$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fa08006f-9a60-33a6-9dd0-40387d6233af.roa File: fa08006f-9a60-33a6-9dd0-40387d6233af.roa (raw, json) Hash identifier: GYAqBNj1krdGkkJBOu1ve/WahIIAAmIF0l/mELabn2k= Subject key identifier: 34:D3:7B:AF:93:6C:EE:88:C4:C9:CF:E6:E4:EA:A5:AC:33:E8:DB:96 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DCAFB0D7754ABB8B1563F2DC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fa08006f-9a60-33a6-9dd0-40387d6233af.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:0d:77:54:ab:b8:b1:56:3f:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=062194bf-8390-496b-86b3-7a777d4d8313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:61:b2:06:ab:b4:e3:b4:e7:8a:b0:ec:0e:fe: be:77:ac:d2:8d:e9:73:61:73:f8:07:bb:b1:8d:02: c0:77:7f:39:9e:27:66:92:b4:24:b0:90:ed:1c:76: 97:11:87:f4:a9:80:a7:11:a9:a5:53:e2:e2:34:cf: e1:d7:12:a0:85:ee:e9:f0:1d:68:31:08:3f:42:62: 1a:8a:c7:05:3a:27:3b:68:1d:4f:c9:f9:4c:e1:40: 17:14:d1:b6:d0:35:e5:fb:eb:6d:0e:07:fb:4f:54: e0:79:ca:37:0a:e5:1a:ba:e0:42:6d:4d:db:14:2c: 9f:d1:69:68:8c:51:ee:e6:09:8b:62:e8:87:b3:b0: 25:d4:f2:76:04:23:0d:d3:d7:28:b1:52:3f:cb:8b: b4:c8:2f:39:36:14:b6:2d:ac:3d:76:38:fc:77:48: d4:e9:7d:b8:25:06:19:05:f2:13:0f:89:c8:10:6a: 6c:68:4e:41:cd:73:a6:e2:79:eb:ab:2c:58:d7:38: b2:22:e5:42:2a:f0:63:f1:35:f0:93:eb:31:ee:66: 8e:cd:2f:a1:e4:b5:ae:b8:89:2c:b0:12:5a:a8:d1: bb:06:43:0c:3e:35:75:40:01:87:b3:92:d3:8a:03: 81:f5:92:2d:53:22:c3:72:88:9e:b2:10:80:25:27: b1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D3:7B:AF:93:6C:EE:88:C4:C9:CF:E6:E4:EA:A5:AC:33:E8:DB:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fa08006f-9a60-33a6-9dd0-40387d6233af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:71:c7:4b:b5:7f:54:11:b5:a4:64:da:75:24:ed:39:8c:91: dd:d6:ee:eb:10:6e:b3:d2:d3:df:a3:2c:3a:09:2f:92:5d:9b: d1:7d:17:1f:99:26:10:3e:9f:61:c5:11:5e:46:31:fa:68:82: 11:f9:ec:d9:81:52:ad:f6:5c:7b:60:42:09:4f:38:e5:2b:b6: 7e:8b:f7:2d:d0:86:29:37:33:00:7d:08:f7:39:30:e9:bf:49: 86:da:c9:5c:a0:13:66:1b:3f:79:76:7c:8e:02:91:24:42:4e: 55:e4:1c:da:d4:79:0f:96:fd:ba:85:64:ba:4d:10:c4:d7:a6: 17:49:4d:ae:0d:81:a3:dc:5a:be:c8:88:c5:a8:0f:94:47:f1: 5c:bf:83:4f:ac:d1:6d:18:04:a8:03:a6:3b:dd:a1:78:82:84: ba:2e:2a:6e:17:dc:83:00:77:3c:3e:21:f8:6e:3c:51:84:b5: 10:02:aa:54:48:e4:21:7a:50:b7:12:44:3a:4c:62:8c:37:4b: c5:08:e4:f3:e9:45:03:4a:1a:9f:61:63:20:97:75:4a:95:9a: 06:19:e7:53:92:46:bb:2a:67:a3:43:ed:d9:3c:e7:d7:db:98: ae:d9:4e:2b:58:6e:25:7b:d7:95:3f:ba:db:0a:b3:87:b6:9d: 57:85:08:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+w13VKu4sVY/LcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk MDYyMTk0YmYtODM5MC00OTZiLTg2YjMtN2E3NzdkNGQ4MzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmGyBqu047TnirDsDv6+d6zSjelzYXP4B7ux jQLAd385nidmkrQksJDtHHaXEYf0qYCnEamlU+LiNM/h1xKghe7p8B1oMQg/QmIa iscFOic7aB1PyflM4UAXFNG20DXl++ttDgf7T1Tgeco3CuUauuBCbU3bFCyf0Wlo jFHu5gmLYuiHs7Al1PJ2BCMN09cosVI/y4u0yC85NhS2Law9djj8d0jU6X24JQYZ BfITD4nIEGpsaE5BzXOm4nnrqyxY1ziyIuVCKvBj8TXwk+sx7maOzS+h5LWuuIks sBJaqNG7BkMMPjV1QAGHs5LTigOB9ZItUyLDcoieshCAJSexZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTTe6+TbO6IxMnP5uTqpawz6NuWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZmEwODAwNmYtOWE2MC0z M2E2LTlkZDAtNDAzODdkNjIzM2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlxx0u1f1QRtaRk2nUk7TmMkd3W7usQbrPS09+jLDoJL5Jdm9F9Fx+Z JhA+n2HFEV5GMfpoghH57NmBUq32XHtgQglPOOUrtn6L9y3Qhik3MwB9CPc5MOm/ SYbayVygE2YbP3l2fI4CkSRCTlXkHNrUeQ+W/bqFZLpNEMTXphdJTa4NgaPcWr7I iMWoD5RH8Vy/g0+s0W0YBKgDpjvdoXiChLouKm4X3IMAdzw+IfhuPFGEtRACqlRI 5CF6ULcSRDpMYow3S8UI5PPpRQNKGp9hYyCXdUqVmgYZ51OSRrsqZ6ND7dk859fb mK7ZTitYbiV715U/utsKs4e2nVeFCNM= -----END CERTIFICATE-----Generated at Wed May 13 11:45:18 2026 by rpki-client