$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/59fb37fe-5e43-39f4-a63b-2cb11dfc57a5.roa File: 59fb37fe-5e43-39f4-a63b-2cb11dfc57a5.roa (raw, json) Hash identifier: XKmgpnDlSleWsN4LR5oTjUN39VdQ29+90YRHCQXO678= Subject key identifier: 44:B8:1A:97:1B:5F:7E:3C:CB:55:9F:B9:11:30:8F:E2:54:79:F9:E5 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F549D71D5B77DACEF2CD9A300 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/59fb37fe-5e43-39f4-a63b-2cb11dfc57a5.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.33.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:71:d5:b7:7d:ac:ef:2c:d9:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=6e431720-a9cb-4a48-aa85-24a34828beb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f0:9d:7d:1f:63:aa:54:36:9f:f2:26:d8:b4: c7:84:3a:8f:3a:cc:33:4a:a8:ce:d0:a6:73:bd:c5: 27:89:00:ff:cf:0e:a1:7a:65:46:df:1a:58:ba:87: 47:2c:30:75:e3:4c:8a:a0:c1:cd:d2:13:ee:bf:50: 15:08:e7:ba:6c:d1:16:5e:02:e8:ea:6e:06:72:1d: 61:c9:87:92:3a:e8:4d:13:30:8f:c1:6f:97:40:85: 47:32:e5:fc:0a:f3:d7:2c:2c:43:03:78:e6:56:61: df:c3:6d:9f:3b:c4:e1:d0:40:a6:46:c8:31:4f:d0: d9:70:35:cc:59:63:09:f2:78:21:cb:1a:6d:5f:8f: 7c:55:d7:a6:48:25:1d:02:74:c1:f6:ed:97:1e:d2: c9:c5:38:ca:09:e2:88:60:b2:bd:8f:8f:eb:36:ef: ff:0f:7e:04:e7:01:2d:82:10:e7:71:97:e2:4c:ec: f4:c6:ea:47:b4:a8:f5:dc:d0:3c:61:a7:c0:f3:9d: d4:bb:02:76:44:ba:91:af:be:5f:90:bf:56:2d:19: 0e:ab:16:63:3d:27:9e:b6:ee:85:bf:b3:e7:69:67: 5f:6a:36:0e:41:b5:cb:a5:3f:da:01:d1:8c:c3:b4: b6:dd:e2:a8:18:71:c5:4f:7d:1b:b6:df:1f:12:d2: a0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B8:1A:97:1B:5F:7E:3C:CB:55:9F:B9:11:30:8F:E2:54:79:F9:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/59fb37fe-5e43-39f4-a63b-2cb11dfc57a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:a9:75:4d:21:88:ed:47:ac:3a:16:e8:21:55:ff:61:cf:c9: e9:c6:9c:9e:b4:5c:1e:b7:00:b2:f5:f9:fb:bb:fb:33:c9:70: 49:1e:a2:cd:ec:b2:47:cf:a9:b7:dd:42:98:92:3e:88:8d:5b: 59:68:ec:b3:12:b2:eb:24:7b:7d:38:27:7f:71:d7:3b:dc:65: f3:75:10:5b:87:ff:64:2a:9e:ad:56:e9:ef:82:77:66:a7:79: dd:f1:83:d3:f7:dc:21:34:9a:67:11:16:1f:54:af:0e:cc:66: fb:1e:a8:4f:25:0e:19:48:a9:8a:f7:40:0e:08:85:fe:60:1c: 6b:da:34:28:b8:54:a9:ae:58:46:9a:98:9c:82:53:01:2b:bc: 00:1c:ed:b3:73:14:e7:e5:61:26:5c:82:bc:47:4f:7d:32:b6: 03:7c:7d:cd:18:8e:fa:f1:f1:24:c0:1e:13:ab:2c:4a:6d:68: df:d6:38:dc:4f:f9:27:4b:ca:b6:ac:c6:0d:d5:bb:dc:bc:e6: 69:5a:02:37:85:12:22:e2:e8:0a:f6:55:d5:25:76:28:7b:5c: 2d:df:f5:5c:54:2e:92:98:0e:45:e5:33:58:34:5b:bc:ba:1f: 4c:17:a8:32:e2:cf:44:7c:f6:aa:62:dc:21:66:62:17:d7:d7: b2:18:16:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnXHVt32s7yzZowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NmU0MzE3MjAtYTljYi00YTQ4LWFhODUtMjRhMzQ4MjhiZWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/CdfR9jqlQ2n/Im2LTHhDqPOswzSqjO0KZz vcUniQD/zw6hemVG3xpYuodHLDB140yKoMHN0hPuv1AVCOe6bNEWXgLo6m4Gch1h yYeSOuhNEzCPwW+XQIVHMuX8CvPXLCxDA3jmVmHfw22fO8Th0ECmRsgxT9DZcDXM WWMJ8nghyxptX498VdemSCUdAnTB9u2XHtLJxTjKCeKIYLK9j4/rNu//D34E5wEt ghDncZfiTOz0xupHtKj13NA8YafA853UuwJ2RLqRr75fkL9WLRkOqxZjPSeetu6F v7PnaWdfajYOQbXLpT/aAdGMw7S23eKoGHHFT30btt8fEtKgTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFES4GpcbX348y1WfuREwj+JUefnlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTlmYjM3ZmUtNWU0My0z OWY0LWE2M2ItMmNiMTFkZmM1N2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOpdU0hiO1HrDoW6CFV/2HPyenGnJ60XB63ALL1+fu7+zPJcEkeos3s skfPqbfdQpiSPoiNW1lo7LMSsuske304J39x1zvcZfN1EFuH/2Qqnq1W6e+Cd2an ed3xg9P33CE0mmcRFh9Urw7MZvseqE8lDhlIqYr3QA4Ihf5gHGvaNCi4VKmuWEaa mJyCUwErvAAc7bNzFOflYSZcgrxHT30ytgN8fc0Yjvrx8STAHhOrLEptaN/WONxP +SdLyrasxg3Vu9y85mlaAjeFEiLi6Ar2VdUldih7XC3f9VxULpKYDkXlM1g0W7y6 H0wXqDLiz0R89qpi3CFmYhfX17IYFrQ= -----END CERTIFICATE-----Generated at Thu Oct 1 13:30:29 2026 by rpki-client