$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3dc0fad7-7fb6-3ddd-9a11-e7aeaf916437.roa File: 3dc0fad7-7fb6-3ddd-9a11-e7aeaf916437.roa (raw, json) Hash identifier: iOGhsvDpfuPaBdrFlqMEWnAQlJoxQgBTL7qgJGzSeR8= Subject key identifier: 6B:EF:23:7F:B6:2E:45:63:40:94:1E:71:4C:1A:3F:A2:D0:F6:E8:3C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DDD207E6609794A798F2D4A80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3dc0fad7-7fb6-3ddd-9a11-e7aeaf916437.roa Signing time: Sun 17 May 2026 13:00:32 +0000 ROA not before: Sun 17 May 2026 13:00:32 +0000 ROA not after: Sat 15 Aug 2026 13:00:32 +0000 asID: 8069 IP address blocks: 20.33.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:dd:20:7e:66:09:79:4a:79:8f:2d:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 17 13:00:32 2026 GMT Not After : Aug 15 13:00:32 2026 GMT Subject: CN=75ee4b8f-9f30-418f-9bb9-70fe947d18e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:db:fc:44:3d:43:81:83:eb:5e:f6:33:52:4f: 3b:75:f1:59:1c:8e:0c:bc:fe:6f:20:f2:f3:0a:7d: 49:78:67:e3:a6:c0:9a:68:50:92:3a:f7:30:de:56: 5a:61:e1:35:8e:46:c9:7b:fa:bb:05:8f:cf:78:1e: a0:f2:cf:4a:7e:dc:2c:ec:da:2b:9c:75:fd:46:3c: f2:e0:b1:69:03:30:61:30:19:2b:7b:23:e6:4c:ae: 81:91:ec:51:c8:f3:e4:0c:6b:0b:05:47:3a:98:33: cd:46:f1:f2:97:af:01:92:d8:63:d7:5c:80:f2:98: 66:72:6e:c7:e1:b9:a7:54:9b:b6:ec:59:b5:30:18: 1f:51:3e:8c:83:ed:2c:41:7d:6e:f9:30:21:89:dc: 55:0d:fd:e1:11:31:b5:bc:45:68:3e:53:3e:3a:ca: f3:66:c0:19:a6:33:68:86:7c:32:e6:93:b2:90:73: 88:aa:b5:2a:e4:c6:4d:de:09:48:54:e3:df:70:cd: 41:ce:70:9e:bc:8e:b3:f6:79:04:7a:f9:4a:f4:e7: e4:2a:bf:2e:ee:26:a4:ef:c6:02:df:d6:07:e3:ce: e9:e6:b3:ea:55:7b:2a:62:5a:de:78:29:89:1b:38: fb:29:0e:5f:ae:e4:21:9e:89:a1:2a:bb:87:1d:a6: 31:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:EF:23:7F:B6:2E:45:63:40:94:1E:71:4C:1A:3F:A2:D0:F6:E8:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3dc0fad7-7fb6-3ddd-9a11-e7aeaf916437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:0f:6d:55:24:9c:50:b1:da:f6:fc:44:1b:2e:69:7f:94:d1: d4:76:9a:02:65:cd:81:b0:19:fb:39:ef:c5:d1:17:65:bf:2b: e7:13:17:c4:43:40:57:46:39:7a:85:73:c5:c6:d1:1a:04:f2: 45:80:47:34:b1:bc:a9:58:ca:f6:5e:3c:bf:cb:53:a8:df:17: 4c:de:4c:e0:8d:9a:a2:dc:50:e2:8e:76:b3:58:9d:83:38:74: f7:c4:07:de:f1:41:72:17:46:d3:20:f2:1a:69:78:0a:98:4b: 3f:44:cd:55:c9:41:ab:62:d3:98:b0:69:4d:9b:65:c8:17:18: 86:bb:16:ee:72:ba:7b:ee:27:2a:ed:b1:d8:b5:29:cc:df:1e: 7c:c7:7a:51:97:54:3c:9f:97:55:94:2a:a5:d6:63:c6:e6:83: c7:9c:f0:04:0a:cd:8b:fc:6c:a6:10:a1:40:55:4c:05:4e:74: 76:5d:86:93:19:f3:84:34:b1:d2:c6:f0:21:c9:5d:98:92:c1: 7d:0a:24:9b:f8:51:0f:fa:98:60:ad:65:73:09:94:fa:20:27: 10:e9:ab:41:a2:39:9d:ff:23:ac:f1:b4:29:03:19:ee:8a:54: eb:2e:e6:61:91:48:e8:08:16:f1:50:07:32:f6:50:34:dd:22: 80:f9:88:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3dIH5mCXlKeY8tSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUxNzEzMDAzMloXDTI2MDgxNTEzMDAzMlowLzEtMCsGA1UEAxMk NzVlZTRiOGYtOWYzMC00MThmLTliYjktNzBmZTk0N2QxOGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudv8RD1DgYPrXvYzUk87dfFZHI4MvP5vIPLz Cn1JeGfjpsCaaFCSOvcw3lZaYeE1jkbJe/q7BY/PeB6g8s9Kftws7NornHX9Rjzy 4LFpAzBhMBkreyPmTK6BkexRyPPkDGsLBUc6mDPNRvHyl68Bkthj11yA8phmcm7H 4bmnVJu27Fm1MBgfUT6Mg+0sQX1u+TAhidxVDf3hETG1vEVoPlM+OsrzZsAZpjNo hnwy5pOykHOIqrUq5MZN3glIVOPfcM1BznCevI6z9nkEevlK9OfkKr8u7iak78YC 39YH487p5rPqVXsqYlreeCmJGzj7KQ5fruQhnomhKruHHaYxqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvvI3+2LkVjQJQecUwaP6LQ9ug8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2RjMGZhZDctN2ZiNi0z ZGRkLTlhMTEtZTdhZWFmOTE2NDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEPbVUknFCx2vb8RBsuaX+U0dR2mgJlzYGwGfs578XRF2W/K+cTF8RD QFdGOXqFc8XG0RoE8kWARzSxvKlYyvZePL/LU6jfF0zeTOCNmqLcUOKOdrNYnYM4 dPfEB97xQXIXRtMg8hppeAqYSz9EzVXJQati05iwaU2bZcgXGIa7Fu5yunvuJyrt sdi1KczfHnzHelGXVDyfl1WUKqXWY8bmg8ec8AQKzYv8bKYQoUBVTAVOdHZdhpMZ 84Q0sdLG8CHJXZiSwX0KJJv4UQ/6mGCtZXMJlPogJxDpq0GiOZ3/I6zxtCkDGe6K VOsu5mGRSOgIFvFQBzL2UDTdIoD5iIY= -----END CERTIFICATE-----Generated at Sat Jun 6 14:44:54 2026 by rpki-client