$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8980512-7775-361d-924e-d23443bde100.roa File: c8980512-7775-361d-924e-d23443bde100.roa (raw, json) Hash identifier: 0RHQ5WPXlX0XwJvDUz1Y3Fs1t/H2h7BMBZu4xF/aOTo= Subject key identifier: 99:72:52:C4:1D:6F:DD:CA:9F:CE:26:CB:2D:4D:43:0B:A6:44:06:12 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CB287478D72D2AC4634208500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8980512-7775-361d-924e-d23443bde100.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.33.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:47:8d:72:d2:ac:46:34:20:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=d488b957-a44a-4a12-97a2-9c8de4d157de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b6:94:f0:22:6f:ff:2e:cc:77:8e:9e:60:a1: 73:f5:7d:ed:b0:02:53:a3:60:67:99:7c:96:c2:92: c8:15:1c:4a:cb:32:98:c4:5a:15:49:71:f5:5d:ed: 4b:38:20:c3:45:8b:c3:4d:a5:d4:d3:74:76:22:42: 27:6f:07:c2:1d:9b:d3:9f:0f:47:ab:f6:c3:06:34: f7:9b:4f:2c:f4:a2:27:88:0d:84:fe:9f:c2:e8:99: 50:e6:48:47:e9:f4:56:f2:43:80:01:3a:26:cb:b3: 70:75:9d:da:84:17:17:85:c8:b9:fb:12:42:76:dc: 68:16:51:0a:a4:fc:07:7c:6e:3e:f7:17:f8:90:b9: 53:9c:57:5e:59:a5:0d:47:eb:17:bc:72:74:ec:02: 7c:7b:6a:5e:46:50:2b:70:b6:6e:90:29:fa:ab:4e: b7:47:29:6c:06:94:8a:16:1d:57:d5:c9:ae:ea:0a: 5d:30:95:9d:37:70:eb:f8:b5:37:d6:93:55:a2:8e: b2:a7:4e:c5:d7:96:84:73:04:1f:f4:77:7e:02:0b: 34:bc:c7:72:78:2c:88:a0:8c:05:6a:53:2f:49:1b: 25:8b:00:f9:9c:02:9c:10:13:93:50:0d:6b:22:f9: 69:db:8a:f9:e5:87:61:6b:e7:48:99:43:a6:c9:55: 2c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:72:52:C4:1D:6F:DD:CA:9F:CE:26:CB:2D:4D:43:0B:A6:44:06:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8980512-7775-361d-924e-d23443bde100.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:27:6a:c1:00:1d:7f:a0:02:9d:bb:08:1a:46:d2:8f:12:9d: 2a:ae:aa:e2:5b:ab:ea:56:4e:aa:5f:50:50:5b:c9:90:d2:64: 7c:aa:8b:1a:c2:f8:b4:bf:31:a1:37:ec:2d:c6:ff:e3:d2:81: ed:7e:b0:6b:8b:c8:80:b1:7b:4f:23:d6:b9:6b:a6:f5:1e:c6: dd:7f:a3:e2:d0:3a:2a:3c:fe:30:b6:f0:f8:fa:5c:a4:3d:76: 90:02:8e:66:71:07:52:23:a8:66:eb:b4:55:67:21:0a:15:c8: 1b:8e:80:39:0d:1b:dc:41:81:71:86:d3:44:6a:d8:d0:b4:23: f5:80:82:c3:b8:f9:c3:e5:bc:08:6f:0c:93:1c:3d:13:42:e7: be:37:0e:43:e1:a2:79:8c:78:05:c5:f6:e8:12:ce:22:40:4d: b4:e9:a4:a7:60:19:a9:f8:f7:fa:54:aa:8f:2f:e5:9d:7e:45: 3f:b1:4f:2e:25:f3:ce:68:18:5d:47:b6:87:1f:56:5a:9c:07: e5:52:ed:45:72:18:35:f5:8d:7c:f2:ca:13:1c:a4:7a:ea:59: 6c:37:73:a4:2c:1f:d5:f7:de:2c:3c:57:f0:04:5c:a2:3b:68: 72:0b:68:2a:a5:be:1a:ed:1a:24:d8:3c:5d:72:ad:3c:d2:93: 95:51:3f:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyh0eNctKsRjQghQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDQ4OGI5NTctYTQ0YS00YTEyLTk3YTItOWM4ZGU0ZDE1N2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLaU8CJv/y7Md46eYKFz9X3tsAJTo2BnmXyW wpLIFRxKyzKYxFoVSXH1Xe1LOCDDRYvDTaXU03R2IkInbwfCHZvTnw9Hq/bDBjT3 m08s9KIniA2E/p/C6JlQ5khH6fRW8kOAATomy7NwdZ3ahBcXhci5+xJCdtxoFlEK pPwHfG4+9xf4kLlTnFdeWaUNR+sXvHJ07AJ8e2peRlArcLZukCn6q063RylsBpSK Fh1X1cmu6gpdMJWdN3Dr+LU31pNVoo6yp07F15aEcwQf9Hd+Ags0vMdyeCyIoIwF alMvSRsliwD5nAKcEBOTUA1rIvlp24r55Ydha+dImUOmyVUszQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlyUsQdb93Kn84myy1NQwumRAYSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzg5ODA1MTItNzc3NS0z NjFkLTkyNGUtZDIzNDQzYmRlMTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEnasEAHX+gAp27CBpG0o8SnSququJbq+pWTqpfUFBbyZDSZHyqixrC +LS/MaE37C3G/+PSge1+sGuLyICxe08j1rlrpvUext1/o+LQOio8/jC28Pj6XKQ9 dpACjmZxB1IjqGbrtFVnIQoVyBuOgDkNG9xBgXGG00Rq2NC0I/WAgsO4+cPlvAhv DJMcPRNC5743DkPhonmMeAXF9ugSziJATbTppKdgGan49/pUqo8v5Z1+RT+xTy4l 885oGF1HtocfVlqcB+VS7UVyGDX1jXzyyhMcpHrqWWw3c6QsH9X33iw8V/AEXKI7 aHILaCqlvhrtGiTYPF1yrTzSk5VRP3Y= -----END CERTIFICATE-----Generated at Tue Mar 3 02:43:36 2026 by rpki-client