$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f45acc02-de81-35fc-8583-59e61118770c.roa File: f45acc02-de81-35fc-8583-59e61118770c.roa (raw, json) Hash identifier: YrNIyAazPBJ/4Jm86WFsikNyCTSrxgMgyh46BNgK9so= Subject key identifier: 2B:58:C0:27:3E:E9:F6:EC:06:8A:9E:19:75:7C:14:F8:14:05:55:92 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CCD0CAAC73A27078D758A7000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f45acc02-de81-35fc-8583-59e61118770c.roa Signing time: Mon 09 Feb 2026 02:00:31 +0000 ROA not before: Mon 09 Feb 2026 02:00:31 +0000 ROA not after: Sun 10 May 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.33.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cd:0c:aa:c7:3a:27:07:8d:75:8a:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 9 02:00:31 2026 GMT Not After : May 10 01:00:31 2026 GMT Subject: CN=c6166a0e-67b9-4802-b332-0d0cac8b2407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3d:27:b1:81:2d:7a:33:36:bc:da:fa:82:4b: 5a:22:24:69:06:7d:66:82:8b:5e:18:f9:01:84:51: df:03:4b:de:8c:3e:2c:d5:01:95:04:19:7c:48:86: 40:dd:37:bf:5c:d6:b4:5e:fc:c3:c4:22:ab:f4:f6: ca:7a:42:08:61:1a:cb:f6:ac:6c:d9:d4:11:fa:85: 29:a3:47:2e:23:9f:26:1e:79:4d:da:21:e2:73:4b: f6:06:05:f6:f3:b2:a4:13:6e:07:1a:af:b9:51:32: c4:a7:6d:a1:6f:53:f8:d6:9a:1f:ee:d9:1c:4a:e3: c3:19:b8:6b:97:87:ad:20:c7:d7:9b:98:c6:57:6a: 02:60:16:5d:9d:72:98:34:ed:c5:a3:5c:70:29:80: 28:f9:1b:d9:aa:a6:77:7e:7f:92:e5:43:f6:f4:b4: ae:e1:3c:d3:99:38:48:dd:24:3b:eb:55:c3:02:e5: b3:72:3b:4a:66:fc:be:e0:04:3f:a3:f4:0c:4d:2d: e3:da:04:96:f9:08:c2:a3:c6:ac:59:a8:f5:8c:ec: 31:67:c8:10:00:42:0a:6e:d6:0a:4c:22:f5:d3:09: 04:94:f1:b6:fd:d1:bf:c0:34:ca:de:58:15:c6:c0: 8d:33:9b:7d:17:03:0e:1a:50:6d:5a:04:47:c7:04: 13:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:58:C0:27:3E:E9:F6:EC:06:8A:9E:19:75:7C:14:F8:14:05:55:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f45acc02-de81-35fc-8583-59e61118770c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:6f:b1:9c:8d:ae:e8:bc:96:80:52:eb:f0:a5:2e:82:28:16: dc:4b:aa:cc:cc:2e:84:34:a6:e5:2c:0c:69:1f:25:cb:55:8e: 82:dc:00:23:45:75:dc:83:9b:2f:00:6b:f3:f1:95:66:3c:1a: f9:38:65:76:74:8b:f1:32:37:74:d4:c4:cc:d5:a8:a6:57:07: 47:51:27:51:71:c1:7a:dc:76:a3:0f:84:d9:d3:07:b4:4c:e7: 5f:fa:52:a8:76:26:df:ea:b0:47:ec:d2:7e:62:0a:11:e9:90: 4f:59:13:eb:a4:83:5a:77:84:8e:84:05:3a:f0:d6:23:20:c7: 6f:5d:a7:80:64:12:bf:7e:51:04:3c:d8:36:bc:09:c5:83:7a: 4c:4f:f8:9d:a6:04:3f:e9:9f:8d:b5:36:70:2c:07:37:10:a0: 41:14:a4:25:c4:eb:9a:9b:7c:1e:5a:eb:81:77:8f:3f:7f:26: f6:3b:05:82:e2:de:48:06:90:0d:3b:3b:33:71:cf:83:fb:28: 85:d4:94:4c:a5:d9:8c:97:13:91:e0:ff:a8:c8:a0:ca:5d:bc: 27:24:d8:7c:33:71:da:ed:dc:e6:2c:58:9d:8d:11:53:be:4b: 03:1d:c4:9a:e5:a0:95:d8:40:6f:c1:b6:c1:73:61:81:e4:e7: 04:a5:4f:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzNDKrHOicHjXWKcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk YzYxNjZhMGUtNjdiOS00ODAyLWIzMzItMGQwY2FjOGIyNDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT0nsYEtejM2vNr6gktaIiRpBn1mgoteGPkB hFHfA0vejD4s1QGVBBl8SIZA3Te/XNa0XvzDxCKr9PbKekIIYRrL9qxs2dQR+oUp o0cuI58mHnlN2iHic0v2BgX287KkE24HGq+5UTLEp22hb1P41pof7tkcSuPDGbhr l4etIMfXm5jGV2oCYBZdnXKYNO3Fo1xwKYAo+RvZqqZ3fn+S5UP29LSu4TzTmThI 3SQ761XDAuWzcjtKZvy+4AQ/o/QMTS3j2gSW+QjCo8asWaj1jOwxZ8gQAEIKbtYK TCL10wkElPG2/dG/wDTK3lgVxsCNM5t9FwMOGlBtWgRHxwQTHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtYwCc+6fbsBoqeGXV8FPgUBVWSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjQ1YWNjMDItZGU4MS0z NWZjLTg1ODMtNTllNjExMTg3NzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRvsZyNrui8loBS6/ClLoIoFtxLqszMLoQ0puUsDGkfJctVjoLcACNF ddyDmy8Aa/PxlWY8Gvk4ZXZ0i/EyN3TUxMzVqKZXB0dRJ1FxwXrcdqMPhNnTB7RM 51/6Uqh2Jt/qsEfs0n5iChHpkE9ZE+ukg1p3hI6EBTrw1iMgx29dp4BkEr9+UQQ8 2Da8CcWDekxP+J2mBD/pn421NnAsBzcQoEEUpCXE65qbfB5a64F3jz9/JvY7BYLi 3kgGkA07OzNxz4P7KIXUlEyl2YyXE5Hg/6jIoMpdvCck2Hwzcdrt3OYsWJ2NEVO+ SwMdxJrloJXYQG/BtsFzYYHk5wSlT30= -----END CERTIFICATE-----Generated at Tue Mar 3 02:43:12 2026 by rpki-client