$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c6e160e3-34d1-3b1f-bb5b-b2f34cecf1c0.roa File: c6e160e3-34d1-3b1f-bb5b-b2f34cecf1c0.roa (raw, json) Hash identifier: z3i+DI5IT661w4AstMWu2opDUB+IUjSow1AktYcGDUA= Subject key identifier: 4B:87:48:82:EC:E8:5C:DD:ED:0A:0D:B4:86:0F:F7:68:54:46:51:59 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CC7774E6895603F480B891BA0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c6e160e3-34d1-3b1f-bb5b-b2f34cecf1c0.roa Signing time: Sat 07 Feb 2026 02:00:31 +0000 ROA not before: Sat 07 Feb 2026 02:00:31 +0000 ROA not after: Fri 08 May 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.33.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c7:77:4e:68:95:60:3f:48:0b:89:1b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 7 02:00:31 2026 GMT Not After : May 8 01:00:31 2026 GMT Subject: CN=bedfea18-09c6-40a1-9dc2-2abd384e5e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:48:b3:75:36:2a:0c:cb:c9:3c:93:07:f9:c7: 74:55:54:e8:bb:1b:7d:43:13:98:8f:02:c1:b9:13: c8:7a:f1:04:93:29:64:e7:6f:02:10:48:45:eb:a7: 6a:8b:4b:0a:16:4b:b6:e8:8a:3c:cb:9e:db:8d:33: 55:6a:ed:e7:98:6a:89:84:a7:d3:5c:b0:06:ee:01: b0:16:6d:f3:f6:00:5d:b0:e5:19:4b:aa:de:38:ff: 76:5b:4a:0e:1f:4d:23:f7:68:cf:66:73:1e:48:d1: c6:b2:60:03:d6:ea:b4:06:86:af:21:e4:a7:41:2d: 3b:0c:bf:8a:57:1f:d3:c7:8b:62:57:31:83:2a:48: 57:95:41:85:4f:89:22:a5:21:76:8b:cf:01:1d:57: 80:b8:66:72:3b:cf:b8:1a:76:f0:6c:d0:94:c0:f4: 00:0c:7b:20:46:56:4b:c3:7c:8d:ae:d6:5b:91:81: 0f:a2:b5:b8:75:48:01:fa:5c:9f:57:e9:f4:3a:0b: f7:e0:61:a0:91:71:9a:f6:15:22:1e:c8:4d:a9:6b: d4:52:39:44:60:b5:58:36:b5:56:3f:45:a8:44:17: 61:a2:ad:38:67:1c:77:13:ae:f6:3d:76:5a:90:cc: 4b:47:e9:0c:2f:ac:0f:de:47:01:e6:ec:37:66:07: 47:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:87:48:82:EC:E8:5C:DD:ED:0A:0D:B4:86:0F:F7:68:54:46:51:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c6e160e3-34d1-3b1f-bb5b-b2f34cecf1c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:e0:a2:93:7a:d6:4b:23:34:9a:69:da:ce:48:d8:a2:d2:9a: 86:2c:f4:99:e7:64:b1:8b:16:f0:4d:4a:36:c4:c2:db:60:ca: 69:dc:1c:20:e3:d2:82:90:7e:73:b8:b7:5a:d1:c3:ca:4e:aa: 9d:da:3d:af:12:56:83:1b:a1:e3:5d:e6:d9:27:58:f9:e4:70: 45:b1:5a:35:8a:67:0d:76:78:f2:e6:39:20:1f:ba:e1:30:1d: bb:2f:ed:b3:53:18:2c:11:74:b5:cd:cd:ad:1d:eb:c0:40:1b: f0:27:4a:3a:d6:12:04:dd:cb:c9:8c:5f:da:9c:e5:7a:72:1b: 50:e8:87:1e:4f:9c:ae:ab:b3:f0:ef:1d:0c:76:56:0d:b1:d8: 09:19:2c:dc:10:5b:68:55:07:e6:dd:65:74:4c:54:31:cd:73: cb:80:9d:df:4f:ba:45:f7:be:51:6b:8d:a8:ae:4f:22:13:57: 3c:e1:99:ab:24:14:03:00:6a:ab:f9:eb:a7:42:84:5f:09:db: 40:99:d9:b3:4f:19:83:aa:9a:de:6f:f5:c5:97:aa:ac:20:d1: 42:8b:26:a0:be:04:34:c7:26:04:d9:fc:8d:9e:d9:2f:1f:e7: 4e:b1:e8:e0:29:76:df:a4:fe:3e:c3:73:35:f5:9b:46:c4:c3: a1:bd:93:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzHd05olWA/SAuJG6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwNzAyMDAzMVoXDTI2MDUwODAxMDAzMVowLzEtMCsGA1UEAxMk YmVkZmVhMTgtMDljNi00MGExLTlkYzItMmFiZDM4NGU1ZTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEizdTYqDMvJPJMH+cd0VVTouxt9QxOYjwLB uRPIevEEkylk528CEEhF66dqi0sKFku26Io8y57bjTNVau3nmGqJhKfTXLAG7gGw Fm3z9gBdsOUZS6reOP92W0oOH00j92jPZnMeSNHGsmAD1uq0BoavIeSnQS07DL+K Vx/Tx4tiVzGDKkhXlUGFT4kipSF2i88BHVeAuGZyO8+4GnbwbNCUwPQADHsgRlZL w3yNrtZbkYEPorW4dUgB+lyfV+n0Ogv34GGgkXGa9hUiHshNqWvUUjlEYLVYNrVW P0WoRBdhoq04Zxx3E672PXZakMxLR+kML6wP3kcB5uw3ZgdHQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuHSILs6Fzd7QoNtIYP92hURlFZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzZlMTYwZTMtMzRkMS0z YjFmLWJiNWItYjJmMzRjZWNmMWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHgopN61ksjNJpp2s5I2KLSmoYs9JnnZLGLFvBNSjbEwttgymncHCDj 0oKQfnO4t1rRw8pOqp3aPa8SVoMboeNd5tknWPnkcEWxWjWKZw12ePLmOSAfuuEw Hbsv7bNTGCwRdLXNza0d68BAG/AnSjrWEgTdy8mMX9qc5XpyG1Dohx5PnK6rs/Dv HQx2Vg2x2AkZLNwQW2hVB+bdZXRMVDHNc8uAnd9PukX3vlFrjaiuTyITVzzhmask FAMAaqv566dChF8J20CZ2bNPGYOqmt5v9cWXqqwg0UKLJqC+BDTHJgTZ/I2e2S8f 506x6OApdt+k/j7DczX1m0bEw6G9k78= -----END CERTIFICATE-----Generated at Mon Mar 2 16:30:06 2026 by rpki-client