$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/db4e4f6a-d694-32a7-b2e1-f4d4ee97c262.roa File: db4e4f6a-d694-32a7-b2e1-f4d4ee97c262.roa (raw, json) Hash identifier: v7HF751kaNHDeSJlBstX/M70a9vSiGH2cAXY6GzCwvM= Subject key identifier: C5:22:40:AF:D8:EC:BD:7B:BF:36:CF:60:9D:E1:1E:3E:FB:3E:BA:89 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CC6120AAEF78CDD9A0A540940 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/db4e4f6a-d694-32a7-b2e1-f4d4ee97c262.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.33.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:12:0a:ae:f7:8c:dd:9a:0a:54:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=cdcc3aaa-0bfe-48c5-b17d-fb6be1ca12c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:90:a9:0c:dc:fc:b4:5c:88:b6:69:f4:40:34: 94:7b:47:77:0b:34:82:57:7e:1b:bd:b5:d5:e2:24: 97:5f:35:9b:e6:c6:56:e2:ef:94:84:25:38:12:f4: 18:ab:76:9a:d1:67:b8:66:4e:b0:d1:80:17:16:85: 56:46:30:1d:6b:bb:c3:9f:9a:f1:5c:3f:d6:45:7c: a6:ae:2f:60:85:b4:57:ee:06:88:3f:5e:22:e2:97: dd:68:ed:c6:e2:46:d1:15:dd:48:cc:50:92:fa:fd: 4a:fc:3d:aa:56:96:18:fa:b8:a1:e0:6d:e3:eb:79: 0a:aa:35:4f:21:ce:fa:0b:cb:38:3a:24:21:93:31: df:6a:39:7e:7f:57:f9:e0:49:67:b4:b6:06:aa:99: 09:78:99:4d:e6:a4:25:63:ef:ef:fd:08:c7:23:29: 40:20:f5:b3:2d:ff:a4:06:1c:d8:d9:61:ff:7d:9e: 49:d0:ff:8c:1b:8d:38:14:ad:07:bb:f3:d3:81:e0: d1:f5:02:b2:55:ce:7f:15:51:d0:48:63:0a:50:d4: 3e:cf:cc:6f:be:7c:5e:f1:10:1f:e1:02:75:64:ef: a3:3f:8a:3f:71:a4:22:51:b9:0d:1b:49:7a:ed:77: 11:43:9c:82:ca:ce:93:48:e1:7c:a8:e4:99:17:1b: 05:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:22:40:AF:D8:EC:BD:7B:BF:36:CF:60:9D:E1:1E:3E:FB:3E:BA:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/db4e4f6a-d694-32a7-b2e1-f4d4ee97c262.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:9e:27:f9:63:1d:bc:2b:ce:a0:f2:fb:a0:19:cf:0a:d9:d3: be:ad:29:d9:54:17:70:4f:b3:a8:dd:cd:ba:ff:9a:68:38:1b: 2a:83:e8:a7:41:33:c6:4f:5f:87:62:f1:35:c9:e3:c6:f5:d6: 0f:f9:66:b4:69:d0:36:da:0f:f4:7e:47:5a:f1:cf:8c:e7:77: 2a:cd:cb:e2:af:cb:22:e1:5b:ee:a4:a2:6b:10:b2:c7:21:08: 7b:74:51:d9:07:81:e1:e5:b7:73:61:4b:87:1f:f8:9c:6b:9d: e0:f4:b6:86:d5:26:ee:ef:c5:1a:67:fc:8a:d1:c5:6e:26:b4: 90:58:2a:67:d6:ab:b8:53:6d:38:e2:39:f4:64:e2:de:95:10: 8d:9a:e0:08:bd:87:28:73:05:73:bb:96:10:fd:69:91:d4:b3: 92:ec:1f:33:b4:fa:7b:32:9a:02:ec:b1:6b:cd:e5:82:bc:ad: f0:ac:ce:a6:95:ea:e0:e1:46:45:1d:29:91:2a:b6:47:5a:4b: e9:e2:83:e0:b5:fc:70:91:b1:cc:bc:e7:f2:a0:13:c4:41:f4: b1:91:54:c8:1d:b1:91:3e:3a:1a:0e:9b:77:0c:10:b8:ea:03: b1:e5:0d:3c:b5:c6:d7:62:4a:fb:01:20:11:06:24:f1:9f:0e: 02:33:0b:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEgqu94zdmgpUCUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk Y2RjYzNhYWEtMGJmZS00OGM1LWIxN2QtZmI2YmUxY2ExMmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJCpDNz8tFyItmn0QDSUe0d3CzSCV34bvbXV 4iSXXzWb5sZW4u+UhCU4EvQYq3aa0We4Zk6w0YAXFoVWRjAda7vDn5rxXD/WRXym ri9ghbRX7gaIP14i4pfdaO3G4kbRFd1IzFCS+v1K/D2qVpYY+rih4G3j63kKqjVP Ic76C8s4OiQhkzHfajl+f1f54ElntLYGqpkJeJlN5qQlY+/v/QjHIylAIPWzLf+k BhzY2WH/fZ5J0P+MG404FK0Hu/PTgeDR9QKyVc5/FVHQSGMKUNQ+z8xvvnxe8RAf 4QJ1ZO+jP4o/caQiUbkNG0l67XcRQ5yCys6TSOF8qOSZFxsFCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUiQK/Y7L17vzbPYJ3hHj77PrqJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGI0ZTRmNmEtZDY5NC0z MmE3LWIyZTEtZjRkNGVlOTdjMjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKeJ/ljHbwrzqDy+6AZzwrZ076tKdlUF3BPs6jdzbr/mmg4GyqD6KdB M8ZPX4di8TXJ48b11g/5ZrRp0DbaD/R+R1rxz4zndyrNy+KvyyLhW+6komsQssch CHt0UdkHgeHlt3NhS4cf+JxrneD0tobVJu7vxRpn/IrRxW4mtJBYKmfWq7hTbTji OfRk4t6VEI2a4Ai9hyhzBXO7lhD9aZHUs5LsHzO0+nsymgLssWvN5YK8rfCszqaV 6uDhRkUdKZEqtkdaS+nig+C1/HCRscy85/KgE8RB9LGRVMgdsZE+OhoOm3cMELjq A7HlDTy1xtdiSvsBIBEGJPGfDgIzC1Y= -----END CERTIFICATE-----Generated at Mon Mar 2 16:29:01 2026 by rpki-client