$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec15a5a9-3318-3dd2-9e36-e6a359acf7ba.roa File: ec15a5a9-3318-3dd2-9e36-e6a359acf7ba.roa (raw, json) Hash identifier: kE/XGzT9+6H/AXy67pRzgzloYzwfjfcq/DRYmK7locc= Subject key identifier: E7:E8:EC:9C:B5:54:80:46:A9:5B:28:C6:B5:32:C5:BC:7F:26:65:AB Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CCD0CA9D7A46691534C294100 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec15a5a9-3318-3dd2-9e36-e6a359acf7ba.roa Signing time: Mon 09 Feb 2026 02:00:31 +0000 ROA not before: Mon 09 Feb 2026 02:00:31 +0000 ROA not after: Sun 10 May 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.33.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cd:0c:a9:d7:a4:66:91:53:4c:29:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 9 02:00:31 2026 GMT Not After : May 10 01:00:31 2026 GMT Subject: CN=89ec29e0-9c3e-4fc9-b805-f172eefca5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7a:71:fa:80:c3:fe:65:18:76:26:e6:a5:1b: 29:87:b8:da:60:6b:ae:ae:f3:41:11:2a:f9:51:95: 49:93:d0:7d:34:c0:05:37:4f:63:f8:3e:c4:d8:81: fa:ab:fb:fe:d7:74:7e:5e:4c:ed:b9:6f:06:d3:53: d5:b3:d4:38:e9:48:a9:b4:41:3b:21:fa:cb:69:ff: 73:17:06:da:af:d5:a5:c2:b6:2e:88:ba:02:89:15: f7:2b:ee:84:29:6f:c4:b7:25:94:7e:06:70:49:06: d7:e6:cd:3c:f1:42:8e:82:d0:80:9d:18:21:23:d9: 33:6a:c6:1f:c2:e9:e4:8b:1e:15:5f:5b:86:44:c3: 2f:f3:ef:85:d6:62:a6:fc:e7:be:f8:00:5d:7f:3e: e2:63:26:e3:48:0a:84:c3:02:48:74:bd:7d:8a:22: 25:01:9d:d7:ce:d2:7b:72:7b:03:12:0a:72:ff:23: 1a:22:69:92:0c:5e:b7:87:2a:5f:9c:d1:de:35:27: 56:e8:da:b3:96:2e:ab:4e:c2:78:10:39:bf:e3:26: f3:fc:80:ca:13:50:3f:bd:02:d5:56:40:b3:c6:e0: 4d:df:6b:f1:a1:cc:0d:27:db:cd:0b:48:e6:de:a7: d2:35:14:8d:90:d4:8d:3b:2a:5a:83:12:e0:74:14: 26:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E8:EC:9C:B5:54:80:46:A9:5B:28:C6:B5:32:C5:BC:7F:26:65:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec15a5a9-3318-3dd2-9e36-e6a359acf7ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:44:3b:62:b7:41:0f:8c:f6:9e:54:aa:bc:20:94:11:ad:7e: 3c:1c:61:a7:33:bd:0b:4c:9b:7b:6e:4f:e0:ae:4b:98:8b:ab: 99:9b:23:e9:cd:a2:a5:3e:72:c0:af:96:5b:fa:5e:c3:bb:69: 17:8c:5e:10:62:40:45:e9:07:a0:c5:70:f2:cb:92:32:48:83: a7:6e:98:f7:e9:5d:02:83:a1:ca:52:56:3a:d0:33:24:8d:4a: 16:35:39:cf:f1:db:86:21:ce:81:40:1f:61:1c:be:7b:47:26: 3e:64:c6:33:fa:36:c8:84:76:19:3c:64:cd:e1:82:0f:1f:ef: 6f:cb:ed:15:7b:f0:3c:d0:e0:60:e3:5f:e6:84:49:bb:99:e8: 1f:39:81:2b:37:4e:a8:40:62:a1:ba:5b:b4:61:92:8b:70:41: 3d:d2:78:5d:e9:90:2f:6a:48:98:ee:7b:b8:3a:78:ca:89:4c: e2:3b:c6:4e:da:ae:8e:6b:81:17:57:22:6b:8b:8b:8c:50:c4: c7:3a:26:c5:08:74:8f:f1:19:65:28:fc:41:f9:6a:98:15:e0: d5:ae:7f:72:76:56:65:96:07:18:6e:c2:23:7a:7c:8b:4a:81: fc:20:ed:cb:3c:e1:b5:d1:59:da:d0:b8:aa:ab:5c:91:25:ad: 07:3f:ef:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzNDKnXpGaRU0wpQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk ODllYzI5ZTAtOWMzZS00ZmM5LWI4MDUtZjE3MmVlZmNhNWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHpx+oDD/mUYdibmpRsph7jaYGuurvNBESr5 UZVJk9B9NMAFN09j+D7E2IH6q/v+13R+XkztuW8G01PVs9Q46UiptEE7IfrLaf9z Fwbar9WlwrYuiLoCiRX3K+6EKW/EtyWUfgZwSQbX5s088UKOgtCAnRghI9kzasYf wunkix4VX1uGRMMv8++F1mKm/Oe++ABdfz7iYybjSAqEwwJIdL19iiIlAZ3XztJ7 cnsDEgpy/yMaImmSDF63hypfnNHeNSdW6Nqzli6rTsJ4EDm/4ybz/IDKE1A/vQLV VkCzxuBN32vxocwNJ9vNC0jm3qfSNRSNkNSNOypagxLgdBQmfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfo7Jy1VIBGqVsoxrUyxbx/JmWrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWMxNWE1YTktMzMxOC0z ZGQyLTllMzYtZTZhMzU5YWNmN2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNEO2K3QQ+M9p5UqrwglBGtfjwcYaczvQtMm3tuT+CuS5iLq5mbI+nN oqU+csCvllv6XsO7aReMXhBiQEXpB6DFcPLLkjJIg6dumPfpXQKDocpSVjrQMySN ShY1Oc/x24YhzoFAH2EcvntHJj5kxjP6NsiEdhk8ZM3hgg8f72/L7RV78DzQ4GDj X+aESbuZ6B85gSs3TqhAYqG6W7RhkotwQT3SeF3pkC9qSJjue7g6eMqJTOI7xk7a ro5rgRdXImuLi4xQxMc6JsUIdI/xGWUo/EH5apgV4NWuf3J2VmWWBxhuwiN6fItK gfwg7cs84bXRWdrQuKqrXJElrQc/7yE= -----END CERTIFICATE-----Generated at Mon Mar 2 16:29:05 2026 by rpki-client