$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5649da9b-3839-3d07-bcad-0c91e11ba7ce.roa File: 5649da9b-3839-3d07-bcad-0c91e11ba7ce.roa (raw, json) Hash identifier: PMlXMT2wiXMD8Jz9WzsgJ4ybKxpnE0jzc3fvl8pMD9Y= Subject key identifier: C3:53:2C:AA:00:59:46:E5:AC:52:A0:90:D4:0E:C8:54:06:72:77:D1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DE9B08A86D9AA42F353D98C80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5649da9b-3839-3d07-bcad-0c91e11ba7ce.roa Signing time: Fri 22 May 2026 01:00:24 +0000 ROA not before: Fri 22 May 2026 01:00:24 +0000 ROA not after: Thu 20 Aug 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:b0:8a:86:d9:aa:42:f3:53:d9:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 22 01:00:24 2026 GMT Not After : Aug 20 01:00:24 2026 GMT Subject: CN=eeeb079e-bc3a-4e20-88d1-79d0e011727a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:85:f5:14:2b:1c:2f:5c:71:95:4d:ab:74:b3: 42:45:aa:68:3c:3d:58:05:f2:da:df:cc:ab:78:f5: 16:24:fd:fc:19:08:53:0a:ab:7f:dc:5b:a2:b3:dd: 84:ad:06:7f:29:64:f2:3c:8a:2a:37:64:fe:ad:0a: fb:5c:ff:d4:49:0c:26:ed:5b:18:f9:4b:38:d3:6c: e0:ff:37:08:1f:ed:be:bd:36:4a:d5:22:d0:6e:da: b2:ff:dc:d1:d0:7a:59:03:f3:b6:c2:0e:fd:ef:f1: ed:0f:b9:b3:34:1f:ad:e0:87:b1:36:a5:90:81:7a: 77:f2:83:ff:b6:cb:cb:fd:3d:1a:95:2d:8c:37:13: 96:dc:2a:fc:fa:6c:c1:32:ff:31:ba:e0:a4:7e:a7: 49:76:21:db:5b:8e:fc:28:de:f5:63:4c:ed:2b:59: d8:70:a3:24:0c:0f:ac:91:c8:6c:30:18:10:2b:2a: 22:53:6f:93:6d:9f:eb:bf:6a:d7:99:93:57:9c:ad: d4:ba:15:7e:34:ad:c0:8b:16:eb:99:70:9e:28:1b: 92:63:39:1f:2f:4f:03:a4:4d:66:94:bb:06:ce:cb: fb:b0:0e:5c:ec:16:56:79:c2:a4:ff:1d:6f:8b:ca: 3a:d8:52:28:c0:bc:af:3b:cc:f4:5f:b4:ff:3d:be: 65:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:53:2C:AA:00:59:46:E5:AC:52:A0:90:D4:0E:C8:54:06:72:77:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5649da9b-3839-3d07-bcad-0c91e11ba7ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:bb:99:a1:3c:34:13:67:33:42:58:2d:c8:cd:b7:42:30:b8: 66:52:28:eb:8a:1d:96:2b:9e:fb:77:de:5a:87:88:c1:59:09: 1a:cb:ed:15:45:01:6e:1c:2a:a4:14:bd:66:fe:43:7f:99:da: 05:bc:ea:c5:d1:c3:ac:ff:83:87:82:85:65:58:5e:c7:2a:8d: 9b:ba:fa:07:ca:79:0b:dc:00:e7:51:2c:d8:55:af:ea:17:34: de:b0:bd:6d:8b:8d:f2:3c:f6:db:c2:b7:60:df:db:17:55:c5: 78:37:28:e9:56:ff:75:33:5f:b4:07:a9:99:3d:2b:96:81:05: cf:df:ba:30:75:19:c8:1b:95:4f:d3:3f:27:45:c2:c3:4b:1a: 30:64:61:88:d2:97:5d:b1:3f:0f:10:24:64:da:09:bd:48:1e: 06:dc:95:f7:0d:4b:dd:67:7e:0a:bb:8e:9e:32:d7:23:9a:04: c0:20:e9:fb:78:39:19:e3:9c:24:d2:bc:91:dc:63:f6:16:b5: f5:87:1b:b5:59:b9:de:b0:ff:01:35:b0:c1:f2:be:44:7a:77: 39:85:2d:4a:b6:14:9d:9d:f7:2b:0b:6d:88:25:d4:4c:85:04: 49:34:aa:e0:da:ef:90:0c:54:19:5b:f5:39:c8:c9:76:35:78: 95:31:79:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3psIqG2apC81PZjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk ZWVlYjA3OWUtYmMzYS00ZTIwLTg4ZDEtNzlkMGUwMTE3MjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYX1FCscL1xxlU2rdLNCRapoPD1YBfLa38yr ePUWJP38GQhTCqt/3Fuis92ErQZ/KWTyPIoqN2T+rQr7XP/USQwm7VsY+Us402zg /zcIH+2+vTZK1SLQbtqy/9zR0HpZA/O2wg797/HtD7mzNB+t4IexNqWQgXp38oP/ tsvL/T0alS2MNxOW3Cr8+mzBMv8xuuCkfqdJdiHbW478KN71Y0ztK1nYcKMkDA+s kchsMBgQKyoiU2+TbZ/rv2rXmZNXnK3UuhV+NK3AixbrmXCeKBuSYzkfL08DpE1m lLsGzsv7sA5c7BZWecKk/x1vi8o62FIowLyvO8z0X7T/Pb5ldwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNTLKoAWUblrFKgkNQOyFQGcnfRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTY0OWRhOWItMzgzOS0z ZDA3LWJjYWQtMGM5MWUxMWJhN2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAK7maE8NBNnM0JYLcjNt0IwuGZSKOuKHZYrnvt33lqHiMFZCRrL7RVF AW4cKqQUvWb+Q3+Z2gW86sXRw6z/g4eChWVYXscqjZu6+gfKeQvcAOdRLNhVr+oX NN6wvW2LjfI89tvCt2Df2xdVxXg3KOlW/3UzX7QHqZk9K5aBBc/fujB1GcgblU/T PydFwsNLGjBkYYjSl12xPw8QJGTaCb1IHgbclfcNS91nfgq7jp4y1yOaBMAg6ft4 ORnjnCTSvJHcY/YWtfWHG7VZud6w/wE1sMHyvkR6dzmFLUq2FJ2d9ysLbYgl1EyF BEk0quDa75AMVBlb9TnIyXY1eJUxeSU= -----END CERTIFICATE-----Generated at Sat Jun 6 14:46:44 2026 by rpki-client