$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4426bc50-c7c8-3db9-ba29-a76605eb28e0.roa File: 4426bc50-c7c8-3db9-ba29-a76605eb28e0.roa (raw, json) Hash identifier: PglZv9Ei7g3jSOqE1spC+OoX4VeQjU/INWZ9QgvV93o= Subject key identifier: 25:F0:72:A7:97:81:13:9B:2B:30:E1:F6:74:B1:4F:F8:1E:B4:02:C6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E253F0CEE31244AE00F376CC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4426bc50-c7c8-3db9-ba29-a76605eb28e0.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 8069 IP address blocks: 20.33.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3f:0c:ee:31:24:4a:e0:0f:37:6c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=76619b39-4939-419f-b877-d12e94f07315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cc:61:8c:a2:a7:3c:27:d4:7f:0c:c4:e2:e9: 00:21:c4:2a:3f:4b:fb:55:d1:db:e9:50:fd:fd:75: e7:c5:14:3b:d7:23:dd:ec:7f:d2:64:72:1a:f7:b0: 55:18:e8:63:87:91:69:e6:ff:b9:70:50:f1:0c:26: 22:76:d2:4d:d8:a3:b4:af:47:0b:0f:d9:35:0c:19: ad:71:aa:1f:f1:a6:70:22:db:53:b7:09:3d:f1:34: 9b:68:cf:16:b8:62:99:18:36:8c:6f:0c:ab:db:79: c8:6a:a6:45:a6:9e:ac:43:2b:d2:a2:5b:12:3e:38: 47:59:b8:4c:8d:31:8f:78:6b:d5:38:dd:5a:8b:28: e4:cf:94:f1:83:c7:dd:09:80:88:63:64:bc:7c:69: 85:32:92:a2:aa:79:3f:e9:a3:cd:bc:af:dc:8b:cc: 2c:75:df:83:02:22:0d:d7:b2:35:21:73:6d:4d:dd: 60:5b:a9:6f:f0:a4:1b:e1:06:27:15:93:d5:42:6f: a7:7e:6b:0a:45:2b:7a:79:cd:a7:55:2a:24:b9:e4: 53:25:b7:38:77:c7:2a:5a:e8:5e:c0:f7:f1:47:4b: a7:0c:8e:52:1d:0a:cd:1b:08:23:bb:47:bb:13:8d: 52:f7:9c:0c:e7:71:8c:9b:89:df:de:62:d5:0b:54: b4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F0:72:A7:97:81:13:9B:2B:30:E1:F6:74:B1:4F:F8:1E:B4:02:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4426bc50-c7c8-3db9-ba29-a76605eb28e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:54:c6:62:1a:38:6d:4e:a2:17:8a:04:61:88:4e:d7:e2:7e: df:d1:46:ab:9c:ec:2a:eb:d5:d8:d8:0f:3c:aa:54:0f:b8:15: 5f:34:cd:86:cb:ad:c0:6e:a2:f9:87:d7:22:9a:20:2d:e5:0b: b0:d1:ba:24:be:0b:c4:85:b0:e3:d8:7b:e1:f1:31:0f:68:68: 85:5e:3e:78:0a:07:e9:ee:43:00:58:1b:b5:ce:ee:e3:19:30: 71:8b:c3:e3:f8:6c:2d:96:19:1c:42:38:ad:ae:fa:af:e7:ba: 3c:f6:eb:8c:12:1b:ff:ce:3e:60:d0:5f:fa:75:80:f7:90:01: 62:69:8a:5f:e3:20:18:25:69:7b:3b:35:d9:02:23:2b:c2:ed: f4:b4:b1:fb:af:66:22:8c:fb:0c:46:87:73:c5:e3:fd:ec:c0: 57:cf:92:b7:12:03:1b:a5:21:02:61:c0:00:af:7f:e9:a6:67: 0e:6b:48:bd:e8:5a:ca:37:56:80:4a:59:b5:63:ea:b5:f6:3c: d8:87:a2:a3:88:4c:6f:0f:f4:c9:c8:d6:d8:f9:6c:d8:de:97: e3:bc:7b:3e:1d:4e:e3:4d:ad:6d:8f:30:d5:ae:a3:75:50:bf: f3:fc:af:7e:95:b5:40:39:eb:d5:40:5e:3f:de:21:5c:4d:aa: 4a:42:10:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPwzuMSRK4A83bMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk NzY2MTliMzktNDkzOS00MTlmLWI4NzctZDEyZTk0ZjA3MzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8xhjKKnPCfUfwzE4ukAIcQqP0v7VdHb6VD9 /XXnxRQ71yPd7H/SZHIa97BVGOhjh5Fp5v+5cFDxDCYidtJN2KO0r0cLD9k1DBmt caof8aZwIttTtwk98TSbaM8WuGKZGDaMbwyr23nIaqZFpp6sQyvSolsSPjhHWbhM jTGPeGvVON1aiyjkz5Txg8fdCYCIY2S8fGmFMpKiqnk/6aPNvK/ci8wsdd+DAiIN 17I1IXNtTd1gW6lv8KQb4QYnFZPVQm+nfmsKRSt6ec2nVSokueRTJbc4d8cqWuhe wPfxR0unDI5SHQrNGwgju0e7E41S95wM53GMm4nf3mLVC1S0AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXwcqeXgRObKzDh9nSxT/getALGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDQyNmJjNTAtYzdjOC0z ZGI5LWJhMjktYTc2NjA1ZWIyOGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxUxmIaOG1OoheKBGGITtfift/RRquc7Crr1djYDzyqVA+4FV80zYbL rcBuovmH1yKaIC3lC7DRuiS+C8SFsOPYe+HxMQ9oaIVePngKB+nuQwBYG7XO7uMZ MHGLw+P4bC2WGRxCOK2u+q/nujz264wSG//OPmDQX/p1gPeQAWJpil/jIBglaXs7 NdkCIyvC7fS0sfuvZiKM+wxGh3PF4/3swFfPkrcSAxulIQJhwACvf+mmZw5rSL3o Wso3VoBKWbVj6rX2PNiHoqOITG8P9MnI1tj5bNjel+O8ez4dTuNNrW2PMNWuo3VQ v/P8r36VtUA569VAXj/eIVxNqkpCEOw= -----END CERTIFICATE-----Generated at Sat Jun 13 23:30:01 2026 by rpki-client