$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f56bf73f-550c-3213-b02a-ab4cbaae84c4.roa File: f56bf73f-550c-3213-b02a-ab4cbaae84c4.roa (raw, json) Hash identifier: 4aNLRcFM+rMSLp1XwqbA7rJNZa0xjpCMmXBVLR9upAk= Subject key identifier: 9A:25:4B:D5:2C:B7:83:9B:66:28:49:BD:6B:E4:48:E9:7C:9D:66:A3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CB6B724F8748BEE2CC4739340 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f56bf73f-550c-3213-b02a-ab4cbaae84c4.roa Signing time: Sun 01 Feb 2026 02:00:32 +0000 ROA not before: Sun 01 Feb 2026 02:00:32 +0000 ROA not after: Sat 02 May 2026 01:00:32 +0000 asID: 8069 IP address blocks: 20.33.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b6:b7:24:f8:74:8b:ee:2c:c4:73:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 1 02:00:32 2026 GMT Not After : May 2 01:00:32 2026 GMT Subject: CN=647fbad2-64bf-4545-a1a5-10e3deceaeb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ca:25:87:3d:1e:b8:c0:c9:84:a1:9e:45:a5: 34:f4:30:ed:b2:32:31:c3:ad:21:17:f8:97:23:7c: 77:32:04:cb:e8:8e:52:1b:13:42:f8:4e:fa:b9:82: 03:13:bd:c4:4f:7a:23:a1:38:ea:92:f0:37:65:13: df:86:c6:aa:2d:cf:8e:16:45:ce:e8:cc:3f:fa:9b: c1:a6:78:cf:31:8e:a2:6f:e0:7a:d6:de:7a:4b:72: f1:19:71:d6:36:4b:78:7d:dc:49:bb:a3:fc:3d:e7: 56:be:09:76:9f:6f:77:ef:b7:3c:78:97:d1:c5:e9: e9:cd:bb:1c:25:97:3e:84:43:a3:ec:10:1a:4f:33: 34:c6:a0:29:0f:6c:f8:a0:ba:de:fe:f6:c0:87:f0: 70:d6:3b:0d:3a:2e:77:fd:75:a9:60:56:88:8c:01: 16:09:1a:04:6a:7d:d7:41:f0:99:aa:eb:c0:74:83: 3f:6d:01:63:1f:39:c3:c7:94:b2:cf:82:16:ff:21: d3:5c:9f:37:30:b2:1e:c4:ae:85:7e:0f:cc:bd:e5: d8:cd:3e:ac:cc:aa:01:72:4b:3b:a5:37:3d:45:5d: db:8d:31:e8:db:67:35:70:9b:37:d3:87:19:5a:e5: 77:02:9a:b0:7c:0a:dc:70:31:38:71:8f:4b:c2:f4: 3b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:25:4B:D5:2C:B7:83:9B:66:28:49:BD:6B:E4:48:E9:7C:9D:66:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f56bf73f-550c-3213-b02a-ab4cbaae84c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:81:24:8c:be:21:80:5a:f7:1b:78:8d:dc:1a:7d:87:23:85: 3a:02:ce:c6:8b:1d:d7:a3:de:6f:b8:b7:7c:ee:11:51:6e:bb: 1d:61:38:3f:ca:6a:09:e4:98:57:38:f6:84:60:4f:b8:c8:c2: 6b:d0:20:69:79:90:44:11:ae:5f:63:7a:e5:7f:1c:2f:95:93: 56:22:e3:c5:72:92:2c:c5:8a:a4:5c:c8:2d:14:ea:30:62:71: 81:02:6b:f8:63:ee:cc:c3:92:70:68:a4:81:31:87:a4:cc:67: a4:8e:81:5a:e1:74:42:1d:8b:0d:d0:6d:12:59:e6:d7:4d:be: 6d:8e:97:4a:5e:1f:f0:76:a2:60:02:3e:0c:d4:f7:8a:48:c7: 92:57:5f:84:b8:50:e3:12:75:6a:bd:fe:7a:96:8a:04:f8:54: 42:63:52:05:73:fe:bd:76:b1:b6:0c:a4:3d:4d:9c:d1:61:37: 64:77:a3:fb:a5:3b:ee:24:c6:8d:7f:1f:dd:02:be:f8:ec:61: 83:ce:0e:2d:55:6a:f2:5d:6c:e2:a4:a2:72:a7:ba:3f:87:3a: 7e:58:9d:8d:2f:2f:59:85:be:45:25:8f:86:cb:b1:58:95:3c: 92:a5:9a:2d:51:b3:c4:c6:35:ec:88:3d:25:bb:de:3c:3b:80: 93:0e:b5:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy2tyT4dIvuLMRzk0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk NjQ3ZmJhZDItNjRiZi00NTQ1LWExYTUtMTBlM2RlY2VhZWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosolhz0euMDJhKGeRaU09DDtsjIxw60hF/iX I3x3MgTL6I5SGxNC+E76uYIDE73ET3ojoTjqkvA3ZRPfhsaqLc+OFkXO6Mw/+pvB pnjPMY6ib+B61t56S3LxGXHWNkt4fdxJu6P8PedWvgl2n29377c8eJfRxenpzbsc JZc+hEOj7BAaTzM0xqApD2z4oLre/vbAh/Bw1jsNOi53/XWpYFaIjAEWCRoEan3X QfCZquvAdIM/bQFjHznDx5Syz4IW/yHTXJ83MLIexK6Ffg/MveXYzT6szKoBcks7 pTc9RV3bjTHo22c1cJs304cZWuV3ApqwfArccDE4cY9LwvQ7qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJolS9Ust4ObZihJvWvkSOl8nWajMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjU2YmY3M2YtNTUwYy0z MjEzLWIwMmEtYWI0Y2JhYWU4NGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCF0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeBJIy+IYBa9xt4jdwafYcjhToCzsaLHdej3m+4t3zuEVFuux1hOD/K agnkmFc49oRgT7jIwmvQIGl5kEQRrl9jeuV/HC+Vk1Yi48VykizFiqRcyC0U6jBi cYECa/hj7szDknBopIExh6TMZ6SOgVrhdEIdiw3QbRJZ5tdNvm2Ol0peH/B2omAC PgzU94pIx5JXX4S4UOMSdWq9/nqWigT4VEJjUgVz/r12sbYMpD1NnNFhN2R3o/ul O+4kxo1/H90CvvjsYYPODi1VavJdbOKkonKnuj+HOn5YnY0vL1mFvkUlj4bLsViV PJKlmi1Rs8TGNeyIPSW73jw7gJMOtf0= -----END CERTIFICATE-----Generated at Mon Mar 2 21:55:29 2026 by rpki-client