$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa File: 6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa (raw, json) Hash identifier: wt5YLzlsVWSvdfk/OKWyd4qoj5wYYDeFsWQx7mNLIJs= Subject key identifier: D4:CC:70:8E:AE:4D:82:53:30:16:96:AF:62:69:6B:B9:DE:BD:43:E0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E86F505B9DE1633D9BFFF3340 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 8069 IP address blocks: 20.33.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f5:05:b9:de:16:33:d9:bf:ff:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=debf7813-a023-4947-a167-78c5cbfa9178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:25:ea:04:6e:39:49:2a:0b:a5:19:e8:19:37: 30:f7:6d:53:33:80:2c:f9:0c:54:a6:80:91:75:18: 72:cd:40:e0:4d:95:4a:b5:e1:d8:84:07:31:8b:7c: b2:1f:c2:57:11:b9:32:e1:a6:85:bd:16:9f:6d:f6: f3:d2:9c:07:5f:a3:43:69:ac:ef:58:25:ab:42:a7: 88:e5:66:0e:77:23:d4:c3:cc:c8:cb:fb:4b:8f:0d: db:1f:9d:3d:f1:93:10:1b:f0:10:5f:cf:e6:9c:3d: 75:ef:ab:55:35:15:f3:74:5a:ac:d0:8b:c7:d6:97: d2:5a:40:c3:9b:0f:f0:3c:0b:87:cb:78:98:55:9f: b0:54:8d:18:4d:98:f7:af:ff:36:9c:5f:4e:88:e9: 97:f4:26:6e:4e:26:99:f1:b8:2d:cc:b2:f2:25:26: 87:43:54:6f:33:db:45:5b:c2:69:04:9f:2d:ef:ab: b3:11:8d:c7:cb:ad:51:30:b0:86:87:38:23:b9:79: fe:f6:98:d7:b6:18:63:86:e3:c7:81:29:63:f2:85: 4c:46:5a:82:36:09:0f:8a:76:04:76:00:57:5c:86: ad:85:5e:16:73:0b:3e:48:88:f0:c6:f0:4e:2b:61: fd:c3:94:42:e8:84:ee:ac:20:92:a5:ec:e7:31:be: 5e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CC:70:8E:AE:4D:82:53:30:16:96:AF:62:69:6B:B9:DE:BD:43:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:84:79:31:e7:68:53:72:70:82:ba:a4:84:0d:99:da:48:41: e0:0b:6e:01:97:cb:76:66:da:37:b1:51:b9:ea:2d:44:74:d6: ad:03:f1:cf:19:51:b0:94:45:cb:3e:ee:6e:bf:7b:5f:18:7f: 9a:e1:38:be:88:6a:af:e0:4c:3d:64:a7:80:26:1a:f9:75:e0: 12:98:09:58:33:c9:b3:0e:76:95:10:8d:0c:0d:26:9f:d6:c5: c8:f9:b1:25:1b:96:ba:de:d1:58:01:1c:85:4f:ea:22:92:ef: 0f:bd:92:64:46:ba:85:ed:94:98:cf:8d:29:c2:50:ef:4b:3c: 08:26:88:53:e1:27:2d:e3:ef:43:9b:cc:30:dd:37:02:a5:f0: f3:bf:b5:31:4b:c2:44:58:ce:39:ad:35:0c:30:9a:a7:9f:7c: 1e:af:31:ee:a2:b1:c5:64:4d:fe:1b:c5:07:fd:0d:cb:28:68: b9:72:83:b4:9b:a3:ef:2f:6d:12:92:ce:2d:56:cf:42:f9:ac: b8:9e:8c:55:2e:be:d9:2b:e7:19:ce:15:c8:32:9e:28:a3:ce: b5:33:30:d2:fd:8f:4b:2e:8c:a1:4d:9a:4e:b0:23:e8:8a:2d: d7:33:56:01:c5:61:8f:34:0e:7c:c2:81:fe:d2:5b:34:97:87: ec:36:0a:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9QW53hYz2b//M0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk ZGViZjc4MTMtYTAyMy00OTQ3LWExNjctNzhjNWNiZmE5MTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSXqBG45SSoLpRnoGTcw921TM4As+QxUpoCR dRhyzUDgTZVKteHYhAcxi3yyH8JXEbky4aaFvRafbfbz0pwHX6NDaazvWCWrQqeI 5WYOdyPUw8zIy/tLjw3bH5098ZMQG/AQX8/mnD1176tVNRXzdFqs0IvH1pfSWkDD mw/wPAuHy3iYVZ+wVI0YTZj3r/82nF9OiOmX9CZuTiaZ8bgtzLLyJSaHQ1RvM9tF W8JpBJ8t76uzEY3Hy61RMLCGhzgjuXn+9pjXthhjhuPHgSlj8oVMRlqCNgkPinYE dgBXXIathV4Wcws+SIjwxvBOK2H9w5RC6ITurCCSpeznMb5e/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTMcI6uTYJTMBaWr2Jpa7nevUPgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmU1MjZjMDMtNmNhOC0z YWIzLTg0YmEtY2Q0ZTZkNGQzMWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqEeTHnaFNycIK6pIQNmdpIQeALbgGXy3Zm2jexUbnqLUR01q0D8c8Z UbCURcs+7m6/e18Yf5rhOL6Iaq/gTD1kp4AmGvl14BKYCVgzybMOdpUQjQwNJp/W xcj5sSUblrre0VgBHIVP6iKS7w+9kmRGuoXtlJjPjSnCUO9LPAgmiFPhJy3j70Ob zDDdNwKl8PO/tTFLwkRYzjmtNQwwmqeffB6vMe6iscVkTf4bxQf9DcsoaLlyg7Sb o+8vbRKSzi1Wz0L5rLiejFUuvtkr5xnOFcgyniijzrUzMNL9j0sujKFNmk6wI+iK LdczVgHFYY80DnzCgf7SWzSXh+w2CiQ= -----END CERTIFICATE-----Generated at Tue Jul 21 21:05:54 2026 by rpki-client