$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa File: 6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa (raw, json) Hash identifier: SSqwOy9Gk6eIBR9m/XK0GYy4uCVE939xFMV8v8WWYRQ= Subject key identifier: 0B:B6:B5:41:FE:AE:C0:A2:C8:0A:DA:E7:1F:73:CE:EE:FC:10:BF:57 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CC6120BB21E10424B0FB20600 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.33.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:12:0b:b2:1e:10:42:4b:0f:b2:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=ff28e201-251d-4837-b18f-d9d4f2d2641a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9f:cc:4b:96:56:15:93:75:6e:a9:41:82:83: 9e:18:f0:00:a6:2a:1d:a9:4e:db:1d:c5:e2:83:40: 48:cf:36:be:78:64:ec:6a:38:46:56:3c:d9:aa:12: 7c:ef:df:e6:06:1b:32:71:c6:2d:d0:af:29:ff:70: 05:2c:b8:cb:c9:0b:fd:78:61:fa:ac:1f:6d:fc:30: 95:20:3b:64:12:5c:43:d2:7f:8d:21:f7:5e:7b:43: f4:2a:23:79:0a:7b:32:80:97:71:c6:5a:ef:12:fd: 58:9f:60:b7:89:81:78:b6:d5:d8:24:1e:d2:e4:93: 98:19:09:c6:52:f7:ab:6f:81:d2:ba:e0:60:6c:55: 9a:72:59:3f:ee:1b:a9:28:fb:50:15:1e:c4:e8:b3: 27:e7:25:d9:9b:21:e2:ce:7c:98:8b:24:10:26:e8: 70:f3:5b:87:35:cd:99:99:2d:46:ac:02:62:07:da: c1:7c:b0:44:63:ad:1e:dc:7f:1d:d2:85:c5:46:67: b9:db:b6:b1:0d:de:a3:8b:49:d4:ce:87:ac:1d:a6: a0:3f:ca:75:05:ff:33:07:87:fb:ae:6d:01:fc:9f: 75:97:91:ba:d7:3c:91:cd:da:1f:72:0e:c3:59:b0: 79:01:00:29:26:6f:af:98:2d:ff:bc:a8:94:68:3e: a9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B6:B5:41:FE:AE:C0:A2:C8:0A:DA:E7:1F:73:CE:EE:FC:10:BF:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:2a:a9:3b:05:8d:32:00:a2:3f:09:de:cb:aa:75:e5:68:22: 70:9f:48:3a:ad:d1:ab:3b:90:2c:76:d5:c6:4d:85:18:55:05: 4c:aa:25:e8:9b:79:ab:e2:1a:77:c1:70:e0:9e:d6:39:18:2e: b9:1d:36:e6:bd:66:c4:39:41:72:b5:06:89:93:2b:9f:3d:2f: e2:22:da:9f:94:e9:ef:9f:37:38:80:d9:50:2a:a9:5b:f9:0d: f9:89:2f:35:49:cb:fe:26:b6:18:f9:9a:12:b6:42:0f:c9:c8: 99:ef:c7:99:ec:07:bd:d1:2d:f2:00:2f:72:cd:60:61:0e:45: eb:7f:57:08:6e:61:ec:57:a2:8c:73:cc:d5:59:ba:69:b1:ce: 57:0e:2b:a5:25:10:68:b8:6d:7b:15:56:1f:e6:fc:90:55:04: 52:72:59:7b:11:ef:b7:6c:dd:05:8b:a2:4c:f3:53:6c:2c:47: a2:fd:5a:6a:d4:a4:f3:26:12:21:c3:7b:c1:ec:d0:81:43:11: 6b:07:fe:4e:50:e8:92:20:2e:f1:4a:50:aa:39:c2:8d:24:0a: f7:e1:78:d7:97:2d:25:19:67:e3:20:9a:4a:4b:89:30:41:9e: e1:82:52:a7:69:b7:c4:a0:98:7f:fc:1e:18:f0:c7:d3:af:03: 6a:05:b0:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEguyHhBCSw+yBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk ZmYyOGUyMDEtMjUxZC00ODM3LWIxOGYtZDlkNGYyZDI2NDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ/MS5ZWFZN1bqlBgoOeGPAApiodqU7bHcXi g0BIzza+eGTsajhGVjzZqhJ879/mBhsyccYt0K8p/3AFLLjLyQv9eGH6rB9t/DCV IDtkElxD0n+NIfdee0P0KiN5CnsygJdxxlrvEv1Yn2C3iYF4ttXYJB7S5JOYGQnG Uverb4HSuuBgbFWaclk/7hupKPtQFR7E6LMn5yXZmyHiznyYiyQQJuhw81uHNc2Z mS1GrAJiB9rBfLBEY60e3H8d0oXFRme527axDd6ji0nUzoesHaagP8p1Bf8zB4f7 rm0B/J91l5G61zyRzdofcg7DWbB5AQApJm+vmC3/vKiUaD6pjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAu2tUH+rsCiyAra5x9zzu78EL9XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmU1MjZjMDMtNmNhOC0z YWIzLTg0YmEtY2Q0ZTZkNGQzMWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwqqTsFjTIAoj8J3suqdeVoInCfSDqt0as7kCx21cZNhRhVBUyqJeib eaviGnfBcOCe1jkYLrkdNua9ZsQ5QXK1BomTK589L+Ii2p+U6e+fNziA2VAqqVv5 DfmJLzVJy/4mthj5mhK2Qg/JyJnvx5nsB73RLfIAL3LNYGEORet/VwhuYexXooxz zNVZummxzlcOK6UlEGi4bXsVVh/m/JBVBFJyWXsR77ds3QWLokzzU2wsR6L9WmrU pPMmEiHDe8Hs0IFDEWsH/k5Q6JIgLvFKUKo5wo0kCvfheNeXLSUZZ+MgmkpLiTBB nuGCUqdpt8SgmH/8Hhjwx9OvA2oFsLk= -----END CERTIFICATE-----Generated at Mon Mar 2 18:12:33 2026 by rpki-client