:76: bb:3a:26:ee:34:61:74:9b:b2:97:6f:ed:28:ee:ec:af:c0:ea: ab:0d:b9:82:7e:c0:ac:00:91:90:f8:3f:65:8c:8f:52:a2:24: 4b:ee:2b:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzqXPWDmnu18x0VYUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk MDA5OWRhYTgtNjA0OS00MDFhLTljNzItZTY5N2FjODgyNGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAza5xczSvs4EkHyWnogFV5+H/S7scFCpA4su4 x5zak4UuG6BWi92CyJZSSaKznDAxt5tfpPhH2htti03rFyyu6mYkj6sPJGnuLs3S mv7V9baPhx841wZTFU6QI5Rl815srMiGSuF0IFptgK21J5lBxPV5vt76LaU6XVBP E3Jom7GoGIAEndZZRS6cu3Qhl8/EykmNjD14SmJKRgRk5Q3E6Mi41ircsUkGtfoT RkJWgHRfYaPhiMrIKGb1kMgLKafydffMahd6/UR48JZfL6FqHyNd1xt4Tdv4iO8d LQmkbS6ScEDh6oUa4Z38/ZNVlsMOJUtoHCIRxOqvO1vuxUO/CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETH9dYq8Jlgp8cjxYVBjqW9X+IsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzMzNzFjMmItNzgyMi0z NzFkLTkwNjgtNmI4OTYxNWQ4ZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvlzz+sPbw2qnCZn1q82eR6SwIinUSePJIPJ7FCCF7ztdYiQv/yWA1U Pm6err2n4KUMTjWHt/NTnF70dADg5QnBvTLZDfD1XV0EXX8T15/RmARHq5S4P2GC w1UPIsNPB4cK/pbJgdYm5uNOxB0WJ3b8k0OEOiroIx9UwOE2N0KyHsy3ixqF4Oi3 vltkA15oTgxSPm/m6uLVIOhvWtb4dJMkKDju/agj7y3fbAFW5cEZxpB/RmTFs93/ vvk178gw4Qazh8XinfHkn+k2dlxEND9oxWP2DJO5drs6Ju40YXSbspdv7Sju7K/A 6qsNuYJ+wKwAkZD4P2WMj1KiJEvuK3Q= -----END CERTIFICATE-----Generated at Mon Mar 2 21:56:22 2026 by rpki-client