$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d851fbe8-225a-3c6f-8e78-4c283a99fd68.roa File: d851fbe8-225a-3c6f-8e78-4c283a99fd68.roa (raw, json) Hash identifier: BlF2c7tDofitdO1z8x1AzXtFsa2MF00KZPLdIZ3WN5M= Subject key identifier: 38:B2:96:E5:64:E0:92:0F:AD:DF:EB:22:7F:1D:9A:D6:1B:21:D1:7D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E1E44921609DAC7345C711FC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d851fbe8-225a-3c6f-8e78-4c283a99fd68.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.33.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:92:16:09:da:c7:34:5c:71:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=c319ccc8-85df-4850-a1c4-fe2c9c63717b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:58:6b:44:be:19:fd:3c:3e:ef:c5:87:b9:d0: 71:97:f3:f5:7c:49:f5:fd:6c:0e:bc:17:7c:e1:00: 35:cc:47:dc:df:71:e0:e3:0e:45:4d:2a:4c:4d:7f: f7:86:89:a9:ab:47:d6:c2:7e:69:04:8d:7d:46:7f: 1c:17:1f:91:ad:b8:64:16:54:de:6f:33:51:7b:09: 81:ba:c2:16:d8:ab:89:52:8c:d1:94:ff:0f:5b:26: f3:43:a2:c6:b6:cf:65:d0:97:66:5e:c9:70:64:b7: d8:5b:bc:dd:9a:9c:d5:15:1a:ff:57:35:a4:5f:58: 2e:8e:82:f6:2e:7d:c5:82:32:4c:1e:ba:3a:da:ac: 05:8a:10:03:ff:bf:87:9e:cd:1a:ef:60:0b:b1:91: 71:62:96:94:fe:36:24:01:73:90:01:ba:ff:e4:3a: a6:7e:59:06:1b:3c:35:53:82:32:da:06:5a:ef:32: b0:4a:a5:9e:ef:67:48:25:1c:49:9a:f7:5b:98:8a: b5:66:77:be:13:d9:ce:8c:ce:3c:cb:66:38:c6:55: af:f4:1d:51:80:4c:5c:f0:05:71:79:14:ce:cc:5a: 06:65:50:87:d9:c3:6b:86:c7:54:21:86:de:55:bd: 11:4d:8f:25:b5:c1:51:57:fc:7b:28:d1:e1:6e:15: 87:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B2:96:E5:64:E0:92:0F:AD:DF:EB:22:7F:1D:9A:D6:1B:21:D1:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d851fbe8-225a-3c6f-8e78-4c283a99fd68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:47:6d:49:9a:fb:5f:c6:e7:6c:5d:bb:0c:c9:bf:d2:a3:a6: 09:c1:a6:28:f4:2b:2c:78:7e:0f:75:a6:19:94:27:26:09:1f: e3:e3:33:03:f7:5c:b5:05:6e:b6:1d:05:5e:57:e1:7a:e8:f3: 24:30:6f:61:87:79:5e:e4:9a:3c:af:29:72:d9:7f:f8:cf:ab: 00:f6:a9:d8:c7:ff:78:32:95:56:94:a7:bd:d2:70:28:af:df: ad:6a:9f:03:91:34:23:e9:a7:0c:00:3b:d0:77:92:cb:6e:82: a0:5d:ee:c4:76:d9:29:18:56:03:e0:19:b4:05:df:1c:8e:d9: 42:67:11:17:c0:cc:13:d7:17:e0:50:cf:ca:fb:f2:ca:99:c0: 99:f4:27:c2:49:90:9b:f3:4b:b1:a1:a7:54:50:3f:82:0c:06: 56:89:cc:10:4e:c2:d9:73:dd:69:f1:9f:ea:fd:51:12:c0:7b: af:5c:0a:11:a6:47:b7:60:d5:aa:3b:c2:35:16:6c:f4:30:a2: 79:35:2c:a0:b2:84:8e:20:14:6c:40:00:ae:4b:4e:ea:d8:37: fa:a2:e1:c7:bd:52:09:b1:87:98:3e:87:00:fa:7b:d5:32:57: 0e:f8:4e:1c:48:c2:95:8b:be:db:2d:e9:62:d5:cb:fc:c8:77: 43:e2:f0:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRJIWCdrHNFxxH8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk YzMxOWNjYzgtODVkZi00ODUwLWExYzQtZmUyYzljNjM3MTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVhrRL4Z/Tw+78WHudBxl/P1fEn1/WwOvBd8 4QA1zEfc33Hg4w5FTSpMTX/3hompq0fWwn5pBI19Rn8cFx+RrbhkFlTebzNRewmB usIW2KuJUozRlP8PWybzQ6LGts9l0JdmXslwZLfYW7zdmpzVFRr/VzWkX1gujoL2 Ln3FgjJMHro62qwFihAD/7+Hns0a72ALsZFxYpaU/jYkAXOQAbr/5DqmflkGGzw1 U4Iy2gZa7zKwSqWe72dIJRxJmvdbmIq1Zne+E9nOjM48y2Y4xlWv9B1RgExc8AVx eRTOzFoGZVCH2cNrhsdUIYbeVb0RTY8ltcFRV/x7KNHhbhWHDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiyluVk4JIPrd/rIn8dmtYbIdF9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDg1MWZiZTgtMjI1YS0z YzZmLThlNzgtNGMyODNhOTlmZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlHbUma+1/G52xduwzJv9KjpgnBpij0Kyx4fg91phmUJyYJH+PjMwP3 XLUFbrYdBV5X4Xro8yQwb2GHeV7kmjyvKXLZf/jPqwD2qdjH/3gylVaUp73ScCiv 361qnwORNCPppwwAO9B3kstugqBd7sR22SkYVgPgGbQF3xyO2UJnERfAzBPXF+BQ z8r78sqZwJn0J8JJkJvzS7Ghp1RQP4IMBlaJzBBOwtlz3Wnxn+r9URLAe69cChGm R7dg1ao7wjUWbPQwonk1LKCyhI4gFGxAAK5LTurYN/qi4ce9Ugmxh5g+hwD6e9Uy Vw74ThxIwpWLvtst6WLVy/zId0Pi8Fo= -----END CERTIFICATE-----Generated at Sat Jun 13 22:20:42 2026 by rpki-client