$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5f2854a5-a8d3-3b47-b10c-56016fd4464c.roa File: 5f2854a5-a8d3-3b47-b10c-56016fd4464c.roa (raw, json) Hash identifier: /uo+/8KghC/xUHVz7pgUqLpsB+NK/cc+mdoBMc4rSMM= Subject key identifier: 6E:7A:D0:06:BB:11:DA:EC:9E:5A:22:33:3E:4B:99:C6:33:37:64:94 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E1E4491F69409B5B3FBB47560 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5f2854a5-a8d3-3b47-b10c-56016fd4464c.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.33.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:91:f6:94:09:b5:b3:fb:b4:75:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=20eb36a3-50a8-4c00-9c34-d00015fb9248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7b:a7:17:3e:7d:39:d3:bb:ba:5c:17:ec:9e: 04:0b:bf:72:8f:1a:06:f3:0d:e6:6e:80:8a:ba:ce: ed:32:44:a5:c0:eb:2f:80:45:74:40:9e:c7:81:09: 54:ff:07:bc:b2:ad:49:26:f6:c3:90:a5:e3:3d:12: f3:0b:1e:3d:a6:e3:47:89:7e:cc:c7:9b:6f:54:fb: a9:e7:c7:f2:bc:77:68:8b:af:96:c8:f5:2f:dd:c8: e2:6f:e6:cf:88:45:2f:7e:6d:29:b4:35:8c:8b:b1: 2b:53:70:5e:b2:bc:07:78:c3:18:d1:44:27:e0:e1: f4:79:99:db:c5:17:9e:a5:15:06:14:a6:57:aa:5b: 4b:ec:a9:04:b0:24:49:39:15:ff:95:ec:ae:35:b6: 38:c8:0c:a0:14:49:b0:2d:37:f7:b3:29:6b:f8:a2: 52:62:e4:e0:53:c2:e2:a5:0b:92:c4:4b:43:b0:0a: e5:35:36:c5:fc:fa:fa:d2:2a:db:7a:1c:c4:04:e7: 05:69:98:5d:34:c8:bf:90:3f:59:7c:08:9d:e3:e8: 44:aa:ac:c1:ae:87:e1:73:ea:50:8f:57:a4:16:29: a2:7e:d9:57:78:f2:44:21:57:5c:14:4b:e5:26:31: c8:98:f4:a7:5b:95:40:f9:37:a2:97:0b:5f:64:43: 5b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7A:D0:06:BB:11:DA:EC:9E:5A:22:33:3E:4B:99:C6:33:37:64:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5f2854a5-a8d3-3b47-b10c-56016fd4464c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:61:8a:47:20:c7:db:97:57:77:1c:a8:32:72:01:54:4d:d4: 55:79:5f:b8:a8:25:d6:b5:00:d0:cc:b6:b0:5f:7f:58:f9:68: 3b:a8:27:41:cd:23:fa:3b:81:0e:12:af:fe:aa:50:dd:7f:db: 64:31:07:77:2f:dc:0e:36:0e:64:56:9d:12:53:d5:11:13:3d: 2b:2e:41:b5:40:c7:59:d4:a1:7a:67:d3:f5:31:9f:f4:f9:19: b4:16:27:ab:d7:18:9e:a2:45:1d:63:58:c6:9d:dd:a5:a0:42: 3f:ec:fb:9e:0e:5c:62:07:cf:ed:76:73:74:8f:cd:20:d6:20: fd:21:64:19:d0:7f:2f:9b:f2:82:cc:7d:b2:ff:95:d2:d4:64: 6b:a3:64:d2:09:2d:0c:05:aa:ee:a5:7d:e1:8e:2c:3b:1f:a9: 48:74:dd:5e:03:06:ef:30:b8:0d:a8:77:9e:ed:18:b5:fd:6b: b9:13:2d:11:d1:36:87:12:0a:35:ac:be:c5:f6:5e:72:5f:07: 91:65:11:73:0d:83:b5:ba:b9:9a:45:78:88:29:71:5e:30:c0: 16:bf:67:25:6d:5e:03:fa:03:d6:8c:f0:6b:4d:8c:af:7d:3c: e1:bd:05:9b:3d:2f:c1:b5:31:67:f1:b9:36:b8:61:b8:18:ad: 6a:31:eb:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRJH2lAm1s/u0dWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk MjBlYjM2YTMtNTBhOC00YzAwLTljMzQtZDAwMDE1ZmI5MjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynunFz59OdO7ulwX7J4EC79yjxoG8w3mboCK us7tMkSlwOsvgEV0QJ7HgQlU/we8sq1JJvbDkKXjPRLzCx49puNHiX7Mx5tvVPup 58fyvHdoi6+WyPUv3cjib+bPiEUvfm0ptDWMi7ErU3BesrwHeMMY0UQn4OH0eZnb xReepRUGFKZXqltL7KkEsCRJORX/leyuNbY4yAygFEmwLTf3sylr+KJSYuTgU8Li pQuSxEtDsArlNTbF/Pr60irbehzEBOcFaZhdNMi/kD9ZfAid4+hEqqzBrofhc+pQ j1ekFimiftlXePJEIVdcFEvlJjHImPSnW5VA+TeilwtfZENbwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG560Aa7EdrsnloiMz5LmcYzN2SUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWYyODU0YTUtYThkMy0z YjQ3LWIxMGMtNTYwMTZmZDQ0NjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCFkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEphikcgx9uXV3ccqDJyAVRN1FV5X7ioJda1ANDMtrBff1j5aDuoJ0HN I/o7gQ4Sr/6qUN1/22QxB3cv3A42DmRWnRJT1RETPSsuQbVAx1nUoXpn0/Uxn/T5 GbQWJ6vXGJ6iRR1jWMad3aWgQj/s+54OXGIHz+12c3SPzSDWIP0hZBnQfy+b8oLM fbL/ldLUZGujZNIJLQwFqu6lfeGOLDsfqUh03V4DBu8wuA2od57tGLX9a7kTLRHR NocSCjWsvsX2XnJfB5FlEXMNg7W6uZpFeIgpcV4wwBa/ZyVtXgP6A9aM8GtNjK99 POG9BZs9L8G1MWfxuTa4YbgYrWox6y8= -----END CERTIFICATE-----Generated at Sat Jun 13 23:34:26 2026 by rpki-client