$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e569e8-37ad-3469-895e-315f10771e8c.roa File: f5e569e8-37ad-3469-895e-315f10771e8c.roa (raw, json) Hash identifier: r1HwUAJgedY+UkIclMSxVXSd3veawgTi1QiKTnDx9DQ= Subject key identifier: 9A:06:2B:4F:7F:93:19:4B:6E:62:C4:08:D8:D8:0A:DE:28:33:A0:86 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DE9B08A220164CE6E0BB38940 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e569e8-37ad-3469-895e-315f10771e8c.roa Signing time: Fri 22 May 2026 01:00:24 +0000 ROA not before: Fri 22 May 2026 01:00:24 +0000 ROA not after: Thu 20 Aug 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:b0:8a:22:01:64:ce:6e:0b:b3:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 22 01:00:24 2026 GMT Not After : Aug 20 01:00:24 2026 GMT Subject: CN=16c93cad-7b8b-48f1-95a9-ca15d6b702a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cb:ae:c6:b5:e9:dc:bf:97:9e:11:25:37:a1: 85:01:f3:3d:e4:53:53:63:82:5e:59:e8:ce:05:8f: a0:9d:e2:7b:83:c1:8c:1c:bc:dc:08:86:a7:b9:f8: 47:93:da:80:08:76:ee:42:f8:d9:77:e3:a6:e3:0b: 1a:6a:61:d2:35:3b:d4:d6:25:b4:e6:67:e4:9a:2f: 31:c3:dc:d2:0d:1c:af:ec:94:d1:f4:2d:48:52:c9: 12:85:f5:1f:e1:32:90:a2:b3:f1:03:68:2b:55:3b: fe:ba:ac:4b:2d:01:69:51:45:85:5a:92:3b:2e:38: ec:04:c1:67:3a:b0:bd:50:0e:91:dc:e3:cc:f8:67: 3a:83:b2:d9:22:d2:a0:04:81:87:31:48:2a:71:71: fb:a3:49:50:b8:dd:7a:50:7b:71:b7:55:d7:25:7b: 65:5f:6b:79:d3:27:e3:84:dd:1e:8c:53:ea:ce:03: 39:2f:0c:99:e6:d6:c2:91:09:b8:a6:11:17:9e:98: f1:53:2e:dc:89:ae:fd:7e:60:43:5f:b7:fb:63:f1: f0:5b:70:4e:95:e8:4b:61:ef:19:6e:74:bf:d4:45: d8:66:7e:45:53:5b:3c:ee:a4:a2:df:8f:29:38:75: 12:11:c4:c5:97:90:d2:a4:af:c5:51:33:79:e4:f2: 33:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:06:2B:4F:7F:93:19:4B:6E:62:C4:08:D8:D8:0A:DE:28:33:A0:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e569e8-37ad-3469-895e-315f10771e8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:8f:08:4f:e7:ad:02:6f:f3:40:37:a0:03:06:60:fd:84:b2: 6a:dc:7e:e6:ea:2e:57:68:c7:a3:97:0c:43:82:27:16:b0:36: 61:25:6a:86:26:a5:df:db:93:8d:95:53:fb:3f:0a:55:11:6f: d2:21:40:61:0b:9f:98:d5:02:4a:a3:ed:fa:97:67:aa:5c:fa: 6c:1c:33:a3:c6:99:8c:05:3b:01:8d:dc:e3:dc:3b:fb:2e:2d: aa:d5:0c:28:46:02:6d:df:35:28:d9:a1:d6:e2:11:e5:51:ca: 3c:0c:c7:2e:be:a6:a5:4c:51:1e:54:0c:3b:b5:f1:2b:3e:94: 1c:66:38:1a:e9:01:b8:8d:c8:0e:73:b6:2b:1d:81:c8:07:dc: ae:bc:23:cb:36:0a:8f:b3:01:75:a2:99:ee:4d:82:8c:9b:d9: 83:75:7b:ce:ad:c4:f5:8c:d0:e5:53:a7:25:4b:c7:c0:47:1b: 5a:e0:88:0f:9f:37:0d:7b:55:87:3e:ad:a2:5e:cd:2d:d4:b2: bf:ec:59:65:13:35:d9:16:68:1e:28:46:76:76:90:59:bd:b4: f2:9a:63:55:45:63:a6:0b:4f:9b:75:44:9e:57:59:88:72:5c: 9a:53:16:5d:ba:79:39:79:af:39:00:12:f3:34:e1:f1:d8:c9: ff:c8:55:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3psIoiAWTObguziUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk MTZjOTNjYWQtN2I4Yi00OGYxLTk1YTktY2ExNWQ2YjcwMmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcuuxrXp3L+XnhElN6GFAfM95FNTY4JeWejO BY+gneJ7g8GMHLzcCIanufhHk9qACHbuQvjZd+Om4wsaamHSNTvU1iW05mfkmi8x w9zSDRyv7JTR9C1IUskShfUf4TKQorPxA2grVTv+uqxLLQFpUUWFWpI7LjjsBMFn OrC9UA6R3OPM+Gc6g7LZItKgBIGHMUgqcXH7o0lQuN16UHtxt1XXJXtlX2t50yfj hN0ejFPqzgM5LwyZ5tbCkQm4phEXnpjxUy7cia79fmBDX7f7Y/HwW3BOlehLYe8Z bnS/1EXYZn5FU1s87qSi348pOHUSEcTFl5DSpK/FUTN55PIzZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoGK09/kxlLbmLECNjYCt4oM6CGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjVlNTY5ZTgtMzdhZC0z NDY5LTg5NWUtMzE1ZjEwNzcxZThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiPCE/nrQJv80A3oAMGYP2EsmrcfubqLldox6OXDEOCJxawNmElaoYm pd/bk42VU/s/ClURb9IhQGELn5jVAkqj7fqXZ6pc+mwcM6PGmYwFOwGN3OPcO/su LarVDChGAm3fNSjZodbiEeVRyjwMxy6+pqVMUR5UDDu18Ss+lBxmOBrpAbiNyA5z tisdgcgH3K68I8s2Co+zAXWime5Ngoyb2YN1e86txPWM0OVTpyVLx8BHG1rgiA+f Nw17VYc+raJezS3Usr/sWWUTNdkWaB4oRnZ2kFm9tPKaY1VFY6YLT5t1RJ5XWYhy XJpTFl26eTl5rzkAEvM04fHYyf/IVXA= -----END CERTIFICATE-----Generated at Sat Jun 6 14:47:43 2026 by rpki-client