$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e86bab7f-476b-3211-99b7-b56509930684.roa File: e86bab7f-476b-3211-99b7-b56509930684.roa (raw, json) Hash identifier: AIStkaheAe/fmE11XQ+LBf328iUOB1hk8i9U6l7hbsI= Subject key identifier: 7D:37:C4:4E:0F:76:50:00:83:09:5D:9C:0C:A6:4E:47:F9:FE:75:6A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D091270DDA8D053B9BC8C8480 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e86bab7f-476b-3211-99b7-b56509930684.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 8069 IP address blocks: 20.33.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:70:dd:a8:d0:53:b9:bc:8c:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=dc964656-d889-42fe-9938-72a03961ef6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:08:34:a8:37:b1:d3:a1:1d:42:17:56:53:72: e5:fa:76:9c:35:ee:3b:5f:8c:3e:b8:24:06:88:13: 1e:9e:39:89:87:67:47:61:83:22:30:14:53:23:43: 48:0d:5e:20:08:61:9d:47:c3:af:ef:b2:f3:e2:89: 2c:24:88:23:1a:d5:37:0d:2b:ff:3b:1c:8d:81:9d: 0b:68:57:6f:fb:25:fe:e2:4b:9e:50:1e:a5:90:ea: 44:0f:58:e4:ae:f2:8e:63:04:af:c2:93:ad:01:ea: 46:36:99:05:77:14:62:ed:fd:34:db:fa:04:d2:d8: ab:53:50:ab:83:d8:3c:c1:8f:eb:60:62:5e:4f:af: b4:f5:b8:aa:7d:e3:66:51:69:0c:3c:0e:e3:49:4f: 9b:70:e1:82:aa:d4:81:7f:37:2d:3e:82:06:50:3c: ff:be:19:57:63:b6:48:1c:9e:88:7f:f3:f6:f2:ef: df:40:5d:cf:f4:5d:27:ec:f9:1d:a5:b1:74:b6:3e: 49:4e:c3:0e:c4:56:b6:25:70:61:d2:91:82:0b:5f: b6:8e:c8:68:af:a6:07:56:18:92:42:58:ed:e0:96: 68:9f:bd:f5:53:b5:0a:4e:57:f4:4c:2f:1b:93:16: 29:f1:99:b5:98:ab:84:ab:90:b1:89:ec:dc:d3:7b: 72:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:37:C4:4E:0F:76:50:00:83:09:5D:9C:0C:A6:4E:47:F9:FE:75:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e86bab7f-476b-3211-99b7-b56509930684.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:10:57:88:47:96:a5:e0:08:41:df:48:69:8e:56:2c:b5:c0: 86:01:70:d2:26:b3:2a:b3:b4:19:19:92:ba:24:97:21:12:c4: ce:37:db:a2:33:cc:12:9c:de:6e:f1:c2:45:bf:6c:9a:ec:de: 6c:72:b2:00:22:22:2e:85:1f:99:69:ba:44:29:f7:98:7b:b5: 71:7a:6e:4c:1f:a8:da:52:8f:d1:cb:6d:dc:49:54:75:55:5a: b6:d2:17:00:fb:29:98:50:1d:0f:fd:b7:14:bb:fb:6e:e3:e9: 9a:c0:b8:b9:5a:5e:16:20:20:a2:05:d1:33:84:7e:d6:94:a9: 83:03:9e:ee:e3:93:09:bc:f9:9e:00:96:09:27:3a:85:7e:b5: 7d:03:c3:35:12:c7:c5:d7:fc:fd:4a:7b:0b:36:73:fb:5a:bc: ee:6f:68:0f:1b:b3:cc:0b:c5:c7:47:a8:28:11:ec:df:f9:6f: 85:6d:47:52:6f:2a:b8:26:f3:fa:81:26:8e:ec:2c:5d:5b:62: 2c:f7:37:2d:1e:f3:e1:7f:bc:41:f9:58:8f:70:72:ab:29:e3: 1b:a5:0d:1d:6a:93:a2:1e:76:8c:34:76:b1:06:b8:6a:cb:87: 5d:c8:e8:65:2e:26:49:5e:d2:44:15:ef:5c:65:59:ec:f5:5b: f2:cc:1e:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEnDdqNBTubyMhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZGM5NjQ2NTYtZDg4OS00MmZlLTk5MzgtNzJhMDM5NjFlZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAg0qDex06EdQhdWU3Ll+nacNe47X4w+uCQG iBMenjmJh2dHYYMiMBRTI0NIDV4gCGGdR8Ov77Lz4oksJIgjGtU3DSv/OxyNgZ0L aFdv+yX+4kueUB6lkOpED1jkrvKOYwSvwpOtAepGNpkFdxRi7f002/oE0tirU1Cr g9g8wY/rYGJeT6+09biqfeNmUWkMPA7jSU+bcOGCqtSBfzctPoIGUDz/vhlXY7ZI HJ6If/P28u/fQF3P9F0n7PkdpbF0tj5JTsMOxFa2JXBh0pGCC1+2jshor6YHVhiS Qljt4JZon731U7UKTlf0TC8bkxYp8Zm1mKuEq5Cxiezc03tyUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH03xE4PdlAAgwldnAymTkf5/nVqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTg2YmFiN2YtNDc2Yi0z MjExLTk5YjctYjU2NTA5OTMwNjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIQV4hHlqXgCEHfSGmOViy1wIYBcNImsyqztBkZkroklyESxM4326Iz zBKc3m7xwkW/bJrs3mxysgAiIi6FH5lpukQp95h7tXF6bkwfqNpSj9HLbdxJVHVV WrbSFwD7KZhQHQ/9txS7+27j6ZrAuLlaXhYgIKIF0TOEftaUqYMDnu7jkwm8+Z4A lgknOoV+tX0DwzUSx8XX/P1Kews2c/tavO5vaA8bs8wLxcdHqCgR7N/5b4VtR1Jv Krgm8/qBJo7sLF1bYiz3Ny0e8+F/vEH5WI9wcqsp4xulDR1qk6Iedow0drEGuGrL h13I6GUuJkle0kQV71xlWez1W/LMHrU= -----END CERTIFICATE-----Generated at Mon Mar 2 18:28:19 2026 by rpki-client