$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e569e8-37ad-3469-895e-315f10771e8c.roa File: f5e569e8-37ad-3469-895e-315f10771e8c.roa (raw, json) Hash identifier: tl2EU9Y43rrVtYGfz02vUnxkZDxIFFZXzhf/IHnwf6k= Subject key identifier: 74:64:2B:9A:55:9E:B2:F0:42:16:68:88:AE:19:36:BB:A9:11:C2:05 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D0912701D3443ED1705DBD180 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e569e8-37ad-3469-895e-315f10771e8c.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 8069 IP address blocks: 20.33.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:70:1d:34:43:ed:17:05:db:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=bfd036e8-121f-4924-829a-38b6f3ff7c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b2:8b:e4:b8:73:28:5b:7c:60:2c:90:09:be: 8a:c2:cb:94:a8:e8:25:ee:24:f4:b1:67:56:10:fa: 5a:8e:de:fa:21:e3:1a:49:6e:49:1d:6a:d7:c2:34: 3e:1f:58:60:82:74:95:e1:ea:b9:75:e4:f2:c6:aa: 46:1d:d3:25:e4:af:72:f7:79:64:80:6f:56:80:f4: cc:a8:20:74:41:29:d7:4a:a8:f3:87:16:81:5c:cf: b9:89:92:b7:41:e2:24:24:85:96:6f:f3:da:6b:2b: b7:b8:36:34:b4:d5:6e:44:85:f9:e1:7d:6c:45:a7: 91:53:15:c2:ba:4f:6e:c4:ff:27:1c:30:a6:82:10: 62:19:27:1b:88:9b:59:f2:45:3c:35:75:ed:f3:66: 48:04:01:1f:c9:36:8a:d3:1e:b6:ac:63:5d:ab:63: 01:fa:98:73:29:48:24:d9:81:6a:6a:3f:75:2c:78: f6:23:d3:e4:ea:8f:66:17:12:12:ae:ce:bf:66:55: 15:fb:18:f9:82:39:00:1e:85:ef:29:39:da:eb:04: 78:27:fc:89:03:40:70:bf:58:97:95:07:ca:12:fe: 48:7a:35:41:eb:55:05:44:6d:99:af:f0:de:03:75: ba:35:7c:03:14:aa:94:9f:e4:bf:c7:3d:3c:77:7a: c8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:64:2B:9A:55:9E:B2:F0:42:16:68:88:AE:19:36:BB:A9:11:C2:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e569e8-37ad-3469-895e-315f10771e8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:c3:d4:0c:be:d6:c7:2c:83:a8:f5:cd:25:84:97:c5:34:f2: c0:e3:e5:f8:8d:e5:68:09:60:9c:b7:36:75:b4:98:2e:93:c5: 67:9b:22:3d:f5:bf:5e:37:2e:ad:41:c6:d2:25:87:6a:7b:4e: a9:e2:8c:1a:01:5d:cb:14:12:f1:69:55:fe:76:41:22:e0:e9: cd:75:de:90:91:c5:6f:f2:bf:cd:77:cb:9d:da:6a:f8:53:bf: f1:7c:1c:73:4c:80:fb:b5:b8:b1:23:a0:1a:09:77:12:d7:94: 25:1f:a5:bc:8c:7f:12:ce:06:01:92:72:83:39:db:e6:2d:37: b9:7e:e8:b2:29:7a:b6:40:db:2e:67:86:3d:a5:94:9d:d5:28: 29:e6:8c:c2:8e:a8:61:a3:8c:3d:47:4c:32:68:29:72:1b:ec: 86:0a:fc:76:cc:4a:f2:59:e2:0c:8d:02:7c:cd:af:32:66:20: b2:ed:6f:0b:fe:50:dd:4e:de:21:8e:77:53:63:10:0b:04:7b: da:9d:ba:d5:4e:c1:76:31:5b:f3:6c:63:44:b0:d4:9e:60:70: b3:f3:a7:6f:1b:c3:52:ab:c5:e8:b0:20:7a:cd:ad:f1:06:be: 4a:fe:37:ed:b2:ef:03:f4:1c:40:83:8e:40:f4:c9:4d:b3:81: 19:a2:95:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEnAdNEPtFwXb0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk YmZkMDM2ZTgtMTIxZi00OTI0LTgyOWEtMzhiNmYzZmY3YzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LKL5LhzKFt8YCyQCb6KwsuUqOgl7iT0sWdW EPpajt76IeMaSW5JHWrXwjQ+H1hggnSV4eq5deTyxqpGHdMl5K9y93lkgG9WgPTM qCB0QSnXSqjzhxaBXM+5iZK3QeIkJIWWb/Paayu3uDY0tNVuRIX54X1sRaeRUxXC uk9uxP8nHDCmghBiGScbiJtZ8kU8NXXt82ZIBAEfyTaK0x62rGNdq2MB+phzKUgk 2YFqaj91LHj2I9Pk6o9mFxISrs6/ZlUV+xj5gjkAHoXvKTna6wR4J/yJA0Bwv1iX lQfKEv5IejVB61UFRG2Zr/DeA3W6NXwDFKqUn+S/xz08d3rIdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRkK5pVnrLwQhZoiK4ZNrupEcIFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjVlNTY5ZTgtMzdhZC0z NDY5LTg5NWUtMzE1ZjEwNzcxZThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnD1Ay+1scsg6j1zSWEl8U08sDj5fiN5WgJYJy3NnW0mC6TxWebIj31 v143Lq1BxtIlh2p7TqnijBoBXcsUEvFpVf52QSLg6c113pCRxW/yv813y53aavhT v/F8HHNMgPu1uLEjoBoJdxLXlCUfpbyMfxLOBgGScoM52+YtN7l+6LIperZA2y5n hj2llJ3VKCnmjMKOqGGjjD1HTDJoKXIb7IYK/HbMSvJZ4gyNAnzNrzJmILLtbwv+ UN1O3iGOd1NjEAsEe9qdutVOwXYxW/NsY0Sw1J5gcLPzp28bw1KrxeiwIHrNrfEG vkr+N+2y7wP0HECDjkD0yU2zgRmilaw= -----END CERTIFICATE-----Generated at Mon Mar 2 18:27:54 2026 by rpki-client