$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dd987b5e-3883-33aa-beed-2bb079da51c0.roa File: dd987b5e-3883-33aa-beed-2bb079da51c0.roa (raw, json) Hash identifier: 0NDuQDXQuq3x6zVvVmvfgi/NVS7vDiF16Ugj7piMwG0= Subject key identifier: 9C:57:EA:3D:3D:39:04:C3:9E:64:64:8C:64:EE:45:FB:44:F9:E6:18 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CC6120B449B71CB09C7408C80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dd987b5e-3883-33aa-beed-2bb079da51c0.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.33.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:12:0b:44:9b:71:cb:09:c7:40:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=c8bcbaff-7b4c-4f3b-875b-aeb173a9c257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5d:f4:b6:1a:31:b9:cf:31:d6:d6:9c:43:43: dc:19:49:40:0a:50:6d:8e:1b:3e:5c:ae:41:a9:ad: fe:30:16:7f:1d:f1:86:58:fe:0f:cf:7f:c4:b9:4e: e6:69:55:5e:e0:2d:3a:f7:6d:15:90:21:30:dc:ba: f7:24:4c:86:e3:ca:c9:e5:cd:2e:e6:ec:2d:22:75: 37:23:2c:bc:38:c6:9f:f5:6d:d9:61:52:ad:18:1c: 6d:68:9e:99:96:cf:38:4f:68:27:3c:54:ba:31:27: c3:9d:59:79:dc:9a:d3:d4:c8:16:9b:82:40:d5:77: 03:bb:f7:d1:4f:35:02:fe:a7:1a:12:04:02:54:36: 88:09:da:15:94:9a:47:1e:39:ff:fd:74:2f:40:e4: 00:c0:86:8b:ac:51:f0:ab:2e:c6:ae:6c:c7:ba:a8: b2:f6:77:80:8e:a3:d8:c4:41:27:4a:36:2c:e4:ea: 6c:9a:93:3a:c3:df:fb:7b:99:c6:ea:fa:90:59:c4: f1:42:93:90:33:c3:47:2a:44:38:49:2c:73:2c:78: 7f:67:71:61:a9:d2:5e:1b:50:cf:84:13:5e:d4:b6: f3:e1:f7:f8:e2:eb:7b:e3:34:db:d8:e2:f9:9a:d3: 95:ff:fb:10:62:b1:a8:57:0a:ff:fd:06:d9:a7:4a: d7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:57:EA:3D:3D:39:04:C3:9E:64:64:8C:64:EE:45:FB:44:F9:E6:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dd987b5e-3883-33aa-beed-2bb079da51c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f3:2b:8f:11:f3:03:f0:2a:a9:b9:8d:88:76:2a:39:f4:2b: 0c:9c:12:6e:c9:1f:ce:36:64:2c:61:db:d8:02:18:6e:db:e3: 0a:c9:03:86:44:f2:de:6a:9e:7d:fc:13:7f:f5:43:10:ef:1e: 3b:ac:18:d5:12:5a:41:c4:e6:fe:6c:0a:b7:4c:56:7c:91:00: 4d:4a:80:70:92:6f:a2:da:2a:23:81:93:4e:4e:40:30:a5:10: d7:0f:47:a2:fd:ad:bd:be:81:05:25:88:6a:d0:08:d9:e6:52: bf:4e:c4:8d:f0:29:2c:dc:7d:9b:61:11:e8:66:81:ae:78:31: a9:0f:00:62:6a:f9:99:3c:5a:59:4b:56:0b:19:00:2f:e3:16: 2d:4b:06:3f:37:93:74:eb:3d:c3:db:86:a7:ec:6d:f8:5e:51: cf:64:80:1d:37:66:1e:5b:bd:4f:ff:1d:2e:6f:aa:42:a6:16: 62:34:a4:66:69:b3:20:8e:c5:32:49:86:40:87:b8:ef:51:9e: 67:64:51:ba:8d:0b:20:1c:4e:7c:fa:3b:5c:00:65:5b:b1:18: 1b:46:c2:fa:8f:51:5f:3c:fe:e3:69:33:ab:a9:c7:76:34:a1: 76:7f:ef:d6:8d:81:7c:ff:0b:66:c5:3a:76:a9:05:b0:c3:16: 9b:f6:d9:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEgtEm3HLCcdAjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk YzhiY2JhZmYtN2I0Yy00ZjNiLTg3NWItYWViMTczYTljMjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl30thoxuc8x1tacQ0PcGUlAClBtjhs+XK5B qa3+MBZ/HfGGWP4Pz3/EuU7maVVe4C06920VkCEw3Lr3JEyG48rJ5c0u5uwtInU3 Iyy8OMaf9W3ZYVKtGBxtaJ6Zls84T2gnPFS6MSfDnVl53JrT1MgWm4JA1XcDu/fR TzUC/qcaEgQCVDaICdoVlJpHHjn//XQvQOQAwIaLrFHwqy7GrmzHuqiy9neAjqPY xEEnSjYs5OpsmpM6w9/7e5nG6vqQWcTxQpOQM8NHKkQ4SSxzLHh/Z3FhqdJeG1DP hBNe1Lbz4ff44ut74zTb2OL5mtOV//sQYrGoVwr//QbZp0rXCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxX6j09OQTDnmRkjGTuRftE+eYYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGQ5ODdiNWUtMzg4My0z M2FhLWJlZWQtMmJiMDc5ZGE1MWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzzK48R8wPwKqm5jYh2Kjn0KwycEm7JH842ZCxh29gCGG7b4wrJA4ZE 8t5qnn38E3/1QxDvHjusGNUSWkHE5v5sCrdMVnyRAE1KgHCSb6LaKiOBk05OQDCl ENcPR6L9rb2+gQUliGrQCNnmUr9OxI3wKSzcfZthEehmga54MakPAGJq+Zk8WllL VgsZAC/jFi1LBj83k3TrPcPbhqfsbfheUc9kgB03Zh5bvU//HS5vqkKmFmI0pGZp syCOxTJJhkCHuO9RnmdkUbqNCyAcTnz6O1wAZVuxGBtGwvqPUV88/uNpM6upx3Y0 oXZ/79aNgXz/C2bFOnapBbDDFpv22XY= -----END CERTIFICATE-----Generated at Mon Mar 2 16:29:22 2026 by rpki-client