$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec1a8906-033b-3989-b1b1-0dfeb0948d2c.roa File: ec1a8906-033b-3989-b1b1-0dfeb0948d2c.roa (raw, json) Hash identifier: 1htdp0ZEapLCtNjTq6L1QIorylh2hDCzbFLJ+FAsDsg= Subject key identifier: C7:ED:04:16:9B:50:DD:74:71:AA:50:8D:B5:6C:43:B8:E1:E7:B3:AF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CCD0CAADE9230CD46EA44B400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec1a8906-033b-3989-b1b1-0dfeb0948d2c.roa Signing time: Mon 09 Feb 2026 02:00:31 +0000 ROA not before: Mon 09 Feb 2026 02:00:31 +0000 ROA not after: Sun 10 May 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.33.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cd:0c:aa:de:92:30:cd:46:ea:44:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 9 02:00:31 2026 GMT Not After : May 10 01:00:31 2026 GMT Subject: CN=b245ce85-a95d-4841-9f0d-515ce6723fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f2:97:de:61:70:52:b4:6c:b9:90:fa:34:44: b3:4b:31:d4:3d:82:7e:47:95:a8:87:02:3e:be:27: 97:c2:d5:81:96:54:36:27:b3:f2:8f:d1:5d:21:c0: 33:4a:c2:95:1b:02:b4:57:12:4d:b9:6a:c4:dd:18: 18:75:65:51:b9:c1:49:49:8a:60:4d:c8:ec:b6:7f: 4b:af:43:61:9e:dc:fb:69:7c:d8:66:7a:28:5b:ac: 71:8a:07:37:61:66:5a:33:b0:6b:fd:9c:bd:05:b1: 15:13:58:4c:54:b2:d0:72:06:1d:b3:87:0d:94:c8: 7b:4a:6c:aa:6f:5b:e4:c0:8f:6d:1f:90:2c:49:d5: ff:74:97:eb:10:4b:eb:d1:5b:2c:b1:27:f4:37:58: 2d:4a:b1:15:b2:5d:38:79:16:95:8e:4c:e2:6a:48: a1:ad:c3:c2:4e:2e:2e:a2:98:dd:2d:a4:ae:69:06: 20:94:ce:67:7f:f9:cd:45:f1:f6:45:34:d7:c8:e0: 2c:e6:d4:26:7e:57:c0:09:c2:15:9c:bb:af:dc:b4: f1:99:65:bd:89:e3:b1:81:c0:53:a7:d9:d9:19:71: 2b:f9:a0:ad:9d:b5:c7:21:2c:62:f5:e3:a5:d8:9f: f7:2c:68:9f:9f:c3:b1:1f:2c:a3:df:ca:fe:a8:a6: bc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:ED:04:16:9B:50:DD:74:71:AA:50:8D:B5:6C:43:B8:E1:E7:B3:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec1a8906-033b-3989-b1b1-0dfeb0948d2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:1c:98:8e:e8:7a:4e:e7:0c:04:62:0c:7a:fd:a6:6b:b4:85: 51:c8:d5:b6:78:61:e8:e5:cc:71:8a:d1:c5:aa:d6:dd:1c:f8: bf:0b:f9:8e:15:af:6a:d8:c5:2d:65:d6:06:e0:e5:f4:15:55: 58:d8:6e:7c:fd:13:e1:26:55:7c:9d:8d:d1:7a:f6:e6:3e:71: 00:55:22:67:75:5a:b5:ce:dc:53:46:ba:0b:ed:84:0a:a6:82: 77:f8:84:6d:37:a1:cd:94:5a:59:67:28:be:83:ef:7b:40:39: 8f:5d:bf:ef:62:57:08:ed:59:c4:7d:04:8d:f6:b8:45:bd:cd: fd:89:b9:1c:69:6c:d5:68:8d:bc:3f:06:14:e4:c3:ab:82:aa: 5e:c4:ba:3f:5a:9c:99:ed:2d:15:d2:3a:d0:5e:cc:e6:3e:4f: 96:43:17:24:a1:43:0d:94:9c:b3:13:1f:42:02:a7:38:69:ef: 89:02:ea:d3:3e:0f:d6:20:fc:aa:c5:b8:b4:24:51:6a:9d:bf: cc:f9:6b:58:29:85:ce:18:eb:ba:26:84:df:a9:4b:20:f9:a8: 0c:bb:e5:5b:07:bb:51:12:3d:53:c5:36:5c:d5:18:59:de:19: af:39:0c:06:56:cd:34:e0:63:6d:35:aa:f6:89:26:54:89:97: 7e:50:a0:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzNDKrekjDNRupEtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk YjI0NWNlODUtYTk1ZC00ODQxLTlmMGQtNTE1Y2U2NzIzZmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/KX3mFwUrRsuZD6NESzSzHUPYJ+R5WohwI+ vieXwtWBllQ2J7Pyj9FdIcAzSsKVGwK0VxJNuWrE3RgYdWVRucFJSYpgTcjstn9L r0Nhntz7aXzYZnooW6xxigc3YWZaM7Br/Zy9BbEVE1hMVLLQcgYds4cNlMh7Smyq b1vkwI9tH5AsSdX/dJfrEEvr0VsssSf0N1gtSrEVsl04eRaVjkziakihrcPCTi4u opjdLaSuaQYglM5nf/nNRfH2RTTXyOAs5tQmflfACcIVnLuv3LTxmWW9ieOxgcBT p9nZGXEr+aCtnbXHISxi9eOl2J/3LGifn8OxHyyj38r+qKa8KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMftBBabUN10capQjbVsQ7jh57OvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWMxYTg5MDYtMDMzYi0z OTg5LWIxYjEtMGRmZWIwOTQ4ZDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQcmI7oek7nDARiDHr9pmu0hVHI1bZ4YejlzHGK0cWq1t0c+L8L+Y4V r2rYxS1l1gbg5fQVVVjYbnz9E+EmVXydjdF69uY+cQBVImd1WrXO3FNGugvthAqm gnf4hG03oc2UWllnKL6D73tAOY9dv+9iVwjtWcR9BI32uEW9zf2JuRxpbNVojbw/ BhTkw6uCql7Euj9anJntLRXSOtBezOY+T5ZDFyShQw2UnLMTH0ICpzhp74kC6tM+ D9Yg/KrFuLQkUWqdv8z5a1gphc4Y67omhN+pSyD5qAy75VsHu1ESPVPFNlzVGFne Ga85DAZWzTTgY201qvaJJlSJl35QoFM= -----END CERTIFICATE-----Generated at Mon Mar 2 16:30:01 2026 by rpki-client