$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cb95dcb5-036c-3bfa-828a-cd844f666ac2.roa File: cb95dcb5-036c-3bfa-828a-cd844f666ac2.roa (raw, json) Hash identifier: /IJb51xOtn/Iu24NckGFa0GgDSpgrYDHv5D34YE3Z4s= Subject key identifier: D3:24:7C:03:25:76:EE:34:E5:D0:B1:26:C4:CB:D8:0D:71:42:64:0C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CEA5CF4E800D2F262C0ABC580 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cb95dcb5-036c-3bfa-828a-cd844f666ac2.roa Signing time: Thu 19 Feb 2026 14:00:40 +0000 ROA not before: Thu 19 Feb 2026 14:00:40 +0000 ROA not after: Wed 20 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.33.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ea:5c:f4:e8:00:d2:f2:62:c0:ab:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 19 14:00:40 2026 GMT Not After : May 20 13:00:40 2026 GMT Subject: CN=59f1f214-1a35-4abb-83b4-ac1dd0e2cf63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:df:48:28:d1:77:db:06:d5:e7:5b:78:d7:6c: 0c:c3:2e:e9:78:2d:1d:8f:e2:19:e7:79:cb:b6:c5: 64:54:b0:86:1d:4a:36:49:27:6a:b4:24:77:b2:51: a7:7d:71:6e:3b:e7:e7:bd:80:ad:01:89:a6:1f:36: 4b:a0:3e:80:c2:26:be:49:b9:6b:6c:38:4b:8c:8c: 86:46:5d:d6:74:e6:c1:3e:e4:18:d7:72:0c:02:30: 2e:b3:f3:70:7b:52:55:e5:b8:fa:b1:36:ab:d2:d7: da:5d:b1:03:00:11:61:37:d1:d5:47:8b:c7:08:88: fe:99:1a:6b:56:02:16:e2:f5:ee:40:5e:c3:b2:b9: 08:91:85:c2:8c:f4:1c:c4:90:e4:e5:50:2d:b0:24: 5e:39:2e:61:73:79:ba:45:04:8d:a6:0c:c3:62:c3: 79:8b:da:78:b3:33:f1:53:61:76:f6:6c:93:ad:17: 52:27:8d:2e:6a:73:00:27:fb:36:79:83:72:d5:0e: 07:51:f2:e2:e8:bd:45:79:d1:3f:c5:c1:4e:4c:33: 52:e8:cc:42:cb:2c:55:6a:45:82:72:8e:39:41:b2: a5:0f:97:6d:5e:2f:99:e2:9a:5f:39:53:b2:3f:5f: 99:96:bb:ef:79:d0:b0:69:fd:3c:b8:f4:a0:c8:01: 74:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:24:7C:03:25:76:EE:34:E5:D0:B1:26:C4:CB:D8:0D:71:42:64:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cb95dcb5-036c-3bfa-828a-cd844f666ac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:f9:63:d8:4c:b2:9e:e8:44:91:29:e2:32:79:b4:4b:fb:90: 19:21:0d:62:e4:06:01:da:e1:c6:19:50:6d:46:f3:5c:af:ed: fb:28:44:e3:c4:5c:35:73:70:24:bc:27:1c:53:4a:79:1c:5f: 00:0a:f5:00:28:31:d5:22:47:d2:f4:31:44:78:85:84:2c:0f: 3e:71:38:d4:98:74:c6:62:06:d4:0e:e4:fb:0f:54:cb:3d:27: 65:87:8c:f0:22:41:26:8a:25:3b:8c:2f:9e:4a:6c:a4:a9:f4: 49:7d:d2:5d:af:c2:c5:79:41:92:d7:01:13:eb:bf:b6:74:d2: 78:b5:39:8b:1c:5c:94:cd:5c:0b:e2:34:1c:8f:6d:7e:3e:cb: d8:53:6c:a4:d1:dd:f5:17:5b:d9:32:9d:e1:ec:6f:94:5b:ea: cc:f4:ff:19:da:43:62:6c:9f:0d:22:d4:4e:42:f8:32:fb:4a: 6f:24:c3:18:55:b7:cb:3b:9a:6b:9a:2c:3b:f8:a5:70:9f:76: 14:00:47:8b:d2:a4:7e:22:e6:d3:16:ce:7c:92:4f:89:a5:74: c9:8a:cc:52:ae:a4:d5:5d:67:80:ef:05:8f:b0:97:62:1c:3a: ff:14:bd:ef:2a:bd:11:8d:f1:a6:e5:12:49:bc:9f:ab:26:f2: 3b:89:5e:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzqXPToANLyYsCrxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk NTlmMWYyMTQtMWEzNS00YWJiLTgzYjQtYWMxZGQwZTJjZjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN9IKNF32wbV51t412wMwy7peC0dj+IZ53nL tsVkVLCGHUo2SSdqtCR3slGnfXFuO+fnvYCtAYmmHzZLoD6Awia+SblrbDhLjIyG Rl3WdObBPuQY13IMAjAus/Nwe1JV5bj6sTar0tfaXbEDABFhN9HVR4vHCIj+mRpr VgIW4vXuQF7DsrkIkYXCjPQcxJDk5VAtsCReOS5hc3m6RQSNpgzDYsN5i9p4szPx U2F29myTrRdSJ40uanMAJ/s2eYNy1Q4HUfLi6L1FedE/xcFOTDNS6MxCyyxVakWC co45QbKlD5dtXi+Z4ppfOVOyP1+ZlrvvedCwaf08uPSgyAF0IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMkfAMldu405dCxJsTL2A1xQmQMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2I5NWRjYjUtMDM2Yy0z YmZhLTgyOGEtY2Q4NDRmNjY2YWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAX5Y9hMsp7oRJEp4jJ5tEv7kBkhDWLkBgHa4cYZUG1G81yv7fsoROPE XDVzcCS8JxxTSnkcXwAK9QAoMdUiR9L0MUR4hYQsDz5xONSYdMZiBtQO5PsPVMs9 J2WHjPAiQSaKJTuML55KbKSp9El90l2vwsV5QZLXARPrv7Z00ni1OYscXJTNXAvi NByPbX4+y9hTbKTR3fUXW9kyneHsb5Rb6sz0/xnaQ2Jsnw0i1E5C+DL7Sm8kwxhV t8s7mmuaLDv4pXCfdhQAR4vSpH4i5tMWznyST4mldMmKzFKupNVdZ4DvBY+wl2Ic Ov8Uve8qvRGN8ablEkm8n6sm8juJXnU= -----END CERTIFICATE-----Generated at Mon Mar 2 16:29:00 2026 by rpki-client