$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/257673b6-c9c1-3a5b-b86e-987bf59a6f9a.roa File: 257673b6-c9c1-3a5b-b86e-987bf59a6f9a.roa (raw, json) Hash identifier: OEHo9yuZLbPHwH5G/Bb7aYIXlSqVSnulDbE9NgwPaK0= Subject key identifier: 7A:A3:21:9B:EC:9E:98:59:A2:96:E2:82:46:A5:8E:1E:36:E8:63:6E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D143D4EB151FBDF06D6358700 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/257673b6-c9c1-3a5b-b86e-987bf59a6f9a.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.33.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:4e:b1:51:fb:df:06:d6:35:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=fdcbd05a-fd28-4fe2-b564-ac2abc3637cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b3:3d:51:4a:b0:05:02:63:69:08:ee:1f:8f: 6e:6a:59:70:64:9e:64:24:30:8b:11:5e:78:d7:83: 54:38:c8:c0:37:6e:35:ab:8f:ff:1d:1a:bd:d8:75: f9:b3:7c:55:eb:2d:fc:db:fd:78:7f:d7:e5:24:e7: d3:74:c4:3b:2d:3a:60:5d:c7:7e:eb:30:1a:ba:9b: 75:b5:cb:88:00:47:b8:32:b2:06:1c:62:7e:2e:58: 8d:cd:31:ea:6d:42:11:f9:be:75:ac:82:0a:7d:3a: f6:1d:3a:9e:1e:98:42:94:d4:57:c6:c9:3e:9b:89: 77:3d:4a:f4:de:f9:e1:7b:74:c7:7b:80:85:24:b2: ec:dc:de:64:1b:68:df:dc:c0:69:f1:c2:e7:0d:94: cd:23:79:15:3d:e8:c1:81:84:79:a6:11:79:00:c8: 5b:fa:6e:74:18:1b:27:66:68:1b:fb:90:e3:07:73: 45:a9:9f:03:c4:0b:43:21:e8:a4:1f:10:e8:33:31: 6e:d0:94:1e:12:b5:76:c3:59:7f:ad:c1:60:6c:cd: 01:4c:f2:9a:8a:39:bc:c0:91:c7:42:1e:ea:4b:3e: c0:95:25:45:1d:6b:15:77:63:dc:db:c0:89:74:f6: 1b:08:60:d5:ba:cd:17:e2:03:20:70:4a:c1:ff:11: d2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A3:21:9B:EC:9E:98:59:A2:96:E2:82:46:A5:8E:1E:36:E8:63:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/257673b6-c9c1-3a5b-b86e-987bf59a6f9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:0e:a1:38:73:5b:f7:eb:1b:f8:6c:f6:37:aa:4d:d9:da:2b: 66:66:e0:59:5f:35:49:ae:47:e6:a0:13:7a:72:e6:03:96:06: 10:98:45:fb:35:9f:50:55:a6:6c:cb:7b:38:b9:76:b8:d8:7e: 4e:c9:5a:43:46:9b:d6:4e:77:a6:e6:62:42:7f:12:aa:48:fc: 9a:e6:70:4c:80:35:d7:db:df:18:6b:b5:86:bd:80:5b:4f:36: dc:c0:91:85:5c:8c:36:0d:33:d8:2b:82:1f:cb:88:66:6b:5c: f0:0d:db:d3:fe:0f:5f:18:8a:0d:f1:02:d3:44:09:dc:9a:d3: 9c:8c:aa:3d:a1:d4:e9:40:a7:d0:a4:99:49:37:53:64:76:80: 81:41:37:20:ee:47:44:55:3b:d8:ac:99:3a:83:49:20:82:c8: 0e:21:bb:ba:70:65:dc:c0:af:37:21:47:ec:98:5e:09:0a:ce: e4:61:29:79:89:12:75:38:47:7f:da:32:85:9d:d7:11:bf:e9: 9c:3c:21:ea:8d:e1:fe:a7:75:92:ac:3c:c4:db:cf:b6:17:c9: de:6e:9c:b4:84:7b:c4:4a:f8:7e:d6:8e:9a:6c:8b:59:f3:15: e2:c6:b4:02:f8:fc:76:61:09:99:da:19:1e:0b:a7:45:b3:c4: b4:b9:a9:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPU6xUfvfBtY1hwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZmRjYmQwNWEtZmQyOC00ZmUyLWI1NjQtYWMyYWJjMzYzN2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbM9UUqwBQJjaQjuH49uallwZJ5kJDCLEV54 14NUOMjAN241q4//HRq92HX5s3xV6y382/14f9flJOfTdMQ7LTpgXcd+6zAaupt1 tcuIAEe4MrIGHGJ+LliNzTHqbUIR+b51rIIKfTr2HTqeHphClNRXxsk+m4l3PUr0 3vnhe3THe4CFJLLs3N5kG2jf3MBp8cLnDZTNI3kVPejBgYR5phF5AMhb+m50GBsn Zmgb+5DjB3NFqZ8DxAtDIeikHxDoMzFu0JQeErV2w1l/rcFgbM0BTPKaijm8wJHH Qh7qSz7AlSVFHWsVd2Pc28CJdPYbCGDVus0X4gMgcErB/xHSYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqjIZvsnphZopbigkaljh426GNuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjU3NjczYjYtYzljMS0z YTViLWI4NmUtOTg3YmY1OWE2ZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCENMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYOoThzW/frG/hs9jeqTdnaK2Zm4FlfNUmuR+agE3py5gOWBhCYRfs1 n1BVpmzLezi5drjYfk7JWkNGm9ZOd6bmYkJ/EqpI/JrmcEyANdfb3xhrtYa9gFtP NtzAkYVcjDYNM9grgh/LiGZrXPAN29P+D18Yig3xAtNECdya05yMqj2h1OlAp9Ck mUk3U2R2gIFBNyDuR0RVO9ismTqDSSCCyA4hu7pwZdzArzchR+yYXgkKzuRhKXmJ EnU4R3/aMoWd1xG/6Zw8IeqN4f6ndZKsPMTbz7YXyd5unLSEe8RK+H7Wjppsi1nz FeLGtAL4/HZhCZnaGR4Lp0WzxLS5qZo= -----END CERTIFICATE-----Generated at Sat Mar 7 12:48:22 2026 by rpki-client