$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ede11131-09a5-3938-9e03-0196812fb57b.roa File: ede11131-09a5-3938-9e03-0196812fb57b.roa (raw, json) Hash identifier: KVbDtlQIlF4Mgwq+EwWgfZh9F1miAH0BVvJTvi7MwjE= Subject key identifier: 5A:AE:A9:08:A7:3E:3E:99:7F:8E:B3:42:34:BB:64:4C:70:59:14:A2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CFC8236FB9A43E69DADBCF370 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ede11131-09a5-3938-9e03-0196812fb57b.roa Signing time: Thu 26 Feb 2026 02:00:32 +0000 ROA not before: Thu 26 Feb 2026 02:00:32 +0000 ROA not after: Wed 27 May 2026 01:00:32 +0000 asID: 8069 IP address blocks: 20.33.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fc:82:36:fb:9a:43:e6:9d:ad:bc:f3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 26 02:00:32 2026 GMT Not After : May 27 01:00:32 2026 GMT Subject: CN=cae3a1fc-c681-4cb2-ae11-41ae89bec5b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d3:35:c3:69:b8:e0:dc:08:db:f3:58:e0:11: ec:fe:07:e1:83:1d:c5:74:4f:c7:65:65:0c:cd:5d: dc:3b:2e:28:bc:1f:69:9d:18:bf:9c:88:48:f4:77: e3:04:d1:6c:6f:83:3f:d8:4d:6f:8f:61:50:cd:11: 2c:81:c2:d5:e6:41:73:da:e3:5b:e8:6e:98:6b:ea: a7:e7:76:55:43:30:5f:ea:bc:1d:d7:5e:ff:74:3f: 68:2b:24:bc:9e:5c:06:ae:fb:c3:f8:9c:16:1d:ff: a9:9a:e1:c2:25:b8:e3:49:09:f7:e8:47:c6:16:09: 6a:7a:b8:06:f4:d8:01:8d:a8:8c:3a:89:0a:dc:cf: dd:88:3a:d7:22:60:0f:d4:94:46:86:22:07:19:82: f5:34:71:41:9b:65:46:42:d5:f2:78:04:b2:8a:4d: c1:92:b4:e4:8e:1f:36:5a:dc:c5:65:37:f8:ad:32: 97:41:27:46:ee:79:2c:32:23:c5:45:5f:60:cb:01: f9:9e:fa:68:8d:35:a1:fc:70:45:96:38:60:d1:2e: a8:cf:aa:30:a2:27:e8:52:47:6b:c6:d4:8e:43:71: 7b:61:82:f3:6c:26:d0:70:a1:c5:94:d0:bf:30:f3: 6a:7a:85:8b:28:eb:4b:9d:0f:b4:6b:e7:92:02:70: ed:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AE:A9:08:A7:3E:3E:99:7F:8E:B3:42:34:BB:64:4C:70:59:14:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ede11131-09a5-3938-9e03-0196812fb57b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:13:fa:90:cd:a4:1a:fb:c6:1b:55:ee:0e:57:d7:8f:79:a0: 32:d5:f3:9a:67:a7:80:0e:53:ea:75:d8:c0:d3:d4:fe:20:e8: 8f:88:01:ef:06:00:1a:b0:b9:47:0c:b8:ce:73:55:78:85:13: 81:0e:2c:54:23:66:56:da:14:07:2c:38:05:99:13:e6:76:42: 8f:c7:a5:09:12:97:b0:2b:de:9a:f8:e2:48:fe:82:56:f2:6a: 39:a0:6d:0a:9f:37:5c:3e:b6:80:6c:62:8b:97:4f:d8:23:02: ec:61:ad:5d:8a:ab:d8:cc:db:9b:65:b1:0c:80:7c:53:d3:bf: cb:a8:e6:f7:db:c8:45:59:6f:04:b6:5c:54:31:4b:c8:de:20: 8b:53:ca:41:05:8c:8a:d1:fc:53:9e:66:69:95:31:ea:f3:07: c9:f5:bf:a4:43:19:db:49:4f:ce:86:92:72:73:df:b6:53:31: 23:f8:1d:18:ad:cb:92:3a:52:f8:fa:8d:0c:81:c5:ad:04:ff: 8a:12:bf:28:3e:d5:55:f9:e4:ec:e9:e5:de:19:2e:75:6e:a4: 6b:ad:2d:5a:7f:62:5a:d0:f8:51:2e:0e:48:c9:25:bf:7f:01: ba:bc:4b:81:3c:27:95:b5:dc:08:0f:52:6c:62:e0:ea:32:22: a0:2a:f7:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz8gjb7mkPmna2883AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIyNjAyMDAzMloXDTI2MDUyNzAxMDAzMlowLzEtMCsGA1UEAxMk Y2FlM2ExZmMtYzY4MS00Y2IyLWFlMTEtNDFhZTg5YmVjNWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdM1w2m44NwI2/NY4BHs/gfhgx3FdE/HZWUM zV3cOy4ovB9pnRi/nIhI9HfjBNFsb4M/2E1vj2FQzREsgcLV5kFz2uNb6G6Ya+qn 53ZVQzBf6rwd117/dD9oKyS8nlwGrvvD+JwWHf+pmuHCJbjjSQn36EfGFglqergG 9NgBjaiMOokK3M/diDrXImAP1JRGhiIHGYL1NHFBm2VGQtXyeASyik3BkrTkjh82 WtzFZTf4rTKXQSdG7nksMiPFRV9gywH5nvpojTWh/HBFljhg0S6oz6owoifoUkdr xtSOQ3F7YYLzbCbQcKHFlNC/MPNqeoWLKOtLnQ+0a+eSAnDtRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFquqQinPj6Zf46zQjS7ZExwWRSiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWRlMTExMzEtMDlhNS0z OTM4LTllMDMtMDE5NjgxMmZiNTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIT+pDNpBr7xhtV7g5X1495oDLV85pnp4AOU+p12MDT1P4g6I+IAe8G ABqwuUcMuM5zVXiFE4EOLFQjZlbaFAcsOAWZE+Z2Qo/HpQkSl7Ar3pr44kj+glby ajmgbQqfN1w+toBsYouXT9gjAuxhrV2Kq9jM25tlsQyAfFPTv8uo5vfbyEVZbwS2 XFQxS8jeIItTykEFjIrR/FOeZmmVMerzB8n1v6RDGdtJT86GknJz37ZTMSP4HRit y5I6Uvj6jQyBxa0E/4oSvyg+1VX55Ozp5d4ZLnVupGutLVp/YlrQ+FEuDkjJJb9/ Abq8S4E8J5W13AgPUmxi4OoyIqAq95Q= -----END CERTIFICATE-----Generated at Mon Mar 2 16:50:06 2026 by rpki-client