$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa File: 6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa (raw, json) Hash identifier: TLWfpo/VV+3c42mVd9u9oAQLv+T4ODgBEwIYyM9jSWo= Subject key identifier: B8:BA:28:E9:04:F6:31:07:7D:70:41:E9:68:45:99:61:5F:23:D5:3D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DA6B02A716C0ED566D6F2A1BD Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:2a:71:6c:0e:d5:66:d6:f2:a1:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=8d726cbc-74ca-4be2-9bbd-464fbc15ea43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b0:c5:8d:c5:f4:0f:c5:d7:40:67:e1:93:1e: 8c:61:b4:1a:8a:15:92:2d:6d:79:75:f8:93:3f:eb: 4d:c2:a9:d5:6c:b0:21:d3:1e:09:9d:35:09:23:d3: 15:a0:63:5b:a8:ad:2f:3e:80:84:56:5d:9f:9f:36: 56:64:e7:07:dd:29:88:87:c0:96:3b:d9:cb:7d:e7: 78:eb:a7:d1:bd:f2:23:47:24:4c:0b:dd:03:27:7f: da:27:1c:4e:7b:27:e9:43:15:08:1b:21:82:87:97: 0c:5f:6b:81:b1:68:11:66:2e:a4:7f:ec:ec:5a:c6: 57:32:c8:e6:a8:08:4f:a8:36:d8:c5:19:dc:a5:20: 88:0a:e7:5b:4b:83:11:dc:5c:e8:eb:4a:23:0d:d1: 9a:37:3d:c7:03:0b:50:78:6b:93:94:97:07:d9:7f: db:c1:61:90:36:eb:6b:59:6f:10:67:9f:97:aa:b8: a6:ab:c0:02:97:31:e5:fa:c8:06:44:21:32:c4:b9: c0:81:bd:85:1e:cc:ca:9d:b6:f2:a4:44:99:23:8a: bc:91:a6:65:ec:d9:13:e8:ef:e0:7d:ff:9b:04:ce: 88:00:6a:ce:ea:13:e4:6b:b5:0d:33:74:c3:60:a5: 5b:aa:17:68:df:fc:07:80:f2:ca:1c:d7:ab:bc:48: 81:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:BA:28:E9:04:F6:31:07:7D:70:41:E9:68:45:99:61:5F:23:D5:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:cc:0c:fa:e0:3b:85:40:5f:eb:e5:7f:ce:9b:b1:58:69:9e: 42:d0:00:77:8e:2d:13:18:e3:8c:02:db:15:56:cb:69:9a:ea: 16:12:84:e9:c7:06:32:c3:4f:9c:7b:66:c4:83:52:64:78:80: 2c:b9:85:51:d8:12:e1:7e:77:f6:57:1e:e2:6a:9e:f8:1c:05: ba:8f:4c:aa:af:86:e4:a4:be:e4:66:8b:05:f9:a8:fd:32:c6: 0d:16:e6:36:2b:56:b9:a0:44:ec:8c:f2:67:54:91:18:15:04: e3:c0:92:b0:36:ef:17:4e:1e:a4:cb:ce:9b:e6:b2:6c:bd:8a: 7d:0e:47:fe:4b:57:82:a1:a4:25:6f:c8:bc:a3:38:70:b8:fe: 47:c8:be:c5:ff:65:df:26:44:de:89:5c:7a:02:52:7f:2b:50: 39:23:3b:37:61:03:45:0b:9b:94:17:89:21:f6:4a:47:ef:a8: f8:80:55:03:6d:b0:80:ec:72:78:71:36:c9:fd:ea:60:e8:1c: 6a:de:b3:42:5c:ba:1b:37:bf:4f:5f:17:0a:a3:43:23:dd:7c: f2:a1:e5:70:a4:d5:60:99:03:51:79:d0:2a:06:3b:db:e3:98: 7c:b1:42:25:9e:60:86:82:00:65:7d:2e:63:4c:14:c5:bf:a5: da:00:ad:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msCpxbA7VZtbyob0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk OGQ3MjZjYmMtNzRjYS00YmUyLTliYmQtNDY0ZmJjMTVlYTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLDFjcX0D8XXQGfhkx6MYbQaihWSLW15dfiT P+tNwqnVbLAh0x4JnTUJI9MVoGNbqK0vPoCEVl2fnzZWZOcH3SmIh8CWO9nLfed4 66fRvfIjRyRMC90DJ3/aJxxOeyfpQxUIGyGCh5cMX2uBsWgRZi6kf+zsWsZXMsjm qAhPqDbYxRncpSCICudbS4MR3Fzo60ojDdGaNz3HAwtQeGuTlJcH2X/bwWGQNutr WW8QZ5+Xqrimq8AClzHl+sgGRCEyxLnAgb2FHszKnbbypESZI4q8kaZl7NkT6O/g ff+bBM6IAGrO6hPka7UNM3TDYKVbqhdo3/wHgPLKHNervEiB9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLi6KOkE9jEHfXBB6WhFmWFfI9U9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmU1MjZjMDMtNmNhOC0z YWIzLTg0YmEtY2Q0ZTZkNGQzMWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPMDPrgO4VAX+vlf86bsVhpnkLQAHeOLRMY44wC2xVWy2ma6hYShOnH BjLDT5x7ZsSDUmR4gCy5hVHYEuF+d/ZXHuJqnvgcBbqPTKqvhuSkvuRmiwX5qP0y xg0W5jYrVrmgROyM8mdUkRgVBOPAkrA27xdOHqTLzpvmsmy9in0OR/5LV4KhpCVv yLyjOHC4/kfIvsX/Zd8mRN6JXHoCUn8rUDkjOzdhA0ULm5QXiSH2SkfvqPiAVQNt sIDscnhxNsn96mDoHGres0Jcuhs3v09fFwqjQyPdfPKh5XCk1WCZA1F50CoGO9vj mHyxQiWeYIaCAGV9LmNMFMW/pdoArfY= -----END CERTIFICATE-----Generated at Wed May 13 07:24:28 2026 by rpki-client