$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e8355b70-b3ac-3440-a538-b39c041c2270.roa File: e8355b70-b3ac-3440-a538-b39c041c2270.roa (raw, json) Hash identifier: FK7AOsei9NrDIDB2WTx2Fa0195w+JOiFtyPPmT3LFPU= Subject key identifier: 2D:98:D1:7D:F4:6F:2C:27:23:99:2C:17:6C:CE:BF:B8:FD:96:FE:69 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CC7774EAC6099C01A566A8600 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e8355b70-b3ac-3440-a538-b39c041c2270.roa Signing time: Sat 07 Feb 2026 02:00:31 +0000 ROA not before: Sat 07 Feb 2026 02:00:31 +0000 ROA not after: Fri 08 May 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.33.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c7:77:4e:ac:60:99:c0:1a:56:6a:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 7 02:00:31 2026 GMT Not After : May 8 01:00:31 2026 GMT Subject: CN=f65f993a-b512-4e1a-860c-182d469bc03c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c3:34:01:51:47:bb:8d:95:70:43:86:64:cd: 46:80:88:c9:74:e0:04:36:42:90:b1:29:da:eb:2a: 69:3d:2f:ad:72:33:51:80:5a:a9:e1:4a:72:85:eb: 0e:89:b5:6c:65:54:9b:39:1e:11:cf:67:05:5b:21: 44:e5:9a:77:be:ca:13:05:dc:99:d8:7e:78:da:20: 62:fa:98:3b:26:e2:86:d9:c9:60:39:50:e3:77:a8: 94:ce:c3:f8:36:86:8f:b0:7e:a6:91:49:97:18:c2: 19:1d:bc:7e:b1:92:8b:28:a9:b7:49:8c:dc:8e:d5: 4c:af:b6:0d:9c:6b:ee:bb:fb:91:4c:bb:43:cc:73: cc:75:70:03:1e:f2:cf:32:ac:0f:ea:fd:a5:e3:73: 06:33:e9:b3:5c:1a:4d:1b:21:29:77:4e:37:94:99: db:2f:92:02:a6:65:1a:83:52:19:ed:f6:9a:33:e0: e9:42:94:68:02:2e:d2:c3:22:4a:29:ca:d0:c1:ad: 92:66:07:0e:a7:d0:ef:c6:f9:c8:79:f2:41:6a:ab: 4c:38:d8:c2:3b:6d:98:d5:74:29:fe:ce:9a:4b:77: ab:5b:45:5e:02:eb:7f:64:86:c8:2f:88:6c:88:7a: 9b:22:2d:4a:01:e7:af:6e:ef:0f:85:2e:b7:53:85: 63:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:98:D1:7D:F4:6F:2C:27:23:99:2C:17:6C:CE:BF:B8:FD:96:FE:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e8355b70-b3ac-3440-a538-b39c041c2270.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:9e:30:d0:cb:23:c7:b4:80:8b:b3:fe:a4:10:fa:e5:82:d3: 64:67:a0:87:69:c9:83:bb:84:bf:2e:6b:55:a1:16:8a:ca:b6: 27:80:35:67:0b:c4:92:68:c9:c2:8e:09:eb:43:72:58:0d:1b: fc:38:3f:a6:db:f9:63:12:27:ce:0c:a7:f2:7c:e5:e9:16:59: bf:b0:9d:38:c7:69:b9:66:dd:50:32:6d:6f:71:49:34:57:52: ce:38:b8:56:4f:51:3a:b3:b9:a3:64:a3:af:de:aa:e1:fe:bb: 73:9c:a9:03:0e:a3:33:c6:1b:ef:3a:b6:dd:ec:01:43:7d:a2: 21:48:a3:4d:7d:7e:52:e1:6a:fc:0b:61:e8:e7:d8:70:75:f7: 9d:e2:18:8c:d4:47:98:6b:ab:70:73:ea:04:27:53:0e:56:ba: 5e:e4:3b:09:91:83:ad:26:4e:8a:71:78:e7:a8:43:8d:5c:ce: 05:8b:72:1a:b1:cf:3d:22:62:ac:e1:a7:66:0e:8a:9f:ec:9d: 72:03:cb:6a:93:53:06:23:66:c9:ad:9c:0b:fe:79:e5:bf:3d: e4:b1:6d:e1:ce:04:52:a6:c9:86:e1:bc:e2:3b:44:98:b8:fb: 74:7f:92:40:4c:d8:d3:f4:20:60:64:da:c9:82:7c:a1:df:0f: 2d:20:a6:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzHd06sYJnAGlZqhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwNzAyMDAzMVoXDTI2MDUwODAxMDAzMVowLzEtMCsGA1UEAxMk ZjY1Zjk5M2EtYjUxMi00ZTFhLTg2MGMtMTgyZDQ2OWJjMDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8M0AVFHu42VcEOGZM1GgIjJdOAENkKQsSna 6yppPS+tcjNRgFqp4UpyhesOibVsZVSbOR4Rz2cFWyFE5Zp3vsoTBdyZ2H542iBi +pg7JuKG2clgOVDjd6iUzsP4NoaPsH6mkUmXGMIZHbx+sZKLKKm3SYzcjtVMr7YN nGvuu/uRTLtDzHPMdXADHvLPMqwP6v2l43MGM+mzXBpNGyEpd043lJnbL5ICpmUa g1IZ7faaM+DpQpRoAi7SwyJKKcrQwa2SZgcOp9DvxvnIefJBaqtMONjCO22Y1XQp /s6aS3erW0VeAut/ZIbIL4hsiHqbIi1KAeevbu8PhS63U4VjTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2Y0X30bywnI5ksF2zOv7j9lv5pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTgzNTViNzAtYjNhYy0z NDQwLWE1MzgtYjM5YzA0MWMyMjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCHeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeeMNDLI8e0gIuz/qQQ+uWC02RnoIdpyYO7hL8ua1WhForKtieANWcL xJJoycKOCetDclgNG/w4P6bb+WMSJ84Mp/J85ekWWb+wnTjHablm3VAybW9xSTRX Us44uFZPUTqzuaNko6/equH+u3OcqQMOozPGG+86tt3sAUN9oiFIo019flLhavwL Yejn2HB1953iGIzUR5hrq3Bz6gQnUw5Wul7kOwmRg60mTopxeOeoQ41czgWLchqx zz0iYqzhp2YOip/snXIDy2qTUwYjZsmtnAv+eeW/PeSxbeHOBFKmyYbhvOI7RJi4 +3R/kkBM2NP0IGBk2smCfKHfDy0gprs= -----END CERTIFICATE-----Generated at Mon Mar 2 21:56:23 2026 by rpki-client