$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01affdc8-cfde-39b2-92d1-54dc8e367c0e.roa File: 01affdc8-cfde-39b2-92d1-54dc8e367c0e.roa (raw, json) Hash identifier: /iIw6uPSRuKusoVwD3vKSFfq5blnlNHNO5ttHEsPJ4A= Subject key identifier: 5C:38:1B:7B:B4:53:04:88:18:49:AB:B7:A7:1F:1A:37:FF:37:6C:62 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E253F0CC1C2DDF0CDD6BD9400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01affdc8-cfde-39b2-92d1-54dc8e367c0e.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 8069 IP address blocks: 20.33.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3f:0c:c1:c2:dd:f0:cd:d6:bd:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=f12710fd-cacd-43de-b515-3f16168b2179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8e:ee:1b:31:5c:63:51:f2:65:d1:6f:a9:ad: 8d:70:dd:0d:06:0c:c7:62:55:30:e4:9c:3b:00:29: f1:14:10:c4:ee:a6:c9:fc:02:90:20:ba:50:4b:bc: ef:8d:c4:b7:5f:e5:32:0a:59:97:e7:32:40:89:90: bc:35:ae:ac:26:93:69:3e:fb:5a:c4:fb:19:d7:0a: 7a:4e:b1:5a:cc:08:20:d2:de:30:f6:3d:d3:cf:bc: d5:f4:9e:09:b6:50:5f:21:de:36:28:7d:73:24:91: d9:4f:d5:75:57:0b:fc:13:16:94:d4:7b:2a:d9:3c: 72:8a:c1:59:bc:37:29:1c:7d:e4:e8:5c:28:ca:a7: 05:66:ee:5c:2d:b3:27:b8:9e:0c:a1:77:03:79:84: 42:6c:22:c4:45:d9:a2:5c:28:47:b9:59:65:0b:0b: 08:4a:20:e9:1c:bc:70:03:b3:10:60:00:af:6d:3c: 26:a4:20:60:2b:4c:aa:7e:b2:20:e1:2e:04:e4:a6: 43:b8:6b:15:3f:00:c5:07:c5:ad:e5:ac:d7:84:0f: 34:1c:7b:6c:1d:d3:4d:e7:9a:1e:6e:a8:da:4a:9e: f5:8e:09:88:df:99:c2:97:40:cb:43:64:42:02:b0: 43:9a:03:fc:51:93:fe:f9:59:a8:82:28:ce:24:8d: 12:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:38:1B:7B:B4:53:04:88:18:49:AB:B7:A7:1F:1A:37:FF:37:6C:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01affdc8-cfde-39b2-92d1-54dc8e367c0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:e0:13:ab:c0:8c:2e:8b:12:65:3e:bd:1e:a7:37:4a:17:e0: bf:c3:3b:f5:b3:a9:d9:8f:e1:06:05:02:6b:90:46:3d:59:e5: b7:9a:8f:d1:9a:f3:e7:32:8d:f4:b4:60:2f:17:b5:12:1d:4b: 1a:4c:84:7e:1b:9d:00:07:be:69:6d:36:61:bb:a6:a7:13:e8: 88:ba:fe:41:cd:85:1d:78:f2:2f:11:c2:1e:83:3c:c0:4d:be: 27:4f:43:a0:3c:37:eb:a7:48:06:4a:65:ad:e4:50:06:93:6e: b1:4d:cf:3b:91:dc:4e:91:16:7d:62:54:4a:32:99:48:40:79: 8c:3a:d9:09:9d:12:47:d6:8f:c9:45:53:7d:3f:59:4a:12:f0: 05:81:1e:18:d3:52:b7:f5:42:f4:6b:ed:3f:19:a6:1b:4e:e8: fc:25:e5:90:01:54:66:16:f4:10:9f:3c:5e:1e:42:12:39:8f: 7e:dc:79:91:83:a8:f4:4b:c3:d2:e2:71:48:1c:d0:dd:18:49: a7:86:4e:3f:2e:de:0f:1a:36:9e:f5:9b:25:44:15:60:59:93: b1:67:a8:b4:65:58:80:2d:20:bc:27:cd:c8:77:cc:56:f1:7a: 5a:32:7b:70:c4:a4:c3:88:79:bb:8a:63:22:7d:c8:04:9d:2b: aa:00:b4:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPwzBwt3wzda9lAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk ZjEyNzEwZmQtY2FjZC00M2RlLWI1MTUtM2YxNjE2OGIyMTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6I7uGzFcY1HyZdFvqa2NcN0NBgzHYlUw5Jw7 ACnxFBDE7qbJ/AKQILpQS7zvjcS3X+UyClmX5zJAiZC8Na6sJpNpPvtaxPsZ1wp6 TrFazAgg0t4w9j3Tz7zV9J4JtlBfId42KH1zJJHZT9V1Vwv8ExaU1Hsq2TxyisFZ vDcpHH3k6FwoyqcFZu5cLbMnuJ4MoXcDeYRCbCLERdmiXChHuVllCwsISiDpHLxw A7MQYACvbTwmpCBgK0yqfrIg4S4E5KZDuGsVPwDFB8Wt5azXhA80HHtsHdNN55oe bqjaSp71jgmI35nCl0DLQ2RCArBDmgP8UZP++VmogijOJI0SLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFw4G3u0UwSIGEmrt6cfGjf/N2xiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDFhZmZkYzgtY2ZkZS0z OWIyLTkyZDEtNTRkYzhlMzY3YzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLgE6vAjC6LEmU+vR6nN0oX4L/DO/WzqdmP4QYFAmuQRj1Z5beaj9Ga 8+cyjfS0YC8XtRIdSxpMhH4bnQAHvmltNmG7pqcT6Ii6/kHNhR148i8Rwh6DPMBN vidPQ6A8N+unSAZKZa3kUAaTbrFNzzuR3E6RFn1iVEoymUhAeYw62QmdEkfWj8lF U30/WUoS8AWBHhjTUrf1QvRr7T8ZphtO6Pwl5ZABVGYW9BCfPF4eQhI5j37ceZGD qPRLw9LicUgc0N0YSaeGTj8u3g8aNp71myVEFWBZk7FnqLRlWIAtILwnzch3zFbx eloye3DEpMOIebuKYyJ9yASdK6oAtIc= -----END CERTIFICATE-----Generated at Sat Jun 13 17:22:03 2026 by rpki-client