$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/795156b6-7498-321b-9c02-ae19435bf64a.roa File: 795156b6-7498-321b-9c02-ae19435bf64a.roa (raw, json) Hash identifier: ufSc/+T4ybrKxe0WRe2TZzSaeuyn7on/ETV0UT/KfUs= Subject key identifier: A8:3E:51:24:87:D3:80:0F:A1:2E:C1:AE:8F:89:E8:79:BB:D9:1B:8B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D143D4ED3FB250CDFDDDEF0E0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/795156b6-7498-321b-9c02-ae19435bf64a.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.33.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:4e:d3:fb:25:0c:df:dd:de:f0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=5a688d1a-21a8-4a55-bca9-2c719535f82f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ad:98:e8:0f:af:56:64:40:1c:b6:6f:ba:c3: 74:40:51:ff:80:28:0d:39:df:2f:e5:d1:ac:eb:9d: 66:d3:0c:64:3b:20:5e:3a:fe:26:d8:46:03:f3:ec: 2a:af:f3:c6:74:b9:8a:bf:1b:a1:b9:de:db:b0:ad: 30:d2:b7:b3:b8:4e:2f:62:3f:cf:1b:67:00:7a:e2: ca:af:59:02:20:10:78:e0:39:99:3b:d6:cc:a4:f2: b3:a1:3c:98:ba:96:04:dc:3f:25:c1:0a:d3:ba:00: fc:2f:0a:05:26:2b:45:46:24:7a:fb:5e:b9:d2:07: 66:4a:78:ca:e3:06:fc:fa:0c:9a:08:eb:f3:0e:24: 99:ff:b0:21:00:31:9f:9a:76:98:84:9e:db:29:eb: ed:8c:10:0a:da:16:e8:3d:f1:4f:11:e3:d3:29:10: 82:71:fb:ce:3f:60:96:9d:21:2f:e4:dd:e7:ec:84: 86:60:c2:45:df:6f:09:14:88:62:36:23:77:bf:94: c4:4c:ba:81:64:fa:32:25:d4:f1:32:59:6e:67:65: b7:2f:1e:b5:66:38:ca:23:96:2d:45:70:38:ba:ad: 25:dc:8f:0e:f1:e7:ed:ab:75:a7:b1:7a:d7:3c:87: b1:5b:98:d5:5b:a8:d9:2a:fb:90:44:bc:6a:5f:60: d6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3E:51:24:87:D3:80:0F:A1:2E:C1:AE:8F:89:E8:79:BB:D9:1B:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/795156b6-7498-321b-9c02-ae19435bf64a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:47:29:b3:31:c2:58:b4:29:40:38:5d:8a:72:33:82:0b:5a: 51:00:f0:72:2b:68:51:c3:7c:8b:8c:ff:d8:d0:06:14:b1:b3: 2e:3b:7c:e0:f8:d9:1b:fa:97:91:e0:95:33:8b:92:08:ad:a4: 96:93:3e:87:ce:34:f3:6a:84:aa:41:22:73:e2:21:4a:e9:da: dd:8b:f9:10:77:37:8f:e2:23:b9:4f:6f:55:29:b2:ee:fa:67: e2:33:04:df:14:3c:02:87:98:d4:0c:c7:4c:81:9b:79:8a:43: a6:45:06:12:dc:e0:6f:f2:50:c9:72:83:84:12:76:7b:b6:8b: 34:17:06:79:51:fc:84:d6:83:48:06:34:ca:e9:2e:84:95:29: 3e:a9:49:b2:0b:d7:1e:0a:d4:05:43:32:43:0f:5c:d9:61:c5: fa:1e:81:c7:c7:72:58:87:40:51:46:e0:c2:d8:27:7a:08:1b: d0:63:1d:83:56:d7:aa:30:ab:dd:0a:d4:05:93:df:ef:02:1b: 86:70:98:f9:34:86:08:f2:72:7f:dc:b0:29:3f:20:50:57:69: 74:bf:12:d8:93:dd:8d:0f:eb:8e:6b:79:14:5c:bf:f7:d4:91: f7:ca:99:c0:14:7f:92:f3:87:a2:b5:e1:a2:b5:b2:f0:c7:38: 6c:12:e8:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPU7T+yUM393e8OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NWE2ODhkMWEtMjFhOC00YTU1LWJjYTktMmM3MTk1MzVmODJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq2Y6A+vVmRAHLZvusN0QFH/gCgNOd8v5dGs 651m0wxkOyBeOv4m2EYD8+wqr/PGdLmKvxuhud7bsK0w0rezuE4vYj/PG2cAeuLK r1kCIBB44DmZO9bMpPKzoTyYupYE3D8lwQrTugD8LwoFJitFRiR6+1650gdmSnjK 4wb8+gyaCOvzDiSZ/7AhADGfmnaYhJ7bKevtjBAK2hboPfFPEePTKRCCcfvOP2CW nSEv5N3n7ISGYMJF328JFIhiNiN3v5TETLqBZPoyJdTxMlluZ2W3Lx61ZjjKI5Yt RXA4uq0l3I8O8eftq3WnsXrXPIexW5jVW6jZKvuQRLxqX2DWkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKg+USSH04APoS7Bro+J6Hm72RuLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzk1MTU2YjYtNzQ5OC0z MjFiLTljMDItYWUxOTQzNWJmNjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1HKbMxwli0KUA4XYpyM4ILWlEA8HIraFHDfIuM/9jQBhSxsy47fOD4 2Rv6l5HglTOLkgitpJaTPofONPNqhKpBInPiIUrp2t2L+RB3N4/iI7lPb1Upsu76 Z+IzBN8UPAKHmNQMx0yBm3mKQ6ZFBhLc4G/yUMlyg4QSdnu2izQXBnlR/ITWg0gG NMrpLoSVKT6pSbIL1x4K1AVDMkMPXNlhxfoegcfHcliHQFFG4MLYJ3oIG9BjHYNW 16owq90K1AWT3+8CG4ZwmPk0hgjycn/csCk/IFBXaXS/EtiT3Y0P645reRRcv/fU kffKmcAUf5Lzh6K14aK1svDHOGwS6NU= -----END CERTIFICATE-----Generated at Sat Mar 7 12:48:23 2026 by rpki-client