$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b12175cf-2702-3731-83e8-14996dac56a9.roa File: b12175cf-2702-3731-83e8-14996dac56a9.roa (raw, json) Hash identifier: kXSMyP1YAIWb0DcOiDNoahoOkR5G2GwtmhMlleXJLEo= Subject key identifier: 9A:F0:C3:18:89:FD:86:DF:81:BF:45:96:47:2A:6A:DF:74:68:37:93 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E253F0CE3625F5258D4B1A880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b12175cf-2702-3731-83e8-14996dac56a9.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 8069 IP address blocks: 20.33.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3f:0c:e3:62:5f:52:58:d4:b1:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=d657235c-ed0a-4f93-bb61-59f0c44fc768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4a:c4:f3:70:80:55:24:ab:75:4f:1c:ff:f7: d4:cf:6b:27:83:9e:af:af:6f:e2:0b:85:33:77:91: dd:e9:f8:ac:22:a2:d6:bc:76:55:95:9b:59:1c:46: fe:77:37:62:01:d7:ba:1e:02:d8:96:d8:45:2b:bb: 27:73:4b:a3:26:a2:af:43:68:44:13:8f:e1:54:9c: 76:c2:96:d3:a6:58:eb:cb:2f:87:5d:98:25:92:e0: f8:15:66:41:bd:b5:88:03:2c:70:74:4a:55:59:be: 37:4f:b5:d5:9c:3a:47:3d:5a:de:ec:16:30:16:7d: 04:b3:6c:a7:02:6c:a5:73:f9:20:98:d8:b2:80:61: bf:59:f2:6f:0e:d2:16:ec:7c:ed:a7:de:b9:d3:bc: e4:ee:ba:3f:15:5d:86:42:3f:9e:09:ce:3a:df:7f: a1:56:02:c3:dd:57:5b:49:d9:c7:81:d8:16:f8:85: c9:27:e7:d6:67:0a:76:f8:f0:2e:58:78:e5:07:d1: 16:3c:c0:80:81:94:5f:73:3f:ff:21:d2:48:8d:f0: 14:bc:0a:e5:99:fd:32:f7:b8:6a:77:9c:a7:ce:fb: cd:92:58:2c:f7:72:9e:76:06:57:bf:16:bd:aa:eb: 67:7a:01:81:e9:2d:cb:1f:8d:d0:da:32:cd:8b:00: ad:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F0:C3:18:89:FD:86:DF:81:BF:45:96:47:2A:6A:DF:74:68:37:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b12175cf-2702-3731-83e8-14996dac56a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:a6:e3:16:d9:16:7c:5e:3a:4a:15:86:0c:f5:8c:90:6b:8e: 0c:63:4e:8b:20:6d:6f:10:c3:9d:04:e9:89:6a:7b:0f:6c:65: c4:d0:7c:c3:e4:9c:74:c2:22:42:f4:66:ca:bf:35:25:c8:f4: 36:17:7f:cd:cb:e0:be:d7:2f:75:f1:ab:5f:11:e3:80:68:82: 4b:a1:d2:1f:fc:9a:f3:41:68:d0:52:4b:52:b7:d0:00:33:d5: ff:de:fa:a9:6c:71:77:07:49:31:8b:7a:3d:c1:b6:68:6a:b4: 85:03:67:13:98:b9:d6:69:1e:33:a3:df:c6:b2:b9:8c:57:20: bf:d0:6b:4f:b0:00:16:d1:9f:e6:d0:81:ac:f3:d7:7a:bb:6f: fa:d7:2d:85:3c:09:b9:15:79:92:bc:83:18:a8:07:32:1f:a1: ec:3c:e9:89:48:ff:69:46:75:96:f3:da:8a:63:02:77:17:77: 9f:38:e7:ac:4a:93:de:12:b5:7e:98:7e:66:17:e1:cf:d3:16: 02:df:fb:4c:cb:60:56:0b:00:08:64:97:77:b1:6f:56:50:58: e0:db:71:df:f3:4c:16:8e:df:d1:3c:2d:0e:e4:02:63:39:a7: 22:10:26:21:3f:b8:d2:90:ba:0c:f8:37:07:28:d9:84:8e:c4: e4:d6:69:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPwzjYl9SWNSxqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk ZDY1NzIzNWMtZWQwYS00ZjkzLWJiNjEtNTlmMGM0NGZjNzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUrE83CAVSSrdU8c//fUz2sng56vr2/iC4Uz d5Hd6fisIqLWvHZVlZtZHEb+dzdiAde6HgLYlthFK7snc0ujJqKvQ2hEE4/hVJx2 wpbTpljryy+HXZglkuD4FWZBvbWIAyxwdEpVWb43T7XVnDpHPVre7BYwFn0Es2yn Amylc/kgmNiygGG/WfJvDtIW7Hztp96507zk7ro/FV2GQj+eCc4633+hVgLD3Vdb SdnHgdgW+IXJJ+fWZwp2+PAuWHjlB9EWPMCAgZRfcz//IdJIjfAUvArlmf0y97hq d5ynzvvNklgs93KedgZXvxa9qutnegGB6S3LH43Q2jLNiwCtaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrwwxiJ/Ybfgb9Flkcqat90aDeTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjEyMTc1Y2YtMjcwMi0z NzMxLTgzZTgtMTQ5OTZkYWM1NmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmm4xbZFnxeOkoVhgz1jJBrjgxjTosgbW8Qw50E6Ylqew9sZcTQfMPk nHTCIkL0Zsq/NSXI9DYXf83L4L7XL3Xxq18R44Bogkuh0h/8mvNBaNBSS1K30AAz 1f/e+qlscXcHSTGLej3BtmhqtIUDZxOYudZpHjOj38ayuYxXIL/Qa0+wABbRn+bQ gazz13q7b/rXLYU8CbkVeZK8gxioBzIfoew86YlI/2lGdZbz2opjAncXd58456xK k94StX6YfmYX4c/TFgLf+0zLYFYLAAhkl3exb1ZQWODbcd/zTBaO39E8LQ7kAmM5 pyIQJiE/uNKQugz4Nwco2YSOxOTWaT4= -----END CERTIFICATE-----Generated at Sun Jun 14 04:06:33 2026 by rpki-client