$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa File: 6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa (raw, json) Hash identifier: +GeEYIxvleCi2o3BdQso2Mm315pZg/QHYKdbxfK2CDE= Subject key identifier: 8F:8E:75:60:2A:40:3A:E7:04:07:5B:5E:76:C2:1F:C2:24:57:34:C3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F2957C8AF6AA75539771EA300 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 8069 IP address blocks: 20.33.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:c8:af:6a:a7:55:39:77:1e:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=afe09c7f-4c1c-4ba6-a29b-7be7257dea2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:91:c9:02:59:bd:fe:6d:cd:be:3e:b9:13:ef: e4:92:d2:3f:b0:b4:ec:68:2d:47:81:a6:83:48:04: 88:8c:0a:1a:36:8a:95:c2:2a:cc:16:20:57:0c:bc: da:86:21:b9:a1:eb:55:53:a2:33:c7:6a:a8:95:d7: d3:31:b3:31:b2:ff:8a:9c:57:af:44:ac:8a:c8:2c: 84:75:10:c7:2d:97:02:a6:1f:94:2b:27:56:93:22: c4:0e:0c:4f:7f:6b:13:e8:a7:4e:dd:04:2a:eb:1a: 8f:cb:e8:de:ed:f2:61:7a:8d:08:3f:17:ed:29:52: 77:22:0a:71:ec:f6:56:1d:b0:dd:c7:6b:91:36:05: f3:b5:c1:b2:8d:9c:ad:7a:ca:3b:25:fa:57:3f:ea: 3b:ee:cd:65:c5:34:6b:9f:fb:b1:97:c7:e9:1f:9a: c9:89:77:9e:71:9d:c6:58:e2:72:73:89:76:af:67: 95:c9:8b:c0:5d:af:0d:9c:13:db:81:6f:0d:ce:ec: 8f:3b:7f:52:68:35:12:ef:ce:b5:4f:8b:a4:69:65: 13:e2:a6:86:25:68:a7:73:1e:32:3e:55:36:14:56: f1:d7:a6:f2:8a:0b:c0:69:5c:85:c6:93:39:d5:4e: d2:bd:07:46:b3:2c:82:b6:bb:aa:af:16:a5:d0:ac: 1e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:8E:75:60:2A:40:3A:E7:04:07:5B:5E:76:C2:1F:C2:24:57:34:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:b0:81:6b:d8:da:f3:07:87:e6:3e:80:6d:18:eb:6b:b0:07: d7:e4:63:19:8e:90:8a:4b:fe:d5:93:60:3c:ce:5f:cd:03:93: 8f:a3:31:a5:10:c9:02:a6:a7:5f:c5:b6:5e:5d:4d:2c:45:f3: ff:ae:1d:fd:10:08:cc:48:fe:85:29:2d:e5:05:89:f2:75:88: 96:d4:0a:71:5b:0c:99:f5:b7:0f:0f:ed:e8:2d:e6:45:e4:07: b1:5d:da:b2:40:07:ca:ed:42:d6:f8:b3:43:a5:b2:71:76:b0: c0:4f:02:b2:aa:30:24:9a:a0:46:07:5b:36:a9:8f:5c:02:5b: 4b:dc:04:88:45:e5:54:e1:a2:41:ca:2e:f8:89:9a:db:d4:04: cc:b5:72:db:5b:4f:31:86:3f:74:be:f6:4f:94:0c:b8:bd:29: d2:4f:fd:f3:f7:96:18:f8:83:e0:2f:4a:4a:22:5f:aa:5b:9d: ed:8f:ea:1e:60:93:af:ad:a3:7d:d1:a5:7d:9d:fd:6e:4c:20: 5d:97:23:f1:b3:1c:47:f1:fc:3a:d2:99:20:0b:a4:84:3c:25: f6:77:b5:20:d8:d8:49:ba:a1:79:ae:f7:d6:2c:13:4b:54:40: e6:9b:32:79:3e:c9:25:b0:65:b1:30:68:8c:bb:8f:be:97:12: f3:c7:9c:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV8ivaqdVOXceowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk YWZlMDljN2YtNGMxYy00YmE2LWEyOWItN2JlNzI1N2RlYTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJHJAlm9/m3Nvj65E+/kktI/sLTsaC1HgaaD SASIjAoaNoqVwirMFiBXDLzahiG5oetVU6Izx2qoldfTMbMxsv+KnFevRKyKyCyE dRDHLZcCph+UKydWkyLEDgxPf2sT6KdO3QQq6xqPy+je7fJheo0IPxftKVJ3Igpx 7PZWHbDdx2uRNgXztcGyjZyteso7JfpXP+o77s1lxTRrn/uxl8fpH5rJiXeecZ3G WOJyc4l2r2eVyYvAXa8NnBPbgW8NzuyPO39SaDUS7861T4ukaWUT4qaGJWincx4y PlU2FFbx16byigvAaVyFxpM51U7SvQdGsyyCtruqrxal0KwepQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+OdWAqQDrnBAdbXnbCH8IkVzTDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmU1MjZjMDMtNmNhOC0z YWIzLTg0YmEtY2Q0ZTZkNGQzMWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGwgWvY2vMHh+Y+gG0Y62uwB9fkYxmOkIpL/tWTYDzOX80Dk4+jMaUQ yQKmp1/Ftl5dTSxF8/+uHf0QCMxI/oUpLeUFifJ1iJbUCnFbDJn1tw8P7egt5kXk B7Fd2rJAB8rtQtb4s0OlsnF2sMBPArKqMCSaoEYHWzapj1wCW0vcBIhF5VThokHK LviJmtvUBMy1cttbTzGGP3S+9k+UDLi9KdJP/fP3lhj4g+AvSkoiX6pbne2P6h5g k6+to33RpX2d/W5MIF2XI/GzHEfx/DrSmSALpIQ8JfZ3tSDY2Em6oXmu99YsE0tU QOabMnk+ySWwZbEwaIy7j76XEvPHnNM= -----END CERTIFICATE-----Generated at Sun Sep 27 07:37:30 2026 by rpki-client