$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5372288-b2a4-3d59-81bc-41226acf8120.roa File: b5372288-b2a4-3d59-81bc-41226acf8120.roa (raw, json) Hash identifier: SmlPFilLsKoJMm5V9EmCH+0PTxJkESWKoPyRdck4UTg= Subject key identifier: D2:B1:15:41:12:3D:43:A9:5C:64:7C:24:CC:20:20:08:67:F1:81:38 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E18AEF655379D5C8DEE172080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5372288-b2a4-3d59-81bc-41226acf8120.roa Signing time: Sun 07 Jun 2026 21:00:12 +0000 ROA not before: Sun 07 Jun 2026 21:00:12 +0000 ROA not after: Sat 05 Sep 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.33.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:18:ae:f6:55:37:9d:5c:8d:ee:17:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 7 21:00:12 2026 GMT Not After : Sep 5 21:00:12 2026 GMT Subject: CN=18bc064b-3b12-42f2-9db7-ea54facbc197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d1:13:26:a3:67:52:56:dc:92:f2:74:d0:02: c2:00:82:f0:6f:43:88:1d:90:a0:c8:0e:ac:ce:7b: 8e:79:6c:55:ed:4c:a4:c9:54:2a:01:3e:08:a3:3d: 8d:f9:e0:14:57:fa:b8:7e:ad:17:03:03:d9:64:6d: b8:a1:b3:a4:4d:f4:84:8f:1d:b0:a9:04:a4:cb:6d: da:8b:38:76:cb:e1:e2:3c:44:44:7c:90:11:38:ea: 8a:c9:ce:ee:c0:8a:6b:d7:e1:a1:73:f7:fb:75:53: ed:a6:23:52:41:d6:c5:58:e5:f7:1b:38:1a:c8:e1: 88:83:2d:60:8d:e4:7c:9a:44:4e:20:46:2b:06:77: 6f:52:2f:15:99:fe:1f:4b:fa:2f:18:c7:87:8b:09: 39:0e:8f:9d:dd:50:37:f9:83:fc:b0:35:4d:b1:97: 35:07:a9:2c:bf:5e:b0:fb:3b:75:a0:c6:52:75:51: 0a:7b:ea:5f:17:6f:1d:e4:05:45:8d:48:49:f3:2f: 82:b0:19:3f:cc:b0:5a:4c:f6:20:52:b7:d1:04:81: 8b:e8:b5:23:1c:0b:17:db:87:d3:e4:bd:3f:09:db: d8:b3:66:17:74:ad:f9:04:ae:9d:73:20:83:f0:da: f0:78:31:e7:95:cb:48:55:03:da:c5:21:eb:80:ca: 49:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B1:15:41:12:3D:43:A9:5C:64:7C:24:CC:20:20:08:67:F1:81:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5372288-b2a4-3d59-81bc-41226acf8120.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:7d:9d:b1:4e:62:87:55:d7:22:d8:a7:09:eb:fe:55:7d:5e: 07:2a:f3:19:67:31:46:7c:dc:b6:e3:10:32:f7:ac:f3:37:8d: 1e:d2:69:20:96:c9:f3:c4:6f:dc:35:45:2e:a9:2b:49:98:35: 0c:28:6f:9b:14:1d:ce:5c:d7:29:8c:0f:5a:17:1a:93:f6:a2: 96:b0:0c:0d:df:cd:79:8f:e9:b9:1e:79:59:78:aa:52:b8:85: 8a:ff:02:ea:6f:41:e7:8b:52:c6:64:35:96:7f:1e:ec:24:04: 9a:ff:c2:0a:4f:b4:65:5b:74:00:b2:93:af:ff:d4:d6:07:95: 17:a8:49:b0:95:c3:2e:2d:03:4c:42:b2:2a:90:8c:ca:06:09: 1f:9b:9a:7d:5f:80:0a:3d:d7:d0:7b:94:45:a2:ab:af:5e:79: 87:dc:78:9e:9a:9b:b9:e0:e3:b2:b8:d1:2a:0c:a7:77:9d:17: f3:ba:b5:07:73:a1:43:b4:6f:f4:50:41:00:21:12:f1:4a:22: 96:a8:dc:5a:b8:44:c5:31:b8:77:70:ed:a6:a8:f9:de:64:08: a0:dd:5e:c9:44:7b:55:45:ba:f3:ec:f8:cd:bc:56:1c:4d:d4: ed:26:82:c6:86:e4:2a:7e:8f:3a:e3:a9:d9:42:cf:ce:92:b8: 91:bd:25:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4YrvZVN51cje4XIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk MThiYzA2NGItM2IxMi00MmYyLTlkYjctZWE1NGZhY2JjMTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9ETJqNnUlbckvJ00ALCAILwb0OIHZCgyA6s znuOeWxV7UykyVQqAT4Ioz2N+eAUV/q4fq0XAwPZZG24obOkTfSEjx2wqQSky23a izh2y+HiPEREfJAROOqKyc7uwIpr1+Ghc/f7dVPtpiNSQdbFWOX3GzgayOGIgy1g jeR8mkROIEYrBndvUi8Vmf4fS/ovGMeHiwk5Do+d3VA3+YP8sDVNsZc1B6ksv16w +zt1oMZSdVEKe+pfF28d5AVFjUhJ8y+CsBk/zLBaTPYgUrfRBIGL6LUjHAsX24fT 5L0/CdvYs2YXdK35BK6dcyCD8NrweDHnlctIVQPaxSHrgMpJhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKxFUESPUOpXGR8JMwgIAhn8YE4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjUzNzIyODgtYjJhNC0z ZDU5LTgxYmMtNDEyMjZhY2Y4MTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIt9nbFOYodV1yLYpwnr/lV9Xgcq8xlnMUZ83LbjEDL3rPM3jR7SaSCW yfPEb9w1RS6pK0mYNQwob5sUHc5c1ymMD1oXGpP2opawDA3fzXmP6bkeeVl4qlK4 hYr/AupvQeeLUsZkNZZ/HuwkBJr/wgpPtGVbdACyk6//1NYHlReoSbCVwy4tA0xC siqQjMoGCR+bmn1fgAo919B7lEWiq69eeYfceJ6am7ng47K40SoMp3edF/O6tQdz oUO0b/RQQQAhEvFKIpao3Fq4RMUxuHdw7aao+d5kCKDdXslEe1VFuvPs+M28VhxN 1O0mgsaG5Cp+jzrjqdlCz86SuJG9Je4= -----END CERTIFICATE-----Generated at Sun Jun 14 00:15:16 2026 by rpki-client