$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e68b6155-3d36-35e2-bf22-871b49c9a01a.roa File: e68b6155-3d36-35e2-bf22-871b49c9a01a.roa (raw, json) Hash identifier: 6Ye6ymtyafzo3Amu9FNt2OC4K8jHOote3RUyoqfGT58= Subject key identifier: DD:FC:D4:2C:64:D7:FD:01:8B:DC:D2:22:46:38:E1:68:59:0F:11:3C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CB551F818AD5BB748FC779B00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e68b6155-3d36-35e2-bf22-871b49c9a01a.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 8069 IP address blocks: 20.33.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:f8:18:ad:5b:b7:48:fc:77:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=f60662d3-ae38-45aa-a605-9c6c2e3afbc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:98:94:67:46:a1:16:a3:29:2d:fc:6b:3b:6b: 01:df:a4:24:b6:6c:bb:ce:7a:bc:c8:4c:3b:bd:42: 53:f8:03:da:2f:a5:cf:1c:1c:f6:bd:f3:c5:bf:d0: 64:8a:7a:86:bb:32:d6:da:2f:0f:c7:af:4a:b9:3c: 57:2d:7d:e7:44:fb:b7:d2:c3:89:02:ca:6a:22:b0: 03:f7:ed:31:ae:e8:98:b8:12:df:0e:43:e3:c8:20: 0d:97:5e:42:5e:9b:ab:46:58:f8:af:cc:14:bf:5a: a2:cc:62:0c:23:60:49:e5:73:67:12:3e:10:a0:07: 95:e7:41:99:5e:01:3b:41:f4:38:b8:7c:70:2d:33: 02:66:51:f1:81:77:a5:0f:b6:65:c0:b7:7f:47:42: 71:06:81:f0:1b:00:9f:0a:1f:94:54:cf:19:40:b2: e8:df:97:98:26:ab:0e:3c:9f:45:3a:5c:03:3a:05: 47:60:d8:e9:f5:c0:c5:2a:d3:f7:cb:fd:59:37:27: de:46:b8:e5:e8:7e:65:d1:46:40:da:5b:3b:fd:70: 2d:83:f9:e0:54:61:72:37:83:f1:c0:9b:be:37:f0: 38:89:f7:de:25:62:3d:b1:37:4e:7e:1d:33:99:cf: 5c:be:50:02:b1:7e:be:b7:60:d7:df:90:a6:ef:4c: 35:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FC:D4:2C:64:D7:FD:01:8B:DC:D2:22:46:38:E1:68:59:0F:11:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e68b6155-3d36-35e2-bf22-871b49c9a01a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:b7:a9:e8:59:08:d8:2a:74:ec:30:5f:8e:34:07:0b:33:ae: 6e:0b:c8:80:0b:00:b1:f6:a6:b5:80:fe:82:c6:fd:11:e9:fc: 08:bf:91:24:6f:99:40:9c:63:3d:e9:e4:3b:ec:b5:1c:6b:f5: 38:8e:54:a0:f2:43:9f:03:9a:2f:f0:bb:20:60:e2:9f:11:4b: 81:4b:0f:9a:31:b9:76:4a:83:37:1d:a6:6b:68:5c:50:ba:f7: 88:c0:72:f9:b3:fb:4a:a0:af:f6:f9:a6:54:b5:9f:5c:37:a9: ae:cd:5e:80:3e:4c:bf:73:49:2e:f5:9b:5c:d9:c2:04:e0:19: 0a:7c:ab:33:52:9c:ba:dc:15:20:f6:c5:52:f4:d7:a2:cb:27: 40:ba:c9:cf:c0:a9:ba:49:1d:37:c1:e0:0b:f2:9e:8c:92:3d: bc:ad:fc:55:0f:43:05:b8:54:7b:1b:7a:91:a2:4d:79:81:76: 20:09:84:b2:0e:5d:eb:81:a5:c7:30:83:63:65:23:1f:fc:b2: b5:d6:24:9a:67:a9:bb:e2:06:db:90:7d:19:d0:de:65:4d:fb: 40:c8:04:9b:d2:b4:7c:fb:b3:ed:0c:fb:c7:aa:2f:8a:3d:09: d3:a6:e5:1d:9b:02:7d:7c:1e:28:c3:6d:a9:72:84:1a:42:61: 69:e0:c5:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1UfgYrVu3SPx3mwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk ZjYwNjYyZDMtYWUzOC00NWFhLWE2MDUtOWM2YzJlM2FmYmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZiUZ0ahFqMpLfxrO2sB36Qktmy7znq8yEw7 vUJT+APaL6XPHBz2vfPFv9BkinqGuzLW2i8Px69KuTxXLX3nRPu30sOJAspqIrAD 9+0xruiYuBLfDkPjyCANl15CXpurRlj4r8wUv1qizGIMI2BJ5XNnEj4QoAeV50GZ XgE7QfQ4uHxwLTMCZlHxgXelD7ZlwLd/R0JxBoHwGwCfCh+UVM8ZQLLo35eYJqsO PJ9FOlwDOgVHYNjp9cDFKtP3y/1ZNyfeRrjl6H5l0UZA2ls7/XAtg/ngVGFyN4Px wJu+N/A4iffeJWI9sTdOfh0zmc9cvlACsX6+t2DX35Cm70w1vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN381Cxk1/0Bi9zSIkY44WhZDxE8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTY4YjYxNTUtM2QzNi0z NWUyLWJmMjItODcxYjQ5YzlhMDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABW3qehZCNgqdOwwX440Bwszrm4LyIALALH2prWA/oLG/RHp/Ai/kSRv mUCcYz3p5DvstRxr9TiOVKDyQ58Dmi/wuyBg4p8RS4FLD5oxuXZKgzcdpmtoXFC6 94jAcvmz+0qgr/b5plS1n1w3qa7NXoA+TL9zSS71m1zZwgTgGQp8qzNSnLrcFSD2 xVL016LLJ0C6yc/AqbpJHTfB4AvynoySPbyt/FUPQwW4VHsbepGiTXmBdiAJhLIO XeuBpccwg2NlIx/8srXWJJpnqbviBtuQfRnQ3mVN+0DIBJvStHz7s+0M+8eqL4o9 CdOm5R2bAn18HijDbalyhBpCYWngxV0= -----END CERTIFICATE-----Generated at Mon Mar 2 16:30:24 2026 by rpki-client