$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/969933aa-bc02-357d-875f-85af16f668ef.roa File: 969933aa-bc02-357d-875f-85af16f668ef.roa (raw, json) Hash identifier: 6GBJjqdi9Kp4X2mB+Qv19Y5SCT7Q2aH/Cvuyv06VUSU= Subject key identifier: CB:19:E4:3C:51:D2:E1:65:D5:D8:7A:1D:25:9E:21:B2:B5:BA:F3:C6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DDD207EA9C22A61B0598422A0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/969933aa-bc02-357d-875f-85af16f668ef.roa Signing time: Sun 17 May 2026 13:00:32 +0000 ROA not before: Sun 17 May 2026 13:00:32 +0000 ROA not after: Sat 15 Aug 2026 13:00:32 +0000 asID: 8069 IP address blocks: 20.33.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:dd:20:7e:a9:c2:2a:61:b0:59:84:22:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 17 13:00:32 2026 GMT Not After : Aug 15 13:00:32 2026 GMT Subject: CN=f198ca59-c16b-408b-92f6-48881ee1dc3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:67:7e:06:17:be:05:68:5c:57:2a:2f:3b:97: a9:96:ab:4a:b6:37:5a:33:59:df:47:83:75:ec:6e: 88:0f:5c:8b:b8:1f:f0:dd:53:51:c0:3c:d5:80:d5: 5b:4f:dd:e9:58:b1:95:ee:cb:c4:af:7b:3a:eb:83: f7:ed:d9:6d:07:68:5b:2e:af:97:94:8b:5d:ef:a7: 61:7b:77:8a:fb:76:de:be:6a:68:b7:e1:78:6c:0e: 8c:29:db:90:6c:e8:bf:de:6a:24:bb:ad:4c:98:4d: 09:68:36:e8:c8:aa:1a:b0:aa:54:79:05:8c:57:3b: 27:a6:1c:34:e2:d4:0a:d8:1e:b1:02:da:b8:1a:d8: 10:51:b9:fd:3f:5d:39:e2:49:c9:4c:08:72:1d:09: 97:d5:09:c5:00:fc:03:24:bc:bf:5c:32:14:c9:3c: d1:91:c9:86:f3:89:4c:9e:24:c4:db:a3:c0:93:62: a3:db:e1:85:e6:c6:35:c4:9c:42:96:8d:88:ca:19: ca:c9:e9:2e:5b:2a:34:bc:b1:d6:b3:49:5b:46:a4: 1e:e6:d1:41:fb:26:37:be:82:a9:e8:ec:ca:00:47: 37:0c:cf:72:7d:c9:38:38:bd:fe:01:37:30:97:bf: 85:ac:b6:bc:0f:fb:08:ee:f8:a3:86:67:f8:f9:20: ef:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:19:E4:3C:51:D2:E1:65:D5:D8:7A:1D:25:9E:21:B2:B5:BA:F3:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/969933aa-bc02-357d-875f-85af16f668ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:57:16:29:84:78:a9:78:fa:3f:01:34:6b:cc:7a:62:2b:70: 94:38:fc:2d:3f:c2:9e:96:57:9d:8a:12:83:c8:cb:c2:da:dd: 49:82:9a:2d:d9:2f:08:72:a2:b4:4e:a8:6c:8e:dc:5d:b9:89: 0e:10:da:ee:2d:70:44:c9:c7:8c:63:61:4e:82:d3:3a:e5:16: f0:26:a1:ec:e7:97:ac:59:85:56:fd:4c:88:aa:65:09:e7:66: b2:c5:e3:8e:b8:33:f9:08:64:52:66:4b:f8:11:fb:60:d2:42: 39:d3:7c:69:04:f9:79:78:81:43:5b:91:cd:c4:ed:5d:9f:90: 9a:da:05:36:fa:dc:71:fc:a9:38:f4:1d:bc:16:5c:27:c7:11: 2a:a7:ea:f2:5c:2c:12:9a:f5:f5:a0:74:16:18:de:4b:bc:95: a9:8a:28:3d:c5:e8:35:cb:12:51:72:af:66:d2:de:bf:db:c6: 17:e8:31:2e:76:dc:07:dc:0a:72:0e:dd:cd:ff:05:a3:fe:c7: da:59:ab:8d:a3:d0:98:5a:12:e6:13:95:7b:27:8a:a9:5d:a2: 74:d3:ec:d0:86:ec:8f:13:03:a2:1b:ff:6c:a3:c4:46:26:d3: 24:1c:55:32:2d:d3:ee:16:35:33:a4:96:ca:78:d5:e6:59:28: a2:27:f5:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3dIH6pwiphsFmEIqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUxNzEzMDAzMloXDTI2MDgxNTEzMDAzMlowLzEtMCsGA1UEAxMk ZjE5OGNhNTktYzE2Yi00MDhiLTkyZjYtNDg4ODFlZTFkYzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2d+Bhe+BWhcVyovO5eplqtKtjdaM1nfR4N1 7G6ID1yLuB/w3VNRwDzVgNVbT93pWLGV7svEr3s664P37dltB2hbLq+XlItd76dh e3eK+3bevmpot+F4bA6MKduQbOi/3moku61MmE0JaDboyKoasKpUeQWMVzsnphw0 4tQK2B6xAtq4GtgQUbn9P1054knJTAhyHQmX1QnFAPwDJLy/XDIUyTzRkcmG84lM niTE26PAk2Kj2+GF5sY1xJxClo2IyhnKyekuWyo0vLHWs0lbRqQe5tFB+yY3voKp 6OzKAEc3DM9yfck4OL3+ATcwl7+FrLa8D/sI7vijhmf4+SDv9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsZ5DxR0uFl1dh6HSWeIbK1uvPGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTY5OTMzYWEtYmMwMi0z NTdkLTg3NWYtODVhZjE2ZjY2OGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9XFimEeKl4+j8BNGvMemIrcJQ4/C0/wp6WV52KEoPIy8La3UmCmi3Z LwhyorROqGyO3F25iQ4Q2u4tcETJx4xjYU6C0zrlFvAmoeznl6xZhVb9TIiqZQnn ZrLF4464M/kIZFJmS/gR+2DSQjnTfGkE+Xl4gUNbkc3E7V2fkJraBTb63HH8qTj0 HbwWXCfHESqn6vJcLBKa9fWgdBYY3ku8lamKKD3F6DXLElFyr2bS3r/bxhfoMS52 3AfcCnIO3c3/BaP+x9pZq42j0JhaEuYTlXsniqldonTT7NCG7I8TA6Ib/2yjxEYm 0yQcVTIt0+4WNTOklsp41eZZKKIn9TA= -----END CERTIFICATE-----Generated at Sat Jun 6 14:46:29 2026 by rpki-client