$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/33e115ff-b633-3582-af61-694f0a8bdd0a.roa File: 33e115ff-b633-3582-af61-694f0a8bdd0a.roa (raw, json) Hash identifier: S4SO3/V0g+CwxbtJ/EFikGDifyWkzPXB10RM2cmxKJE= Subject key identifier: 88:21:E7:F6:B7:5C:40:4B:F7:1B:BB:0F:6E:9B:75:FE:37:B6:33:8F Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F4328584F02422F4A71E8FB9169B55100 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/33e115ff-b633-3582-af61-694f0a8bdd0a.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 19107 IP address blocks: 68.235.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:2f:4a:71:e8:fb:91:69:b5:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=b9d02501-a4e8-4fe0-8522-ca8a65670240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d1:4b:a3:bb:e9:3d:93:97:e7:b6:1f:6c:f5: 34:d4:1d:dc:24:7c:cc:26:61:41:46:b2:9a:98:37: 01:d5:fc:59:99:b8:4b:5d:34:95:52:c1:05:c3:1a: 15:dd:40:4d:bf:00:cb:ba:f1:ec:ed:f4:a5:a9:fa: 2a:14:59:7b:e6:6b:cb:4c:4e:20:9e:b2:04:a3:8e: 6b:0b:67:0b:b0:00:48:6a:b7:fd:58:46:8c:d3:c2: 97:50:7f:60:d6:c4:9e:77:35:8c:23:19:6b:be:cc: f8:de:c9:74:96:08:32:4e:af:fc:5b:e9:13:00:24: 2c:f4:d8:e5:ac:65:7b:ed:3b:bf:f1:a1:c1:a4:18: 33:52:63:e9:a3:6f:99:6b:80:37:85:20:81:73:d3: 78:89:6d:73:63:c7:64:06:71:dd:53:e9:f3:78:6f: bd:ef:b1:d5:56:1a:9f:da:1e:21:02:ce:88:54:59: 67:bc:fa:48:f9:34:bb:9a:a0:53:ca:c1:b9:9e:88: 49:ff:17:93:c1:ac:3d:6d:a9:02:3a:3f:73:47:70: 5f:2b:64:a6:c5:be:5d:87:45:7c:b2:6f:8a:a0:77: 97:a8:14:2a:98:18:1a:78:fd:05:f3:07:bd:74:03: f9:9c:41:a1:b8:9d:88:b2:3b:ac:90:d5:ab:a3:d1: e3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:21:E7:F6:B7:5C:40:4B:F7:1B:BB:0F:6E:9B:75:FE:37:B6:33:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/33e115ff-b633-3582-af61-694f0a8bdd0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 68.235.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:14:95:98:74:df:fb:17:b4:03:41:fd:bd:61:70:04:70:d6: 14:18:d0:b2:e7:50:9d:e3:a3:58:75:cf:23:f3:1d:8c:95:d4: 45:93:dc:90:c1:47:2b:4b:d6:a6:66:32:3d:82:c0:30:51:03: ad:53:b2:05:77:95:32:03:51:fc:a4:6c:5c:15:b0:a8:67:70: 94:3a:22:3d:d3:92:d7:1a:49:1f:56:bc:ad:d1:eb:ac:7a:e3: 70:f8:4d:b1:6f:44:4f:86:9d:e8:06:a2:ef:27:45:1e:37:e0: 51:74:27:79:77:56:ee:83:b8:dc:8a:cb:a3:f2:f4:c5:0c:aa: 2a:ec:f7:0b:ff:6c:aa:77:9d:c4:69:91:6a:3f:25:8f:fd:a5: d5:49:69:68:1b:92:df:8c:d2:76:6f:be:34:96:d5:b2:6a:ff: 2e:6d:15:1a:54:f3:33:f7:f0:54:fb:4a:07:03:e1:75:b6:7e: f6:6d:01:c1:15:c1:9e:7a:13:96:ae:9f:d3:88:e3:20:29:ce: db:09:14:06:04:8b:59:58:2b:12:fd:71:04:fe:64:26:2e:a2: e0:45:5d:ac:8e:bb:ac:1c:41:f3:f4:36:a9:97:45:f1:a8:ea: 07:06:30:b8:b7:23:14:71:41:e0:70:b7:49:f8:ed:72:ce:61: 0e:fb:ea:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQi9Kcej7kWm1UQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk YjlkMDI1MDEtYTRlOC00ZmUwLTg1MjItY2E4YTY1NjcwMjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNFLo7vpPZOX57YfbPU01B3cJHzMJmFBRrKa mDcB1fxZmbhLXTSVUsEFwxoV3UBNvwDLuvHs7fSlqfoqFFl75mvLTE4gnrIEo45r C2cLsABIarf9WEaM08KXUH9g1sSedzWMIxlrvsz43sl0lggyTq/8W+kTACQs9Njl rGV77Tu/8aHBpBgzUmPpo2+Za4A3hSCBc9N4iW1zY8dkBnHdU+nzeG+977HVVhqf 2h4hAs6IVFlnvPpI+TS7mqBTysG5nohJ/xeTwaw9bakCOj9zR3BfK2Smxb5dh0V8 sm+KoHeXqBQqmBgaeP0F8we9dAP5nEGhuJ2IsjuskNWro9HjHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgh5/a3XEBL9xu7D26bdf43tjOPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvMzNlMTE1ZmYtYjYzMy0z NTgyLWFmNjEtNjk0ZjBhOGJkZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8UlZh03/sXtANB/b1hcARw1hQY0LLnUJ3jo1h1zyPzHYyV1EWT3JDB RytL1qZmMj2CwDBRA61TsgV3lTIDUfykbFwVsKhncJQ6Ij3TktcaSR9WvK3R66x6 43D4TbFvRE+GnegGou8nRR434FF0J3l3Vu6DuNyKy6Py9MUMqirs9wv/bKp3ncRp kWo/JY/9pdVJaWgbkt+M0nZvvjSW1bJq/y5tFRpU8zP38FT7SgcD4XW2fvZtAcEV wZ56E5aun9OI4yApztsJFAYEi1lYKxL9cQT+ZCYuouBFXayOu6wcQfP0NqmXRfGo 6gcGMLi3IxRxQeBwt0n47XLOYQ776tw= -----END CERTIFICATE-----Generated at Mon Sep 28 04:20:57 2026 by rpki-client