$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfc48a13-8ef5-3e8c-a89e-d0cca5676ba0.roa File: cfc48a13-8ef5-3e8c-a89e-d0cca5676ba0.roa (raw, json) Hash identifier: p0JzdjuYxXYSbmqPzSuOlxkVQSV52jSblBVgq75+TVE= Subject key identifier: 01:EC:3F:F3:04:DD:FF:68:C2:A8:DB:88:4F:D3:E8:E2:A7:96:96:09 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DDD207DD205F0399728430BC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfc48a13-8ef5-3e8c-a89e-d0cca5676ba0.roa Signing time: Sun 17 May 2026 13:00:32 +0000 ROA not before: Sun 17 May 2026 13:00:32 +0000 ROA not after: Sat 15 Aug 2026 13:00:32 +0000 asID: 8069 IP address blocks: 20.33.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:dd:20:7d:d2:05:f0:39:97:28:43:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 17 13:00:32 2026 GMT Not After : Aug 15 13:00:32 2026 GMT Subject: CN=aca9a01a-e0c9-4527-8eb6-e048151c41a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ad:ae:3f:2a:0a:e6:fc:b7:97:df:bc:76:e7: ec:a4:25:45:1c:90:b9:58:83:34:40:0f:d6:9a:1f: 46:d9:75:fb:7a:f3:7e:70:d6:91:02:26:36:be:c0: e6:07:25:90:23:0e:9d:72:a5:4f:d6:d8:4e:09:a2: 33:8b:07:eb:f7:44:73:57:be:91:be:06:c2:85:29: 1d:7e:1a:fb:38:17:e5:e5:3b:f2:7f:df:e8:a9:ad: 49:06:c1:a4:9f:bc:16:6a:c8:d7:66:f9:22:cf:36: f6:00:f9:b4:c5:80:03:53:99:d5:ca:04:8b:09:46: 39:06:10:7f:a0:41:41:c4:5d:b4:5c:ec:25:6e:dc: 96:63:e6:d3:6c:5e:72:63:ca:2d:34:e8:d5:48:5c: 2c:b1:fd:c6:93:72:0a:5c:c5:55:40:81:af:58:82: 88:7e:e4:50:9c:c1:f7:1a:b3:14:8b:eb:82:f6:fd: 32:52:48:8c:d5:46:b5:dd:bb:c1:19:a1:d6:77:2b: c1:0a:f1:31:f8:12:5a:79:98:ef:5e:cf:81:33:cd: 1e:39:32:12:e4:5d:31:fe:ce:c1:75:e7:d2:8b:48: 8b:d0:23:32:11:a9:aa:2e:ad:01:52:02:ca:3d:9a: a5:58:46:06:68:4b:1f:1d:76:a4:e7:2e:27:ae:11: 63:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EC:3F:F3:04:DD:FF:68:C2:A8:DB:88:4F:D3:E8:E2:A7:96:96:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cfc48a13-8ef5-3e8c-a89e-d0cca5676ba0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:2b:13:28:11:40:19:72:ee:a2:02:3a:93:3b:2d:9a:ae:e4: 77:e0:7d:59:c9:7b:fd:b1:7b:fa:34:d2:be:a4:19:72:8d:60: ad:76:3a:00:5e:1d:48:11:cd:19:de:24:c0:cb:80:2b:e0:ae: db:1c:14:fa:bb:0d:65:1f:b8:f8:b8:bb:5d:e7:92:d4:5c:e3: 8b:19:fd:ba:e2:c7:4d:fa:ab:90:a6:db:69:d6:bb:27:55:1b: b1:c4:e7:0f:08:e0:0b:f2:2b:2d:05:af:23:3a:08:1c:56:08: a3:6c:83:72:7b:2d:f8:ec:38:59:32:a2:11:c0:c3:4b:91:22: 20:70:dc:cb:80:bb:09:78:a0:e4:a6:a6:6d:4e:17:fa:33:3d: 38:87:82:1a:c1:c1:3c:14:57:98:b4:d7:4c:d9:62:49:de:ee: a1:91:b0:90:ce:14:3c:b8:f6:71:f9:3d:4d:24:c1:ba:a3:77: 91:ff:73:90:31:48:a3:e9:ae:a0:7d:27:08:45:6c:b6:67:4d: 21:29:90:62:c1:54:aa:f1:04:b1:77:44:63:e6:23:13:4f:86: 3b:05:e5:f0:85:34:e7:14:9d:88:a3:19:18:90:b1:3a:94:b6: b4:f4:2b:c8:8b:85:a9:42:4d:c0:3b:08:c9:ad:34:78:7e:8b: 38:24:85:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3dIH3SBfA5lyhDC8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUxNzEzMDAzMloXDTI2MDgxNTEzMDAzMlowLzEtMCsGA1UEAxMk YWNhOWEwMWEtZTBjOS00NTI3LThlYjYtZTA0ODE1MWM0MWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgK2uPyoK5vy3l9+8dufspCVFHJC5WIM0QA/W mh9G2XX7evN+cNaRAiY2vsDmByWQIw6dcqVP1thOCaIziwfr90RzV76RvgbChSkd fhr7OBfl5Tvyf9/oqa1JBsGkn7wWasjXZvkizzb2APm0xYADU5nVygSLCUY5BhB/ oEFBxF20XOwlbtyWY+bTbF5yY8otNOjVSFwssf3Gk3IKXMVVQIGvWIKIfuRQnMH3 GrMUi+uC9v0yUkiM1Ua13bvBGaHWdyvBCvEx+BJaeZjvXs+BM80eOTIS5F0x/s7B defSi0iL0CMyEamqLq0BUgLKPZqlWEYGaEsfHXak5y4nrhFjEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHsP/ME3f9owqjbiE/T6OKnlpYJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2ZjNDhhMTMtOGVmNS0z ZThjLWE4OWUtZDBjY2E1Njc2YmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMrEygRQBly7qICOpM7LZqu5HfgfVnJe/2xe/o00r6kGXKNYK12OgBe HUgRzRneJMDLgCvgrtscFPq7DWUfuPi4u13nktRc44sZ/brix036q5Cm22nWuydV G7HE5w8I4AvyKy0FryM6CBxWCKNsg3J7LfjsOFkyohHAw0uRIiBw3MuAuwl4oOSm pm1OF/ozPTiHghrBwTwUV5i010zZYkne7qGRsJDOFDy49nH5PU0kwbqjd5H/c5Ax SKPprqB9JwhFbLZnTSEpkGLBVKrxBLF3RGPmIxNPhjsF5fCFNOcUnYijGRiQsTqU trT0K8iLhalCTcA7CMmtNHh+izgkhSA= -----END CERTIFICATE-----Generated at Sat Jun 6 14:46:23 2026 by rpki-client