$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4394c957-d6d6-3969-9f1f-2829f0301cc7.roa File: 4394c957-d6d6-3969-9f1f-2829f0301cc7.roa (raw, json) Hash identifier: XUFXMOmKkpAKO1JGDlEAUGvbUiSFMuTbh1+PrhY4iQU= Subject key identifier: AC:98:54:3D:5C:CE:A1:7D:EB:D8:9E:6C:51:67:95:0C:D4:7C:83:15 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E18AEF5051DC874DCC9785500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4394c957-d6d6-3969-9f1f-2829f0301cc7.roa Signing time: Sun 07 Jun 2026 21:00:12 +0000 ROA not before: Sun 07 Jun 2026 21:00:12 +0000 ROA not after: Sat 05 Sep 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.33.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:18:ae:f5:05:1d:c8:74:dc:c9:78:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 7 21:00:12 2026 GMT Not After : Sep 5 21:00:12 2026 GMT Subject: CN=26415dfe-8070-41a9-a833-9af24048acfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b8:2f:18:b1:1a:c8:0f:1d:d0:96:9e:13:9d: 23:9a:a4:35:2f:7d:22:cc:99:25:c7:47:b1:17:8c: 62:c3:70:b5:b4:84:2c:75:b4:a9:fd:6a:7f:08:aa: 5c:79:0e:99:e5:42:af:bc:6f:eb:36:7a:e4:e8:13: a2:02:d6:39:94:9d:fe:f4:5a:b7:e6:d1:05:48:b3: 07:3b:df:53:fc:8e:e8:fd:85:f1:2f:ba:89:b8:02: 1a:21:76:db:90:4f:01:e4:20:b3:62:9d:00:7b:ba: 9a:5e:10:f7:fc:d2:af:38:86:41:bf:69:3b:ce:fa: 14:37:c3:66:45:53:d9:cd:a0:a1:ee:c7:91:17:8e: 83:b2:16:41:00:26:29:f9:6b:15:cc:16:c2:63:4e: 3d:44:a2:cf:57:b0:9f:2c:0d:23:e6:24:cb:27:c0: c1:58:04:c7:bc:33:b7:06:be:33:c8:26:7c:07:4b: 68:d0:72:8c:76:7c:63:6a:5a:05:c4:3f:1a:77:b1: 4d:d2:c6:53:17:bd:cd:2a:6f:93:54:b5:7f:9c:ea: 8f:2f:30:87:f8:e8:4f:72:56:10:3d:e2:93:64:7a: 7c:c2:77:eb:99:43:c8:bc:c4:39:85:1e:f5:47:08: b6:bf:0c:76:f0:2f:b2:5f:03:19:1a:4f:96:c2:ef: 7e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:98:54:3D:5C:CE:A1:7D:EB:D8:9E:6C:51:67:95:0C:D4:7C:83:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4394c957-d6d6-3969-9f1f-2829f0301cc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:86:9c:7a:cd:1d:1c:ce:85:98:42:bc:44:ab:5c:66:56:fa: f6:56:15:22:f1:67:33:21:1e:88:a8:8a:0d:1c:68:3e:a6:89: 2a:99:6e:28:44:7a:d6:4a:7a:2b:f9:e7:11:da:17:09:bd:0f: 3b:b9:73:0c:e1:f5:0c:f2:69:03:b1:bf:f0:65:95:4f:db:4a: 16:6b:b7:af:f6:38:3f:fa:95:f0:10:d1:bf:63:92:19:50:fe: ec:93:27:01:f4:5b:d3:98:8e:6c:89:4c:03:3e:1d:a4:03:ee: 8d:c9:e0:79:b5:62:66:58:a2:10:92:51:c8:70:4b:93:e7:d0: 27:7a:85:c3:b0:59:56:1e:e6:51:82:ce:05:57:5b:9a:39:38: 64:0d:46:a6:c3:0f:58:a1:7f:26:26:3a:6b:be:3e:1f:dc:d8: 23:c9:7f:89:0f:28:3c:e3:33:e6:cc:8e:5b:ab:50:bd:91:cf: 54:d7:b7:90:f7:c4:2e:0b:f3:c4:ac:6e:58:07:7d:9d:c6:f2: 24:03:52:c6:f6:c3:bc:18:bc:fb:55:03:a8:35:22:97:5d:b3: 2a:2b:d6:5b:83:be:88:ae:51:4d:dc:87:6d:84:2b:92:8a:55: 54:1d:7a:fa:86:d0:33:36:d5:c8:e4:8c:54:1b:13:68:b1:45: d1:1a:74:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4YrvUFHch03Ml4VQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk MjY0MTVkZmUtODA3MC00MWE5LWE4MzMtOWFmMjQwNDhhY2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7gvGLEayA8d0JaeE50jmqQ1L30izJklx0ex F4xiw3C1tIQsdbSp/Wp/CKpceQ6Z5UKvvG/rNnrk6BOiAtY5lJ3+9Fq35tEFSLMH O99T/I7o/YXxL7qJuAIaIXbbkE8B5CCzYp0Ae7qaXhD3/NKvOIZBv2k7zvoUN8Nm RVPZzaCh7seRF46DshZBACYp+WsVzBbCY049RKLPV7CfLA0j5iTLJ8DBWATHvDO3 Br4zyCZ8B0to0HKMdnxjaloFxD8ad7FN0sZTF73NKm+TVLV/nOqPLzCH+OhPclYQ PeKTZHp8wnfrmUPIvMQ5hR71Rwi2vwx28C+yXwMZGk+Wwu9+5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyYVD1czqF969iebFFnlQzUfIMVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDM5NGM5NTctZDZkNi0z OTY5LTlmMWYtMjgyOWYwMzAxY2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeGnHrNHRzOhZhCvESrXGZW+vZWFSLxZzMhHoioig0caD6miSqZbihE etZKeiv55xHaFwm9Dzu5cwzh9QzyaQOxv/BllU/bShZrt6/2OD/6lfAQ0b9jkhlQ /uyTJwH0W9OYjmyJTAM+HaQD7o3J4Hm1YmZYohCSUchwS5Pn0Cd6hcOwWVYe5lGC zgVXW5o5OGQNRqbDD1ihfyYmOmu+Ph/c2CPJf4kPKDzjM+bMjlurUL2Rz1TXt5D3 xC4L88SsblgHfZ3G8iQDUsb2w7wYvPtVA6g1Ipddsyor1luDvoiuUU3ch22EK5KK VVQdevqG0DM21cjkjFQbE2ixRdEadI4= -----END CERTIFICATE-----Generated at Sat Jun 13 22:15:43 2026 by rpki-client