$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eed63971-c454-3755-9b04-dc093f311036.roa File: eed63971-c454-3755-9b04-dc093f311036.roa (raw, json) Hash identifier: o34mmciebsOL5NZpqDRFdCQ92CKW8eFjBtsM883MFyU= Subject key identifier: AC:4F:AD:E0:7C:CF:23:AC:AD:DB:65:EF:E9:79:37:D1:11:00:B5:ED Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CB28747B7BC308BE26B6A6100 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eed63971-c454-3755-9b04-dc093f311036.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.33.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:47:b7:bc:30:8b:e2:6b:6a:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=7efc432b-30af-427b-9344-376f7022961a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:22:3d:19:48:59:2d:1e:bd:d7:19:4c:a6:82: d3:a9:8c:8f:77:82:a9:52:f2:7b:0f:1a:08:33:96: fb:66:ea:fb:0f:2d:35:2b:54:53:7f:9e:a4:80:bc: a6:76:e2:ef:b4:91:7b:75:0e:f3:19:ac:44:5c:8b: 0c:9c:fd:e9:48:12:d2:df:c4:66:a5:a4:cf:6c:1b: 0b:70:16:6f:4b:b3:da:fb:10:68:39:7e:91:9c:02: 88:9f:53:91:15:4a:ec:0b:6a:e1:0a:10:3a:30:36: dd:50:c5:98:81:b6:e2:61:ab:ff:bb:ad:af:4e:c4: 55:b0:a4:5c:7f:c8:b6:53:41:78:67:aa:cf:37:47: ee:30:c4:66:b0:38:7c:2f:14:d0:65:63:dd:50:70: 9c:60:e9:5e:79:24:55:91:8f:37:56:e3:f2:5e:28: 66:5b:e1:d5:3a:0f:7c:38:ce:da:e2:5a:db:1c:c5: c9:d7:eb:e0:e8:46:9c:04:68:39:19:39:29:be:41: 04:c5:6f:79:fd:a7:e6:db:81:0a:be:c2:0f:46:d1: cf:a3:9d:21:18:35:e4:0c:48:5c:4b:7e:7f:62:e6: 5d:35:f0:2c:42:23:41:b5:ea:f7:34:fa:d6:51:c7: 31:8f:59:9d:83:6e:16:c4:c4:3b:95:5c:f4:a7:61: 35:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4F:AD:E0:7C:CF:23:AC:AD:DB:65:EF:E9:79:37:D1:11:00:B5:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eed63971-c454-3755-9b04-dc093f311036.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:4f:ff:8e:a9:8f:f3:d6:fe:09:76:d2:91:54:44:70:f2:29: b4:7d:1f:ff:bc:43:e6:40:33:ab:93:c4:fd:b5:0f:d7:c6:23: c3:b0:d4:56:0a:0d:03:c6:2c:e0:c3:9a:22:3a:ad:7d:ab:b4: 5e:27:4a:13:b3:be:27:d3:70:d6:65:ab:9b:d2:d7:8d:12:60: 44:d0:ba:81:c3:cc:f2:2d:f5:e2:6a:37:c4:d5:c3:13:1d:e4: 56:43:0d:a4:e2:40:a3:88:d5:17:40:24:70:6d:aa:6c:80:ff: b4:21:ee:14:45:0c:b1:43:a0:20:23:ca:27:0e:d9:a4:c7:46: 09:ed:13:6e:21:b3:c1:aa:ec:c6:a5:3e:e1:a1:3f:fd:19:dd: 9c:9b:f0:22:2f:13:81:43:78:dc:0e:be:ef:82:e0:71:b6:43: 89:98:dc:f7:a8:c1:ac:5f:59:83:1d:73:6a:74:b2:57:0a:34: a7:e5:66:a6:cd:b3:0b:b4:c0:61:7a:9e:92:6c:47:49:6c:c4: 5c:de:32:9e:1b:99:db:d5:28:13:b0:eb:bb:68:b6:69:e0:0c: 28:e0:e4:d8:b5:3b:8c:67:09:7c:33:e3:3f:fe:c5:9d:ea:03: 27:63:dc:e8:8c:50:c9:84:ec:af:a7:bb:3d:10:a9:fe:8d:11: c4:a1:59:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyh0e3vDCL4mtqYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk N2VmYzQzMmItMzBhZi00MjdiLTkzNDQtMzc2ZjcwMjI5NjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyI9GUhZLR691xlMpoLTqYyPd4KpUvJ7DxoI M5b7Zur7Dy01K1RTf56kgLymduLvtJF7dQ7zGaxEXIsMnP3pSBLS38RmpaTPbBsL cBZvS7Pa+xBoOX6RnAKIn1ORFUrsC2rhChA6MDbdUMWYgbbiYav/u62vTsRVsKRc f8i2U0F4Z6rPN0fuMMRmsDh8LxTQZWPdUHCcYOleeSRVkY83VuPyXihmW+HVOg98 OM7a4lrbHMXJ1+vg6EacBGg5GTkpvkEExW95/afm24EKvsIPRtHPo50hGDXkDEhc S35/YuZdNfAsQiNBter3NPrWUccxj1mdg24WxMQ7lVz0p2E1lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxPreB8zyOsrdtl7+l5N9ERALXtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWVkNjM5NzEtYzQ1NC0z NzU1LTliMDQtZGMwOTNmMzExMDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCErMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJP/46pj/PW/gl20pFURHDyKbR9H/+8Q+ZAM6uTxP21D9fGI8Ow1FYK DQPGLODDmiI6rX2rtF4nShOzvifTcNZlq5vS140SYETQuoHDzPIt9eJqN8TVwxMd 5FZDDaTiQKOI1RdAJHBtqmyA/7Qh7hRFDLFDoCAjyicO2aTHRgntE24hs8Gq7Mal PuGhP/0Z3Zyb8CIvE4FDeNwOvu+C4HG2Q4mY3PeowaxfWYMdc2p0slcKNKflZqbN swu0wGF6npJsR0lsxFzeMp4bmdvVKBOw67totmngDCjg5Ni1O4xnCXwz4z/+xZ3q Aydj3OiMUMmE7K+nuz0Qqf6NEcShWUk= -----END CERTIFICATE-----Generated at Mon Mar 2 20:17:59 2026 by rpki-client