$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/80e82465-c9d4-3c99-a3bc-a70a5dfd93f8.roa File: 80e82465-c9d4-3c99-a3bc-a70a5dfd93f8.roa (raw, json) Hash identifier: JP9sDF6q3llJtbrUfgAu90gwQrIZMj+yeBcW3BQmroQ= Subject key identifier: 57:84:CF:E5:EF:D4:CD:FE:C3:E9:89:B5:28:90:5D:18:2B:91:5A:7E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E253F0D04F469BF1B379ACD00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/80e82465-c9d4-3c99-a3bc-a70a5dfd93f8.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 8069 IP address blocks: 20.33.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3f:0d:04:f4:69:bf:1b:37:9a:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=8d2f514c-1414-4aed-ac8b-c394c0e0f478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e3:c0:4a:d5:ec:ff:a6:39:97:ea:cc:8c:af: 7f:32:f3:f9:17:fc:96:4a:44:b3:1d:89:3a:35:5d: 48:f8:6b:d0:fa:60:33:d0:9e:d7:2b:59:c5:bc:e8: 63:77:ec:63:3c:34:d9:72:52:dd:c2:42:86:4b:fe: 06:f8:f0:eb:ae:af:4d:d9:33:2f:b5:66:00:fc:0d: cc:50:54:75:39:0a:fc:84:46:b2:e1:fb:36:6e:22: f8:4d:3f:61:2d:9c:54:51:8c:30:fd:b9:13:38:70: 8a:6a:1a:cd:ed:7c:50:bd:27:5c:d6:80:f8:8d:ab: c9:24:55:5d:6e:7c:7a:04:05:38:63:bb:0c:03:18: f7:81:9d:29:55:b7:97:6b:5e:d3:cd:de:12:dd:e4: 66:0c:d0:f6:bc:0a:aa:a1:28:ae:6f:fb:2c:84:93: f3:65:1b:e6:3f:fd:c0:91:40:fa:ed:2a:12:7f:20: f0:20:d1:68:b7:da:5d:b6:a1:35:84:f8:5d:df:65: 6c:23:de:5e:c1:4d:99:3d:74:a2:12:f3:45:2a:0f: cd:52:62:87:45:27:89:57:b6:9b:93:14:7a:a5:cd: de:ca:a9:cf:87:23:4b:f3:ee:f9:c3:73:63:55:7a: 18:c8:2c:d7:49:b2:52:d1:05:da:19:fd:83:a1:ae: 62:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:84:CF:E5:EF:D4:CD:FE:C3:E9:89:B5:28:90:5D:18:2B:91:5A:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/80e82465-c9d4-3c99-a3bc-a70a5dfd93f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:60:f1:e9:8b:ef:0a:2f:7d:b3:65:81:75:64:bf:e1:82:81: 3a:18:0f:5d:f5:43:1a:4a:cd:05:fb:85:52:0e:9a:d2:6b:74: 45:9f:fa:6a:a6:93:61:5f:66:97:b2:f3:3b:5a:d9:7a:84:55: 58:26:d4:24:1c:2f:02:00:b8:44:df:d7:3a:e3:dd:55:73:e2: 4a:7a:b4:36:64:d4:9a:bf:aa:f4:11:c4:31:63:fe:93:f8:98: 58:64:af:e8:a6:f7:d1:0d:38:83:b7:df:cf:56:1a:c5:3d:09: 1e:7e:f7:ec:52:3d:52:85:e5:bf:61:f0:ce:ee:96:95:d1:8e: 19:f5:08:ae:7a:41:09:02:d2:3d:fc:30:e9:6d:d0:3c:d4:03: a6:64:0f:a7:49:e0:48:55:e6:22:cf:cd:b2:96:c7:96:d7:97: a9:fd:f9:d5:01:17:d4:9a:33:ed:1d:ad:1d:dd:47:1d:6c:be: 95:1c:3c:d9:39:88:3d:72:11:ab:9e:60:6f:9e:79:bf:9d:92: ae:0f:71:87:cf:be:1f:d2:a8:fe:1e:22:d9:54:a8:30:3e:79: 49:4a:0d:fe:0d:f6:40:19:29:55:82:b8:c0:6d:d7:12:ba:f2: 51:8c:09:68:3f:d7:26:9d:41:08:5c:cf:1c:98:9b:12:03:24: a8:26:e5:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPw0E9Gm/GzeazQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk OGQyZjUxNGMtMTQxNC00YWVkLWFjOGItYzM5NGMwZTBmNDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuPAStXs/6Y5l+rMjK9/MvP5F/yWSkSzHYk6 NV1I+GvQ+mAz0J7XK1nFvOhjd+xjPDTZclLdwkKGS/4G+PDrrq9N2TMvtWYA/A3M UFR1OQr8hEay4fs2biL4TT9hLZxUUYww/bkTOHCKahrN7XxQvSdc1oD4javJJFVd bnx6BAU4Y7sMAxj3gZ0pVbeXa17Tzd4S3eRmDND2vAqqoSiub/sshJPzZRvmP/3A kUD67SoSfyDwINFot9pdtqE1hPhd32VsI95ewU2ZPXSiEvNFKg/NUmKHRSeJV7ab kxR6pc3eyqnPhyNL8+75w3NjVXoYyCzXSbJS0QXaGf2Doa5imwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFeEz+Xv1M3+w+mJtSiQXRgrkVp+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODBlODI0NjUtYzlkNC0z Yzk5LWEzYmMtYTcwYTVkZmQ5M2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZg8emL7wovfbNlgXVkv+GCgToYD131QxpKzQX7hVIOmtJrdEWf+mqm k2FfZpey8zta2XqEVVgm1CQcLwIAuETf1zrj3VVz4kp6tDZk1Jq/qvQRxDFj/pP4 mFhkr+im99ENOIO3389WGsU9CR5+9+xSPVKF5b9h8M7ulpXRjhn1CK56QQkC0j38 MOlt0DzUA6ZkD6dJ4EhV5iLPzbKWx5bXl6n9+dUBF9SaM+0drR3dRx1svpUcPNk5 iD1yEaueYG+eeb+dkq4PcYfPvh/SqP4eItlUqDA+eUlKDf4N9kAZKVWCuMBt1xK6 8lGMCWg/1yadQQhczxyYmxIDJKgm5fk= -----END CERTIFICATE-----Generated at Sat Jun 13 17:24:00 2026 by rpki-client