$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa File: 6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa (raw, json) Hash identifier: tn0vXIvdxv2h103Q3TxwTh3uzqDtwizmGvo7EJcLLmQ= Subject key identifier: BA:23:0A:50:4B:5B:15:FD:DE:D1:1D:FE:15:DE:7A:D6:0E:68:B6:53 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B047C1D9AD44EACA7F122E180 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.33.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:1d:9a:d4:4e:ac:a7:f1:22:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=09f18b9f-2781-472d-acf8-36d43d5dac90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c9:d8:6d:b9:a2:cb:a5:ea:94:b3:67:9f:c4: 05:11:1c:96:d2:03:2f:c2:b8:1f:32:a4:07:22:fc: 8e:47:59:e0:ed:d6:3d:9d:b3:ec:7a:77:de:58:a3: 2e:4c:d6:84:f3:c5:49:97:e6:54:d3:20:47:4a:d7: 10:c9:9d:d5:e6:e9:c0:f0:2c:2f:ff:10:99:55:f2: 63:71:23:bf:d6:e2:79:52:98:08:20:7a:3c:e4:a8: 3b:c1:b3:90:c4:e6:58:df:46:d6:d2:fe:7b:61:8a: f1:c0:47:c3:32:7a:2a:47:5c:ed:72:57:ef:cf:e5: e6:2c:4d:50:0a:12:ae:d8:70:85:ae:79:7c:70:24: 66:51:e3:cb:52:b1:0b:cd:0c:b9:32:88:83:01:15: d4:ce:6b:2e:3c:4d:7c:65:b2:83:b8:1c:d4:e4:ac: ef:2e:73:83:4e:3d:85:ae:cc:85:ec:44:6b:00:4b: ae:2a:1c:3a:1f:e1:a8:5c:07:ad:a2:21:5e:4f:6b: 96:85:ee:52:db:60:6a:fe:9a:e2:3f:f2:62:c5:d5: b3:a8:83:1b:a1:59:85:95:ee:ae:da:33:9f:05:62: c7:82:01:6b:ec:51:8e:ac:77:a0:77:ad:7a:a6:12: 8e:f6:6a:17:09:36:68:02:5a:3e:e3:ed:2d:0b:d9: bc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:23:0A:50:4B:5B:15:FD:DE:D1:1D:FE:15:DE:7A:D6:0E:68:B6:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:b5:40:4e:8e:49:a2:d0:8b:32:66:58:cb:f7:ec:66:c6:51: 45:68:b6:22:07:69:f4:ea:65:db:4e:3d:11:05:b5:2d:a7:3f: 12:e4:c4:7d:5e:91:42:49:52:03:5e:8e:4b:8e:6e:57:95:0a: 4d:25:7a:f3:dd:82:41:80:d0:3d:c1:a1:ad:76:17:9c:ba:83: 88:1d:eb:48:00:bb:b4:99:37:d8:5b:36:36:3d:d6:32:fe:71: 16:fa:a0:4d:13:68:62:72:d4:8f:a5:3f:fd:98:f1:ec:83:18: 5f:9b:08:19:fe:72:36:22:ea:06:54:fb:96:f7:41:a2:85:16: 97:ee:f8:d0:fe:53:d3:73:d3:e1:37:75:fd:95:57:1d:77:76: 21:c2:87:de:d6:63:3f:9e:a9:13:2d:b0:04:cb:a4:c8:83:5e: f5:79:37:11:ce:fc:d8:8f:53:82:e2:49:27:63:f4:df:1d:e0: d7:ae:82:5f:3d:e9:6a:de:46:5f:db:09:8c:43:7c:3b:5c:44: 50:cc:a0:b3:af:7f:14:7c:a3:df:f8:31:a4:68:c0:12:d6:e5: 54:ad:ad:6a:48:82:dd:5f:f7:00:1b:de:1c:5e:7c:a2:19:0e: 33:5c:64:24:62:25:98:59:77:c7:11:0d:15:a9:c0:e5:2c:42: e8:17:9b:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfB2a1E6sp/Ei4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk MDlmMThiOWYtMjc4MS00NzJkLWFjZjgtMzZkNDNkNWRhYzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisnYbbmiy6XqlLNnn8QFERyW0gMvwrgfMqQH IvyOR1ng7dY9nbPsenfeWKMuTNaE88VJl+ZU0yBHStcQyZ3V5unA8Cwv/xCZVfJj cSO/1uJ5UpgIIHo85Kg7wbOQxOZY30bW0v57YYrxwEfDMnoqR1ztclfvz+XmLE1Q ChKu2HCFrnl8cCRmUePLUrELzQy5MoiDARXUzmsuPE18ZbKDuBzU5KzvLnODTj2F rsyF7ERrAEuuKhw6H+GoXAetoiFeT2uWhe5S22Bq/priP/JixdWzqIMboVmFle6u 2jOfBWLHggFr7FGOrHegd616phKO9moXCTZoAlo+4+0tC9m8UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLojClBLWxX93tEd/hXeetYOaLZTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmU1MjZjMDMtNmNhOC0z YWIzLTg0YmEtY2Q0ZTZkNGQzMWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIm1QE6OSaLQizJmWMv37GbGUUVotiIHafTqZdtOPREFtS2nPxLkxH1e kUJJUgNejkuObleVCk0levPdgkGA0D3Boa12F5y6g4gd60gAu7SZN9hbNjY91jL+ cRb6oE0TaGJy1I+lP/2Y8eyDGF+bCBn+cjYi6gZU+5b3QaKFFpfu+ND+U9Nz0+E3 df2VVx13diHCh97WYz+eqRMtsATLpMiDXvV5NxHO/NiPU4LiSSdj9N8d4Neugl89 6WreRl/bCYxDfDtcRFDMoLOvfxR8o9/4MaRowBLW5VStrWpIgt1f9wAb3hxefKIZ DjNcZCRiJZhZd8cRDRWpwOUsQugXm/8= -----END CERTIFICATE-----Generated at Mon Oct 20 15:51:09 2025 by rpki-client