$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5411a0e2-71bf-3e49-a170-f2238edd14df.roa File: 5411a0e2-71bf-3e49-a170-f2238edd14df.roa (raw, json) Hash identifier: QSgspsd6h5e1L0Z7zbLsywQYYsLX6eaxKWzaEl2PGkY= Subject key identifier: 88:20:21:E4:A5:6D:DF:14:B0:41:8F:E3:06:71:A3:E8:B0:91:67:78 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E253F0CCC968FDE079DBB1140 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5411a0e2-71bf-3e49-a170-f2238edd14df.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 8069 IP address blocks: 20.33.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3f:0c:cc:96:8f:de:07:9d:bb:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=f6383709-52e7-415d-9eaa-3edf8c1612e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:be:5a:62:93:b2:62:73:34:0f:f1:51:ba:cf: 35:90:d9:44:3f:76:bd:01:cb:ab:db:93:05:0c:1a: 1c:55:02:bc:0d:db:b5:0f:83:8d:88:92:d0:8d:40: 25:3e:07:59:1e:3d:6e:66:eb:c0:f1:5e:1f:b6:2d: 46:1e:a5:9c:8b:bc:a0:86:19:b5:bb:f1:a2:01:0e: ec:ae:7f:e0:f5:4b:18:2b:ce:13:e0:5d:cc:38:a8: 0b:cd:f4:e9:61:f6:75:4a:0c:f9:2c:40:7a:77:5b: d9:38:c5:08:d6:fb:86:bd:d4:ef:9e:ba:70:66:9a: ba:ff:f9:de:b3:6a:8c:20:51:a6:70:a5:4f:95:b9: 8e:00:ea:42:c5:ca:f0:71:f5:13:d9:23:b6:7d:05: 05:2d:59:6b:c8:a8:55:c3:a0:a4:22:bc:13:f7:a6: e6:ea:71:4f:20:8c:b8:40:98:eb:02:80:da:13:11: a9:2d:d9:cc:39:87:6f:fd:84:f0:f5:63:cf:30:b6: 5c:aa:39:1b:ba:1e:a7:0d:cf:90:93:1c:2b:6e:df: 54:b5:17:b4:3f:13:b4:bd:b2:b4:55:55:7a:5f:7f: de:af:81:dd:31:58:1f:61:84:9a:60:23:a1:0f:0d: 2d:2a:26:b7:ff:8d:6e:92:45:20:4f:c8:b3:10:84: c2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:20:21:E4:A5:6D:DF:14:B0:41:8F:E3:06:71:A3:E8:B0:91:67:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5411a0e2-71bf-3e49-a170-f2238edd14df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ef:d2:de:30:f5:17:f9:63:dd:e6:98:2d:4d:73:d0:5f:47: 23:68:76:96:40:45:71:5e:a1:24:d3:50:88:5c:66:98:f1:d6: 8f:2a:3d:8a:5c:c4:d9:35:e5:54:e9:49:4c:0c:52:1c:64:5d: 5b:06:34:f5:f6:cc:b7:6c:8e:84:27:33:65:cf:35:46:68:cc: d5:b9:8b:65:c3:22:82:e7:b9:ab:8c:7d:7c:37:b6:64:3b:79: 16:85:80:2a:84:fe:8b:02:01:8a:59:f7:d6:0f:be:18:b6:d6: 01:c7:f0:61:4c:a1:af:b9:da:da:04:70:6e:52:eb:5c:69:96: 80:c9:99:1c:29:e9:43:be:65:bd:17:ac:49:0d:66:77:4b:df: ec:94:d5:4e:44:c4:03:58:19:d1:26:de:2a:65:ef:80:5f:79: 7d:f7:b3:f0:d6:55:43:20:66:29:27:46:d5:61:71:35:32:28: 44:1c:a2:f1:bf:6a:96:ef:1e:52:04:48:31:74:98:04:2b:e9: 3e:f2:a1:05:b7:28:75:13:6e:24:78:b4:58:6a:08:02:ff:b9: 65:34:d6:f5:a1:b9:88:24:12:fb:42:14:c6:7f:1e:7d:0a:70: 6b:22:f8:11:a9:e4:0e:b7:ac:85:0a:21:19:2a:cd:12:80:a2: f5:42:63:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPwzMlo/eB527EUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk ZjYzODM3MDktNTJlNy00MTVkLTllYWEtM2VkZjhjMTYxMmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb5aYpOyYnM0D/FRus81kNlEP3a9Acur25MF DBocVQK8Ddu1D4ONiJLQjUAlPgdZHj1uZuvA8V4fti1GHqWci7yghhm1u/GiAQ7s rn/g9UsYK84T4F3MOKgLzfTpYfZ1Sgz5LEB6d1vZOMUI1vuGvdTvnrpwZpq6//ne s2qMIFGmcKVPlbmOAOpCxcrwcfUT2SO2fQUFLVlryKhVw6CkIrwT96bm6nFPIIy4 QJjrAoDaExGpLdnMOYdv/YTw9WPPMLZcqjkbuh6nDc+Qkxwrbt9UtRe0PxO0vbK0 VVV6X3/er4HdMVgfYYSaYCOhDw0tKia3/41ukkUgT8izEITC9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIggIeSlbd8UsEGP4wZxo+iwkWd4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTQxMWEwZTItNzFiZi0z ZTQ5LWExNzAtZjIyMzhlZGQxNGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLv0t4w9Rf5Y93mmC1Nc9BfRyNodpZARXFeoSTTUIhcZpjx1o8qPYpc xNk15VTpSUwMUhxkXVsGNPX2zLdsjoQnM2XPNUZozNW5i2XDIoLnuauMfXw3tmQ7 eRaFgCqE/osCAYpZ99YPvhi21gHH8GFMoa+52toEcG5S61xploDJmRwp6UO+Zb0X rEkNZndL3+yU1U5ExANYGdEm3ipl74BfeX33s/DWVUMgZiknRtVhcTUyKEQcovG/ apbvHlIESDF0mAQr6T7yoQW3KHUTbiR4tFhqCAL/uWU01vWhuYgkEvtCFMZ/Hn0K cGsi+BGp5A63rIUKIRkqzRKAovVCY0Q= -----END CERTIFICATE-----Generated at Sun Jun 14 03:07:42 2026 by rpki-client