$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/989bb846-baa3-3143-83bd-8768ef87ff43.roa File: 989bb846-baa3-3143-83bd-8768ef87ff43.roa (raw, json) Hash identifier: Pvk78GGiV8DTs5ChZ1kIKTzFYqv3wAqowkrot8xjxSk= Subject key identifier: D5:60:01:AC:55:99:97:6C:50:82:81:8A:3B:26:DC:93:5D:55:61:49 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DE9B08A93D7B00C05A524D6A0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/989bb846-baa3-3143-83bd-8768ef87ff43.roa Signing time: Fri 22 May 2026 01:00:24 +0000 ROA not before: Fri 22 May 2026 01:00:24 +0000 ROA not after: Thu 20 Aug 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:b0:8a:93:d7:b0:0c:05:a5:24:d6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 22 01:00:24 2026 GMT Not After : Aug 20 01:00:24 2026 GMT Subject: CN=80e201fd-df0d-4c97-960f-f046fb56737b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:51:9b:8c:af:c9:f7:34:ee:cc:41:b0:a7:3d: 91:19:f0:ce:48:2a:3c:88:e7:3d:0d:9b:a1:be:92: 16:c0:0a:6f:5f:aa:cf:a6:81:14:85:f7:e8:8d:e8: 3e:88:1c:74:9a:d8:ce:99:38:ff:c4:0f:38:b8:24: c4:bb:19:89:86:48:9e:c6:bf:4a:82:3b:ba:1e:75: a2:58:81:4b:e8:f1:20:f8:b1:b9:dd:93:67:8a:90: af:f3:d5:c6:0e:1c:44:44:f9:40:c7:79:dd:69:e4: 3f:7d:02:2a:ba:06:3b:fa:f6:38:21:30:3e:c7:33: 46:7d:6f:f9:24:27:c2:92:7b:5a:c7:1d:2f:f1:c7: 6f:b1:87:30:a7:5a:a0:a1:42:1e:6d:6a:91:45:f6: ef:c3:05:d6:5b:ed:4a:f0:d1:46:42:e4:26:33:0f: 57:f4:4c:b3:41:68:27:ad:28:24:96:0d:18:3c:17: 3f:74:73:a3:a9:7b:a5:4e:60:08:4f:3d:0f:54:e5: 31:ae:72:05:40:83:2e:21:c8:bb:9c:61:c8:94:18: fd:d8:2b:02:04:1c:95:1c:b4:8b:db:a8:f8:17:ba: b0:60:bc:ca:4e:57:de:85:3a:b3:e9:95:8c:b9:e0: 29:31:3a:a2:5f:0c:e2:ab:8c:51:3f:95:89:5e:f9: 8f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:60:01:AC:55:99:97:6C:50:82:81:8A:3B:26:DC:93:5D:55:61:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/989bb846-baa3-3143-83bd-8768ef87ff43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:e0:e0:67:2d:da:53:67:ba:e8:5f:03:8d:ee:b4:e2:3c:15: 1b:2e:32:08:e9:5e:35:e0:f6:c8:b7:d8:a5:cc:bb:ab:f5:6b: c5:f0:fa:3a:60:38:59:b2:ad:50:31:aa:35:00:71:6d:a0:65: 62:e8:05:5c:76:3a:1e:38:77:11:6a:ea:33:4a:84:39:4f:7f: a7:7c:33:51:3a:94:b1:8f:d9:cd:f1:d9:93:6f:73:df:ba:f8: f2:a2:bd:6e:4e:91:e1:14:f0:95:c3:d0:6a:34:f5:82:04:59: bf:56:ae:4a:8c:d8:67:d6:0a:44:29:89:8c:85:3f:77:bd:58: 83:5a:3d:d4:a0:4b:6c:86:64:b4:c6:80:e9:84:85:08:ba:91: 15:3e:12:85:fd:e4:e8:81:48:d4:33:31:14:54:cb:2a:db:75: ca:9b:e2:0b:48:73:b3:8c:e3:db:d6:f7:97:c5:7a:ab:db:77: a7:dd:9f:56:5e:3c:2b:d0:d3:c6:5c:f4:8f:6d:2f:7d:b1:4e: 06:05:2e:fc:5a:ad:1b:f0:fe:f7:f7:94:66:67:06:1a:01:f3: df:4e:b3:4d:4f:33:6c:a9:b2:8c:2d:00:57:29:b8:13:a2:ee: b4:45:07:6f:0f:79:1f:fc:32:a5:9f:ba:44:cb:bf:f5:c5:14: a1:3a:24:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3psIqT17AMBaUk1qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk ODBlMjAxZmQtZGYwZC00Yzk3LTk2MGYtZjA0NmZiNTY3MzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21GbjK/J9zTuzEGwpz2RGfDOSCo8iOc9DZuh vpIWwApvX6rPpoEUhffojeg+iBx0mtjOmTj/xA84uCTEuxmJhkiexr9Kgju6HnWi WIFL6PEg+LG53ZNnipCv89XGDhxERPlAx3ndaeQ/fQIqugY7+vY4ITA+xzNGfW/5 JCfCkntaxx0v8cdvsYcwp1qgoUIebWqRRfbvwwXWW+1K8NFGQuQmMw9X9EyzQWgn rSgklg0YPBc/dHOjqXulTmAITz0PVOUxrnIFQIMuIci7nGHIlBj92CsCBByVHLSL 26j4F7qwYLzKTlfehTqz6ZWMueApMTqiXwziq4xRP5WJXvmP7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVgAaxVmZdsUIKBijsm3JNdVWFJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTg5YmI4NDYtYmFhMy0z MTQzLTgzYmQtODc2OGVmODdmZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPg4Gct2lNnuuhfA43utOI8FRsuMgjpXjXg9si32KXMu6v1a8Xw+jpg OFmyrVAxqjUAcW2gZWLoBVx2Oh44dxFq6jNKhDlPf6d8M1E6lLGP2c3x2ZNvc9+6 +PKivW5OkeEU8JXD0Go09YIEWb9WrkqM2GfWCkQpiYyFP3e9WINaPdSgS2yGZLTG gOmEhQi6kRU+EoX95OiBSNQzMRRUyyrbdcqb4gtIc7OM49vW95fFeqvbd6fdn1Ze PCvQ08Zc9I9tL32xTgYFLvxarRvw/vf3lGZnBhoB899Os01PM2ypsowtAFcpuBOi 7rRFB28PeR/8MqWfukTLv/XFFKE6JDw= -----END CERTIFICATE-----Generated at Sat Jun 6 14:47:10 2026 by rpki-client