$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eb03a7f7-a2fd-3faf-b4ab-371042807aa7.roa File: eb03a7f7-a2fd-3faf-b4ab-371042807aa7.roa (raw, json) Hash identifier: CsKCdY2eFrNGPoVSamxlHpsyc4G9o+GTrDoDANcrqFA= Subject key identifier: 18:67:0A:4F:E2:9F:17:57:06:C8:53:20:1D:24:9B:2D:0D:EC:46:67 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DF4DB63AC79777E4657960DC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eb03a7f7-a2fd-3faf-b4ab-371042807aa7.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:63:ac:79:77:7e:46:57:96:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=9c1b7564-e447-442c-b610-2df40e0e34f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:57:f7:23:90:1e:b6:4d:a4:6f:9d:d7:e2:85: 8a:ff:e0:7c:ce:67:96:6a:03:fc:e7:64:f2:ae:13: 70:51:46:3d:c7:15:5a:50:cb:fc:e8:70:f8:23:d1: df:47:fd:92:af:a6:77:d2:cf:4f:43:f5:a6:4c:31: b1:e4:82:17:e0:b2:79:4f:64:f7:0a:55:87:5d:d9: fe:37:74:4b:35:3f:8b:e7:15:e7:c0:ef:eb:12:c2: 10:38:45:4c:33:09:71:01:ff:0c:d6:0d:f0:18:1c: 5d:f6:8c:29:c5:52:2b:8f:05:86:c8:41:f1:5f:8e: fc:91:f7:4d:cd:2a:0f:78:8a:d4:d9:26:30:73:59: a9:e3:e3:84:1a:13:c0:cb:2e:eb:55:02:07:1b:47: cc:47:4b:b4:d7:92:e4:be:d5:1e:29:59:5c:e6:9c: 40:50:66:89:cd:e0:ae:97:35:38:35:fc:1e:eb:0c: de:88:3f:15:bf:2f:35:1d:44:ee:91:f7:39:32:45: bd:64:be:1e:4a:86:af:0b:0b:d4:9f:0e:dd:9f:11: a0:5d:43:19:1b:85:fd:1e:f9:58:02:72:50:35:d7: 05:b3:11:fd:f7:02:05:b9:e5:80:41:b9:eb:02:19: 90:00:e2:ba:c3:33:cc:b5:ed:de:03:a2:ee:39:36: 11:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:67:0A:4F:E2:9F:17:57:06:C8:53:20:1D:24:9B:2D:0D:EC:46:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eb03a7f7-a2fd-3faf-b4ab-371042807aa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:f8:a6:f0:68:d1:7d:d0:15:ab:6d:15:cd:d9:d4:db:ed:6f: a0:8e:48:02:80:49:ed:8f:1a:77:b3:8c:55:da:76:7b:ec:92: cd:bf:cb:e1:90:54:f9:bb:c0:4a:17:5b:c0:72:5a:c0:ee:0d: 9e:50:3d:fd:40:df:88:55:cc:3f:36:91:9a:63:a3:18:f7:d4: 8a:b6:03:6f:e2:24:23:5d:61:1b:9e:ec:3c:20:17:84:f5:37: 4d:f9:bf:a3:aa:08:22:f3:f8:5c:c2:0b:54:fa:d8:05:6e:26: 25:45:51:38:57:d0:9b:c5:b3:45:97:70:a1:ec:88:4d:df:74: 2c:e6:cc:06:fb:c6:ef:1c:b7:e0:fb:a7:4a:89:ec:6d:f6:bb: 26:b3:88:49:6c:a3:f4:b2:4a:81:5d:5f:f3:0b:39:52:11:ed: 1f:b0:66:13:fa:81:dd:8f:dc:66:75:d2:87:e3:cd:e9:3a:94: 42:fb:74:c7:64:6b:32:5b:92:61:04:53:29:e9:63:e6:b3:a9: 6e:dc:ca:a6:b3:b4:5f:6e:d7:de:d7:2e:ee:2a:dd:56:e2:f8: 99:d9:2b:cc:2c:71:73:ee:28:b1:79:dc:00:49:5b:ee:a6:64: d6:45:43:1a:4d:ad:16:f9:a1:2b:6e:dd:18:fa:31:50:08:52: a8:b0:be:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3022OseXd+RleWDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk OWMxYjc1NjQtZTQ0Ny00NDJjLWI2MTAtMmRmNDBlMGUzNGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllf3I5Aetk2kb53X4oWK/+B8zmeWagP852Ty rhNwUUY9xxVaUMv86HD4I9HfR/2Sr6Z30s9PQ/WmTDGx5IIX4LJ5T2T3ClWHXdn+ N3RLNT+L5xXnwO/rEsIQOEVMMwlxAf8M1g3wGBxd9owpxVIrjwWGyEHxX478kfdN zSoPeIrU2SYwc1mp4+OEGhPAyy7rVQIHG0fMR0u015LkvtUeKVlc5pxAUGaJzeCu lzU4Nfwe6wzeiD8Vvy81HUTukfc5MkW9ZL4eSoavCwvUnw7dnxGgXUMZG4X9HvlY AnJQNdcFsxH99wIFueWAQbnrAhmQAOK6wzPMte3eA6LuOTYRTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhnCk/inxdXBshTIB0kmy0N7EZnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWIwM2E3ZjctYTJmZC0z ZmFmLWI0YWItMzcxMDQyODA3YWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD34pvBo0X3QFattFc3Z1Nvtb6COSAKASe2PGnezjFXadnvsks2/y+GQ VPm7wEoXW8ByWsDuDZ5QPf1A34hVzD82kZpjoxj31Iq2A2/iJCNdYRue7DwgF4T1 N035v6OqCCLz+FzCC1T62AVuJiVFUThX0JvFs0WXcKHsiE3fdCzmzAb7xu8ct+D7 p0qJ7G32uyaziElso/SySoFdX/MLOVIR7R+wZhP6gd2P3GZ10ofjzek6lEL7dMdk azJbkmEEUynpY+azqW7cyqaztF9u197XLu4q3Vbi+JnZK8wscXPuKLF53ABJW+6m ZNZFQxpNrRb5oStu3Rj6MVAIUqiwvqM= -----END CERTIFICATE-----Generated at Sat Jun 6 14:46:16 2026 by rpki-client